[SystemSafety] A Critical-System Assurance Manifesto

[Derek M Jones]

Peter,

> will not hit a defective region in the input space (which could in
> principle be the aggregate of many faults).

A post on an interesting pattern I found in faults/input distribution
has been on my list of things to do for a while:
http://shape-of-code.coding-guidelines.com/2017/12/12/the-shadow-of-the-input-distribution/

> 
> Peter Bishop
> 
> On 11/12/2017 14:47, Derek M Jones wrote:
>> Peter,
>>
>>> * Statistical Evaluation
>> Chapter 1, the Urn model.
>>
>> The empirical evidence is that the Urn model is not a good
>> model of faults discovery.
>>
>> The Urn model gives equal weight to each item it contains.
>>
>> Some faults are more likely to be discovered than others, while
>> other faults are very rarely seen.  This is not the Urn model
>> view of the world.
>>
>> The Urn model has lots of mathematical history associated with
>> it and appears in all the probability text books; which makes it
>> a favorite of professors.
>>
>> Isn't it about time that people started using a model with a
>> closer connection with reality?
>>
> 

-- 
Derek M. Jones           Software analysis
tel: +44 (0)1252 520667  blog:shape-of-code.coding-guidelines.com