Академический Документы
Профессиональный Документы
Культура Документы
Identify Compute
Prepare test Apply tests to observed
operational data set system
profiles reliability
Number of
inputs
...
Input classes
t1 t2 t3 t4 t5
Time
t1 t2 t3 t4 t5
Time
= Measured reliability
Fitted reliability
model curve
Required
reliability
Estimated Time
time of reliability
achievement
administerInsulin
or
Contradiction
Contradiction Contradiction
currentDose =
currentDose = 0
maxDose
assign assign
if statement 2 currentDose=
currentDose= 0 maxDose
not executed
if statement 2 if statement 2
then branch else branch
executed executed
EVIDENCE
EVIDENCE
Claim: The maximum single dose computed by the insulin pump will not exceed maxDose.
Evidence: Safety argument for insulin pump as shown in Figure 24.7
Evidence: Test data sets for insulin pump
Evidence: Static analysis report for insulin pump software
Argument: The safety argument presented shows that the maximum dose of insulin that can be
computed is equal to maxDose.
In 400 tests, the value of Dose was correctly computed and never exceeded maxDose.
The static analysis of the control software revealed no anomalies.
Overall, it is reasonable to assume that the claim is justified.
In normal
operation, the If the software fails,
maximum dose the maximum dose
computed will not computed will not
exceed maxDose exceed maxDose