670:
1251:
1226:
66:
179:
25:
1257:
1216:
400:
She has published over 200 research papers and is author of two books, "Safeware: System Safety and
Computers" published in 1995 by Addison-Wesley and "Engineering a Safer World" published in 2012 by MIT Press. She consults extensively in many industries on the ways to prevent accidents. In 2005, she
392:
In 1999, she received the ACM Allen Newell Award for outstanding computer science research and in 1995 the AIAA Information
Systems Award for "developing the field of software safety and for promoting responsible software and system engineering practices where life and property are at stake." She was
389:
and also
Professor of Engineering Systems at MIT. Prof. Leveson conducts research on the topics of system safety, software safety, software and system engineering, and human-computer interaction.
207:
1370:
570:
1330:
1296:
412:
83:
632:
374:
90:
1335:
367:
702:
211:
1360:
1385:
1355:
1345:
404:
She developed the STPA (System
Theoretic Process Analysis) and STAMP (System Theoretic Accident Model and Processes) methodologies for
1340:
425:
358:
1289:
187:
74:
1365:
1320:
1219:
1085:
1014:
522:
496:
475:
437:
330:
319:
261:
141:
1380:
908:
811:
479:
233:
113:
1282:
363:
695:
487:
346:
1375:
1350:
888:
755:
740:
458:
298:
280:
240:
160:
120:
52:
558:
334:
394:
1325:
1044:
971:
961:
806:
735:
247:
127:
38:
638:
1229:
1095:
1024:
966:
688:
1034:
893:
760:
229:
109:
956:
951:
765:
1151:
999:
994:
946:
923:
903:
203:
583:
1156:
1146:
1059:
858:
841:
750:
338:
192:
1009:
853:
196:
79:
1315:
1064:
821:
816:
342:
883:
836:
581:
370:
1181:
1019:
878:
868:
780:
725:
711:
415:
for her development of STAMP and other system safety and accident modeling analysis tools.
254:
134:
8:
1201:
1186:
1054:
918:
826:
770:
466:
1270:
1191:
831:
669:
429:
44:
1105:
863:
603:
492:
471:
454:
433:
405:
349:(TCAS) for the avoidance of midair collisions between aircraft and problems with the
620:
1176:
1120:
898:
790:
785:
595:
535:
329:
Leveson gained her degrees (in computer science, mathematics and management) from
1196:
1049:
1029:
913:
775:
218:
98:
571:
System Safety: Systems
Theoretic Process Analysis (STPA) Intro, Basic Components
93:. Contentious material about living persons that is unsourced or poorly sourced
1266:
1100:
1004:
745:
450:
599:
1309:
1080:
848:
607:
323:
315:
1250:
675:
582:
Hanan
Altabbakh; Mohammad A. AlKazimi; Susan Murray; Katie Grantham (2014),
1115:
1110:
1039:
386:
1125:
1090:
680:
584:"STAMP – Holistic system safety approach or just another risk model?"
350:
445:
65:
873:
660:
619:
Partnership for
Systems Approaches to Safety and Security (PSASS),
730:
634:
217:
from the article and its talk page, especially if potentially
930:
559:
Nancy
Leveson: MIT department of Aeronautics and Astronautics
467:
Engineering a Safer World: Systems
Thinking Applied to Safety
1371:
Members of the United States National Academy of Engineering
1256:
1141:
664:
655:
518:
1265:
This article about an American scientist in academia is a
519:
Nancy Leveson: Professor of Aeronautics and Astronautics
333:, including her PhD in 1980. Previously she worked at
401:
received the ACM Sigsoft Outstanding Research Award.
588:
Journal of Loss Prevention in the Process Industries
413:
IEEE Medal for Environmental and Safety Technologies
397:(NAE) in 2000 for contributions to software safety.
318:and a professor of Aeronautics and Astronautics at
1307:
424:Erik Hollnagel, David D. Woods, Nancy Leveson,
1290:
696:
426:Resilience Engineering: Concepts and Precepts
1331:University of California, Los Angeles alumni
488:An introduction to system safety engineering
491:. Cambridge, Massachusetts: The MIT Press.
53:Learn how and when to remove these messages
1297:
1283:
703:
689:
668:
210:about living persons that is unsourced or
359:IEEE Transactions on Software Engineering
299:Learn how and when to remove this message
281:Learn how and when to remove this message
161:Learn how and when to remove this message
1336:University of California, Irvine faculty
894:Software development process/methodology
710:
385:Leveson is Professor of Aeronautics and
356:Leveson has been editor of the journal
1308:
684:
523:Massachusetts Institute of Technology
446:Safeware: System Safety and Computers
341:as a faculty member. She has studied
331:University of California, Los Angeles
320:Massachusetts Institute of Technology
1244:
1215:
909:Software verification and validation
812:Component-based software engineering
172:
59:
18:
13:
1361:American women computer scientists
362:. She has held memberships in the
347:Traffic Collision Avoidance System
14:
1397:
1386:American academic scientist stubs
1356:American academic journal editors
1346:MIT School of Engineering faculty
889:Software configuration management
756:Search-based software engineering
741:Experimental software engineering
649:
34:This article has multiple issues.
1341:University of Washington faculty
1255:
1249:
1225:
1224:
1214:
656:Nancy Leveson's Home Page at MIT
536:"Medical Devices: The Therac-25"
335:University of California, Irvine
177:
64:
23:
395:National Academy of Engineering
42:or discuss these issues on the
736:Empirical software engineering
625:
613:
575:
563:
552:
528:
512:
1:
505:
373:, System Safety Society, and
314:is an American specialist in
91:secondary or tertiary sources
1366:American computer scientists
1321:American non-fiction writers
1269:. You can help Knowledge by
761:Site reliability engineering
380:
188:biography of a living person
97:, especially if potentially
75:biography of a living person
7:
1381:21st-century American women
766:Social software engineering
676:Medical Devices - Therac 25
353:radiation therapy machine.
215:must be removed immediately
95:must be removed immediately
16:American computer scientist
10:
1402:
1243:
904:Software quality assurance
411:In 2020, she received the
316:system and software safety
1210:
1169:
1134:
1073:
987:
980:
939:
799:
718:
600:10.1016/j.jlp.2014.07.010
480:Open access pdf downloads
1376:American women academics
1351:Computer science writers
1060:Model-driven engineering
859:Functional specification
842:Software incompatibility
751:Requirements engineering
418:
393:elected a member of the
339:University of Washington
854:Enterprise architecture
485:Leveson, Nancy (2023).
430:Ashgate Publishing, Ltd
343:safety-critical systems
1065:Round-trip engineering
822:Backward compatibility
817:Software compatibility
637:, 2020, archived from
202:Please help by adding
89:Please help by adding
1326:Formal methods people
884:Software architecture
837:Forward compatibility
1182:Computer engineering
879:Software archaeology
869:Programming paradigm
781:Software maintenance
726:Computer programming
712:Software engineering
667:Bibliography Server
208:Contentious material
1202:Systems engineering
1187:Information science
967:Service orientation
919:Structured analysis
827:Compatibility layer
771:Software deployment
621:MIT STAMP workshops
569:MIT Lecture notes,
470:. MIT Press, 2011.
78:relies too much on
1192:Project management
957:Object orientation
924:Essential analysis
832:Compatibility mode
464:Nancy G. Leveson,
443:Nancy G. Leveson,
1278:
1277:
1238:
1237:
1165:
1164:
1106:Information model
1010:Incremental model
864:Modeling language
641:on March 25, 2019
498:978-0-262-37675-4
482:of book chapters.
476:978-0-262-01662-9
438:978-0-754-68136-6
406:accident analysis
309:
308:
301:
291:
290:
283:
265:
191:needs additional
171:
170:
163:
145:
57:
1393:
1299:
1292:
1285:
1261:
1260:
1259:
1253:
1245:
1228:
1227:
1218:
1217:
1177:Computer science
985:
984:
899:Software quality
791:Systems analysis
786:Software testing
705:
698:
691:
682:
681:
672:
661:Nancy G. Leveson
643:
642:
629:
623:
617:
611:
610:
579:
573:
567:
561:
556:
550:
549:
547:
546:
532:
526:
516:
371:Computer Society
312:Nancy G. Leveson
304:
297:
286:
279:
275:
272:
266:
264:
223:
204:reliable sources
181:
180:
173:
166:
159:
155:
152:
146:
144:
103:
68:
60:
49:
27:
26:
19:
1401:
1400:
1396:
1395:
1394:
1392:
1391:
1390:
1306:
1305:
1304:
1303:
1254:
1248:
1241:
1239:
1234:
1206:
1197:Risk management
1161:
1130:
1069:
1050:Waterfall model
1020:Prototype model
1015:Iterative model
976:
952:Aspect-oriented
935:
914:Software system
795:
776:Software design
714:
709:
652:
647:
646:
631:
630:
626:
618:
614:
580:
576:
568:
564:
557:
553:
544:
542:
534:
533:
529:
517:
513:
508:
499:
421:
383:
305:
294:
293:
292:
287:
276:
270:
267:
230:"Nancy Leveson"
224:
222:
201:
182:
178:
167:
156:
150:
147:
110:"Nancy Leveson"
104:
102:
88:
84:primary sources
69:
28:
24:
17:
12:
11:
5:
1399:
1389:
1388:
1383:
1378:
1373:
1368:
1363:
1358:
1353:
1348:
1343:
1338:
1333:
1328:
1323:
1318:
1302:
1301:
1294:
1287:
1279:
1276:
1275:
1262:
1236:
1235:
1233:
1232:
1222:
1211:
1208:
1207:
1205:
1204:
1199:
1194:
1189:
1184:
1179:
1173:
1171:
1170:Related fields
1167:
1166:
1163:
1162:
1160:
1159:
1154:
1149:
1144:
1138:
1136:
1132:
1131:
1129:
1128:
1123:
1118:
1113:
1108:
1103:
1101:Function model
1098:
1093:
1088:
1083:
1077:
1075:
1071:
1070:
1068:
1067:
1062:
1057:
1052:
1047:
1042:
1037:
1032:
1027:
1022:
1017:
1012:
1007:
1005:Executable UML
1002:
997:
991:
989:
982:
978:
977:
975:
974:
969:
964:
959:
954:
949:
943:
941:
937:
936:
934:
933:
928:
927:
926:
916:
911:
906:
901:
896:
891:
886:
881:
876:
871:
866:
861:
856:
851:
846:
845:
844:
839:
834:
829:
824:
814:
809:
803:
801:
797:
796:
794:
793:
788:
783:
778:
773:
768:
763:
758:
753:
748:
746:Formal methods
743:
738:
733:
728:
722:
720:
716:
715:
708:
707:
700:
693:
685:
679:
678:
673:
658:
651:
650:External links
648:
645:
644:
624:
612:
574:
562:
551:
527:
510:
509:
507:
504:
503:
502:
497:
483:
462:
451:Addison-Wesley
441:
420:
417:
382:
379:
307:
306:
289:
288:
212:poorly sourced
185:
183:
176:
169:
168:
72:
70:
63:
58:
32:
31:
29:
22:
15:
9:
6:
4:
3:
2:
1398:
1387:
1384:
1382:
1379:
1377:
1374:
1372:
1369:
1367:
1364:
1362:
1359:
1357:
1354:
1352:
1349:
1347:
1344:
1342:
1339:
1337:
1334:
1332:
1329:
1327:
1324:
1322:
1319:
1317:
1316:Living people
1314:
1313:
1311:
1300:
1295:
1293:
1288:
1286:
1281:
1280:
1274:
1272:
1268:
1263:
1258:
1252:
1247:
1246:
1242:
1231:
1223:
1221:
1213:
1212:
1209:
1203:
1200:
1198:
1195:
1193:
1190:
1188:
1185:
1183:
1180:
1178:
1175:
1174:
1172:
1168:
1158:
1155:
1153:
1150:
1148:
1145:
1143:
1140:
1139:
1137:
1133:
1127:
1124:
1122:
1121:Systems model
1119:
1117:
1114:
1112:
1109:
1107:
1104:
1102:
1099:
1097:
1094:
1092:
1089:
1087:
1084:
1082:
1079:
1078:
1076:
1072:
1066:
1063:
1061:
1058:
1056:
1053:
1051:
1048:
1046:
1043:
1041:
1038:
1036:
1033:
1031:
1028:
1026:
1023:
1021:
1018:
1016:
1013:
1011:
1008:
1006:
1003:
1001:
998:
996:
993:
992:
990:
988:Developmental
986:
983:
979:
973:
970:
968:
965:
963:
960:
958:
955:
953:
950:
948:
945:
944:
942:
938:
932:
929:
925:
922:
921:
920:
917:
915:
912:
910:
907:
905:
902:
900:
897:
895:
892:
890:
887:
885:
882:
880:
877:
875:
872:
870:
867:
865:
862:
860:
857:
855:
852:
850:
849:Data modeling
847:
843:
840:
838:
835:
833:
830:
828:
825:
823:
820:
819:
818:
815:
813:
810:
808:
805:
804:
802:
798:
792:
789:
787:
784:
782:
779:
777:
774:
772:
769:
767:
764:
762:
759:
757:
754:
752:
749:
747:
744:
742:
739:
737:
734:
732:
729:
727:
724:
723:
721:
717:
713:
706:
701:
699:
694:
692:
687:
686:
683:
677:
674:
671:
666:
662:
659:
657:
654:
653:
640:
636:
635:
628:
622:
616:
609:
605:
601:
597:
593:
589:
585:
578:
572:
566:
560:
555:
541:
537:
531:
524:
520:
515:
511:
500:
494:
490:
489:
484:
481:
477:
473:
469:
468:
463:
460:
459:0-201-11972-2
456:
452:
448:
447:
442:
439:
435:
431:
427:
423:
422:
416:
414:
409:
407:
402:
398:
396:
390:
388:
378:
376:
372:
369:
365:
361:
360:
354:
352:
348:
344:
340:
336:
332:
327:
325:
324:United States
321:
317:
313:
303:
300:
285:
282:
274:
263:
260:
256:
253:
249:
246:
242:
239:
235:
232: –
231:
227:
226:Find sources:
220:
216:
213:
209:
205:
199:
198:
194:
189:
184:
175:
174:
165:
162:
154:
143:
140:
136:
133:
129:
126:
122:
119:
115:
112: –
111:
107:
106:Find sources:
100:
96:
92:
86:
85:
81:
76:
71:
67:
62:
61:
56:
54:
47:
46:
41:
40:
35:
30:
21:
20:
1271:expanding it
1264:
1240:
1116:Object model
1111:Metamodeling
1040:Spiral model
940:Orientations
639:the original
633:
627:
615:
591:
587:
577:
565:
554:
543:. Retrieved
540:ResearchGate
539:
530:
514:
486:
465:
444:
410:
403:
399:
391:
387:Astronautics
384:
357:
355:
345:such as the
328:
311:
310:
295:
277:
271:January 2020
268:
258:
251:
244:
237:
225:
214:
197:verification
190:
157:
151:October 2012
148:
138:
131:
124:
117:
105:
94:
77:
50:
43:
37:
36:Please help
33:
807:Abstraction
594:: 109–119,
101:or harmful.
1310:Categories
1126:View model
1091:Data model
545:2017-11-18
506:References
337:, and the
241:newspapers
121:newspapers
80:references
39:improve it
1135:Languages
608:0950-4230
432:., 2007.
381:Biography
351:Therac-25
193:citations
45:talk page
1230:Category
1096:ER model
962:Ontology
874:Software
800:Concepts
453:, 1995.
219:libelous
99:libelous
1220:Commons
1045:V-model
322:(MIT),
255:scholar
135:scholar
981:Models
731:DevOps
719:Fields
606:
525:, USA.
495:
474:
457:
436:
257:
250:
243:
236:
228:
137:
130:
123:
116:
108:
1157:SysML
1081:SPICE
1074:Other
1035:Scrum
995:Agile
947:Agile
931:CI/CD
419:Books
262:JSTOR
248:books
186:This
142:JSTOR
128:books
73:This
1267:stub
1142:IDEF
1086:CMMI
972:SDLC
665:DBLP
604:ISSN
493:ISBN
472:ISBN
455:ISBN
434:ISBN
375:AIAA
368:IEEE
234:news
195:for
114:news
1152:USL
1147:UML
1025:RAD
1000:EUP
663:at
596:doi
478:.
364:ACM
82:to
1312::
1055:XP
1030:UP
602:,
592:32
590:,
586:,
538:.
521:,
449:.
428:.
408:.
377:.
366:,
326:.
206:.
48:.
1298:e
1291:t
1284:v
1273:.
704:e
697:t
690:v
598::
548:.
501:.
461:.
440:.
302:)
296:(
284:)
278:(
273:)
269:(
259:·
252:·
245:·
238:·
221:.
200:.
164:)
158:(
153:)
149:(
139:·
132:·
125:·
118:·
87:.
55:)
51:(
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.
