A new approach to safety, based on systems thinking, that is more effective, less costly, and easier to use than current techniques. Engineering has experienced a technological revolution, but the basic engineering techniques applied in safety and reliability engineering, created in a simpler, analog world, have changed very little over the years. In this groundbreaking book, Nancy Leveson proposes a new approach to safety—more suited to today's complex, sociotechnical, software-intensive world—based on modern systems thinking and systems theory. Revisiting and updating ideas pioneered by 1950s aerospace engineers in their System Safety concept, and testing her new model extensively on real-world examples, Leveson has created a new approach to safety that is more effective, less expensive, and easier to use than current techniques. Arguing that traditional models of causality are inadequate, Leveson presents a new, extended model of causation (Systems-Theoretic Accident Model and Processes, or STAMP), then shows how the new model can be used to create techniques for system safety engineering, including accident analysis, hazard analysis, system design, safety in operations, and management of safety-critical systems. She applies the new techniques to real-world events including the friendly-fire loss of a U.S. Blackhawk helicopter in the first Gulf War; the Vioxx recall; the U.S. Navy SUBSAFE program; and the bacterial contamination of a public water supply in a Canadian town. Leveson's approach is relevant even beyond safety engineering, offering techniques for “reengineering” any large sociotechnical system to improve safety and manage risk.

Engineering has experienced a technological revolution, but the basic engineering techniques applied in safety and reliability engineering, created in a simpler, analog world, have changed very little over the years. In this groundbreaking book, Nancy Leveson proposes a new approach to safety -- more suited to today's complex, sociotechnical, software-intensive world -- based on modern systems thinking and systems theory. Revisiting and updating ideas pioneered by 1950s aerospace engineers in their System Safety concept, and testing her new model extensively on real-world examples, Leveson has created a new approach to safety that is more effective, less expensive, and easier to use than current techniques. Arguing that traditional models of causality are inadequate, Leveson presents a new, extended model of causation (Systems-Theoretic Accident Model and Processes, or STAMP), then then shows how the new model can be used to create techniques for system safety engineering, including accident analysis, hazard analysis, system design, safety in operations, and management of safety-critical systems. She applies the new techniques to real-world events including the friendly-fire loss of a U.S. Blackhawk helicopter in the first Gulf War; the Vioxx recall; the U.S. Navy SUBSAFE program; and the bacterial contamination of a public water supply in a Canadian town. Leveson's approach is relevant even beyond safety engineering, offering techniques for "reengineering" any large sociotechnical system to improve safety and manage risk.

A new approach to safety, based on systems thinking, that is more effective, less costly, and easier to use than current techniques. Engineering has experienced a technological revolution, but the basic engineering techniques applied in safety and reliability engineering, created in a simpler, analog world, have changed very little over the years. In this groundbreaking book, Nancy Leveson proposes a new approach to safety—more suited to today's complex, sociotechnical, software-intensive world—based on modern systems thinking and systems theory. Revisiting and updating ideas pioneered by 1950s aerospace engineers in their System Safety concept, and testing her new model extensively on real-world examples, Leveson has created a new approach to safety that is more effective, less expensive, and easier to use than current techniques. Arguing that traditional models of causality are inadequate, Leveson presents a new, extended model of causation (Systems-Theoretic Accident Model and Processes, or STAMP), then shows how the new model can be used to create techniques for system safety engineering, including accident analysis, hazard analysis, system design, safety in operations, and management of safety-critical systems. She applies the new techniques to real-world events including the friendly-fire loss of a U.S. Blackhawk helicopter in the first Gulf War; the Vioxx recall; the U.S. Navy SUBSAFE program; and the bacterial contamination of a public water supply in a Canadian town. Leveson's approach is relevant even beyond safety engineering, offering techniques for “reengineering” any large sociotechnical system to improve safety and manage risk.

We are building systems today-and using computers to control them-that have the potential for large-scale destruction of life and environment. More than ever, software engineers and system developers, as well as their managers, must understand the issues and develop the skills needed to anticipate and prevent accidents. Nancy Leveson examines what is currently known about building safe electromechanical systems and looks at past accidents to see what practical lessons can be applied to new computer-controlled systems.

We all know that safety should be an integral part of the systems that we build and operate. The public demands that they are protected from accidents, yet industry and government do not always know how to reach this common goal. This book gives engineers and managers working in companies and governments around the world a pragmatic and reasonable approach to system safety and risk assessment techniques. It explains in easy-to-understand language how to design workable safety management systems and implement tested solutions immediately. The book is intended for working engineers who know that they need to build safe systems, but aren’t sure where to start. To make it easy to get started quickly, it includes numerous real-life engineering examples. The book’s many practical tips and best practices explain not only how to prevent accidents, but also how to build safety into systems at a sensible price. The book also includes numerous case studies from real disasters that describe what went wrong and the lessons learned. See What’s New in the Second Edition: New chapter on developing government safety oversight programs and regulations, including designing and setting up a new safety regulatory body, developing safety regulatory oversight functions and governance, developing safety regulations, and how to avoid common mistakes in government oversight Significantly expanded chapter on safety management systems, with many practical applications from around the world and information about designing and building robust safety management systems, auditing them, gaining internal support, and creating a safety culture New and expanded case studies and "Notes from Nick’s Files" (examples of practical applications from the author’s extensive experience) Increased international focus on world-leading practices from multiple industries with practical examples, common mistakes to avoid, and new thinking about how to build sustainable safety management systems New material on safety culture, developing leading safety performance indicators, safety maturity model, auditing safety management systems, and setting up a safety knowledge management system

The essential guide to blending safety and health with economical engineering Over time, the role of the engineer has evolved into a complex combination of duties and responsibilities. Modern engineers are required not only to create products and environments, but to make them safe and economical as well. Safety and Health for Engineers, Second Edition is a comprehensive guide that helps engineers reconcile safety and economic concerns using the latest cost-effective methods of ensuring safety in all facets of their work. It addresses the fundamentals of safety, legal aspects, hazard recognition, the human element of safety, and techniques for managing safety in engineering decisions. Like its successful predecessor, this Second Edition contains a broad range of topics and examples, detailed references to information and standards, real-world application exercises, and a significant bibliography of books for each chapter. Inside this indispensable resource, you'll find: * The duties and legal responsibilities for which engineers are accountable * Updated safety laws and regulations and their enforcement agencies * An in-depth study of hazards and their control * A thorough discussion of human behavior, capabilities, and limitations * Key instruction on managing safety and health through risk management, safety analyses, and safety plans and programs Additionally, Safety and Health for Engineers includes the latest legal considerations, new risk analysis methods, system safety and decision-making tools, and today's concepts and methods in ergonomic design. It also contains revised reference figures and tables, OSHA permissible exposure limits, and updated examples and exercises taken from real cases that challenged engineering designs. Written for engineers, plant managers, safety professionals, and students, Safety and Health for Engineers, Second Edition provides the information and tools you need to unite health and safety with economical engineering for safer technological solutions.

Engineering has experienced a technological revolution, but the basic engineeringtechniques applied in safety and reliability engineering, created in a simpler, analog world, havechanged very little over the years. In this groundbreaking book, Nancy Leveson proposes a newapproach to safety--more suited to today's complex, sociotechnical, software-intensive world--basedon modern systems thinking and systems theory. Revisiting and updating ideas pioneered by 1950saerospace engineers in their System Safety concept, and testing her new model extensively onreal-world examples, Leveson has created a new approach to safety that is more effective, lessexpensive, and easier to use than current techniques. Arguing that traditional models of causalityare inadequate, Leveson presents a new, extended model of causation (Systems-Theoretic AccidentModel and Processes, or STAMP), then then shows how the new model can be used to create techniquesfor system safety engineering, including accident analysis, hazard analysis, system design, safetyin operations, and management of safety-critical systems. She applies the new techniques toreal-world events including the friendly-fire loss of a U.S. Blackhawk helicopter in the first GulfWar; the Vioxx recall; the U.S. Navy SUBSAFE program; and the bacterial contamination of a publicwater supply in a Canadian town. Leveson's approach is relevant even beyond safety engineering,offering techniques for "reengineering" any large sociotechnical system to improve safetyand manage risk.

A novel, model-driven approach to security requirements engineering that focuses on socio-technical systems rather than merely technical systems. Security requirements engineering is especially challenging because designers must consider not just the software under design but also interactions among people, organizations, hardware, and software. Taking this broader perspective means designing a secure socio-technical system rather than a merely technical system. This book presents a novel, model-driven approach to designing secure socio-technical systems. It introduces the Socio-Technical Modeling Language (STS-ML) and presents a freely available software tool, STS-Tool, that supports this design approach through graphical modeling, automated reasoning capabilities to verify the models constructed, and the automatic derivation of security requirements documents. After an introduction to security requirements engineering and an overview of computer and information security, the book presents the STS-ML modeling language, introducing the modeling concepts used, explaining how to use STS-ML within the STS method for security requirements, and providing guidelines for the creation of models. The book then puts the STS approach into practice, introducing the STS-Tool and presenting two case studies from industry: an online collaborative platform and an e-Government system. Finally, the book considers other methods that can be used in conjunction with the STS method or that constitute an alternative to it. The book is suitable for course use or as a reference for practitioners. Exercises, review questions, and problems appear at the end of each chapter.

A one-stop reference guide to design for safety principles and applications Design for Safety (DfSa) provides design engineers and engineering managers with a range of tools and techniques for incorporating safety into the design process for complex systems. It explains how to design for maximum safe conditions and minimum risk of accidents. The book covers safety design practices, which will result in improved safety, fewer accidents, and substantial savings in life cycle costs for producers and users. Readers who apply DfSa principles can expect to have a dramatic improvement in the ability to compete in global markets. They will also find a wealth of design practices not covered in typical engineering books—allowing them to think outside the box when developing safety requirements. Design Safety is already a high demand field due to its importance to system design and will be even more vital for engineers in multiple design disciplines as more systems become increasingly complex and liabilities increase. Therefore, risk mitigation methods to design systems with safety features are becoming more important. Designing systems for safety has been a high priority for many safety-critical systems—especially in the aerospace and military industries. However, with the expansion of technological innovations into other market places, industries that had not previously considered safety design requirements are now using the technology in applications. Design for Safety: Covers trending topics and the latest technologies Provides ten paradigms for managing and designing systems for safety and uses them as guiding themes throughout the book Logically defines the parameters and concepts, sets the safety program and requirements, covers basic methodologies, investigates lessons from history, and addresses specialty topics within the topic of Design for Safety (DfSa) Supplements other books in the series on Quality and Reliability Engineering Design for Safety is an ideal book for new and experienced engineers and managers who are involved with design, testing, and maintenance of safety critical applications. It is also helpful for advanced undergraduate and postgraduate students in engineering. Design for Safety is the second in a series of “Design for” books. Design for Reliability was the first in the series with more planned for the future.

The Global Engineers: Building a Safe and Equitable World Together, is inspired by the opportunities for engineers to contribute to global prosperity. This book presents a vision for Global Engineering, and identifies that engineers should be concerned with the unequal and unjust distribution of access to basic services, such as water, sanitation, energy, food, transportation, and shelter. As engineers, we should place an emphasis on identifying the drivers, determinants, and solutions to increasing equitable access to reliable services. Global Engineering envisions a world where everyone has safe water, sanitation, energy, food, shelter, and infrastructure, and can live in health, dignity, and prosperity. This book seeks to examine the role and ultimately the impact of engineers in global development. Engineers are solutions-oriented people. We enjoy the opportunity to identify a product or need, and design appropriate technical solutions. However, the structural and historical barriers to global prosperity requires that Engineers focus more broadly on improving the tools and practice of poverty reduction and that we include health, economics, policy, and governance as relevant expertise with which we are conversant. Engineers must become activists and advocates, rejecting ahistorical technocratic approaches that suggest poverty can be solved without justice or equity. Engineers must leverage our professional skills and capacity to generate evidence and positive impact toward rectifying inequalities and improving lives. Half of this book is dedicated to profiles of engineers and other technical professionals who have dedicated their careers to searching for solutions to global development challenges. These stories introduce the reader to the diverse opportunities and challenges in Global Engineering.