http://www.ieee-pses.org/symposium
          http://www.emc2004.org/


From: Brian O'Connell [mailto:[email protected]]
Sent: Tuesday, August 17, 2004 1:00 PM
To: [email protected]; [email protected]
Subject: RE: Which Operating System - 2000 vs XP to use?


Good People

I got wayyyyy too much OS theory in school (was a CS major).

SNIP

My final word on this subject (honest...). If your lab is accredited to IEC
17025, and the auditor requires software verification, validation, and
traceability for instrument control and/or numerics; then you must have
access to, or knowledge of, system internals. The most simple solution, for
people whose job/hobby is not systems administration, is to control the
instruments using command-line Linux (or DOS if you do not need USB or other
modern I/O) on a dedicated box, and export the data to an appropriate
machine loaded with your number cruncher/graphing apps, typically an XP box.
Stand-alone numerics is easilly tested using "black-box" and associated
regression tests. Important note: the (US) FDA will always require full
validaton.

luck,
Brian



Brian:

Could you please explain (in beginner's terms) what are the concerns
regarding "validation" of the software used in a data acquisition system or
an OS.

About a decade ago, I had gotten just a hint of exposure to software control
at General Dynamics. At that time, my area of GD typically used HP "desktop
controllers" like the HP-9836, running HP Unix or Pascal or Basic. We used
data acquisition applications that were either self-authored or purchased
>from HP. GD's QA people had required that all software be registered with
them, and that working copies be periodically audited for changes by
performance of a digital checksum on the file.

The HP software was proprietary, and we couldn't see anything about how the
internals worked. The QA control was only concerned with "creeping code
shift"; that is, undocumented changes made on the working copy of the code.
As far as I know, they never tried investigate any deeper.

I validated the operation of the HP data acquisition code by using the
technique, now described in MIL-STD-461E, of injecting known signal levels
into the probe end of the coax cable and seeing if the acquisition system
would output the correct frequency and amplitude data. (I did the same for
the self-authored code, but this was very redundant, since that code had
been very rigorously verified as module by module went together.)
Regardless, with a few hours time, I could feel very certain that the code
was yielding correct results.

But your comments about "validation" give me a chill suspicion that I was
blissfully ignorant of something important, something I still don't see in
hindsight! Do current auditing standards require far more samples to justify
confidence? How many samples would you need?

So what is involved with proving confidence in an OS? I know that HP simply
stated that their (acquisition) code was proprietary, and that we would just
have to trust them that everything was as it should be. And nobody ever
thought to question their OS. But what would you have to do to validate an
OS? Are you saying that confidence requires knowing that an OS yields the
same result for 10^9 square-root operations? Or is 10^15 needed? Does every
algorithm need to be examined and proved? Why would using a CLI be any more
trustworthy than using a GUI?

Using these standards, could we even prove confidence in a hand-held
calculator? What about the firmware in a printer? How confident are we that
it will always print "47 dBuV" every time we send that data to it? How far
does traceability need to go? Do you need to document the origin and
chemical composition of the graphite in a pencil, or do you just accept that
the pencil is whatever it is, so long as it makes marks you can read?

As you can see, I'm groping at the concepts and definitions.


Regards,

Ed

Ed Price
[email protected]     WB6WSN
NARTE Certified EMC Engineer & Technician
Electromagnetic Compatibility Lab
Cubic Defense Applications
San Diego, CA USA
858-505-2780 (Voice)
858-505-1583 (Fax)
Military & Avionics EMC Is Our Specialty



This message is from the IEEE Product Safety Engineering Society
emc-pstc discussion list.

IEEE PSES Main Website:  http://www.ieee-pses.org/

To post a message send your e-mail to [email protected]

Instructions for use of the list server:

    http://listserv.ieee.org/listserv/request/user-guide.html

List rules: http://www.ieee-pses.org/listrules.html

For help, send mail to the list administrators:

     Ron Pickard:              [email protected]
     Dave Heald:               [email protected]

For policy questions, send mail to:

     Richard Nute:           [email protected]
     Jim Bacher:             [email protected]

All emc-pstc postings are archived and searchable on the web at:

    http://www.ieeecommunities.org/emc-pstc

Reply via email to