Therac-25 Public Testing
Therac-25 Public Testing
Essentially, the operator received the wrong message and continue to give
treatment to the patient even after
why
A "bug" in the software caused the issue. Operators
could enter treatment data quickly, but the hardware
needed time to adjust. If the operator made a mistake
and corrected it rapidly, the software wouldn't wait for
the hardware to catch up before delivering the
incorrect dose.
“From the start, the Therac-25 was designed to be
controlled by software and did not incorporate the level
of hardware safety devices found on the early
machines.”
How
Two factors were to blame:
Systems engineering: The Therac-25 relied solely
on software for safety, lacking essential hardware
safeguards like those in previous models.
The Therac-25's error codes confused operators The Therac-25 lacked hardware safeguards that
So user interfaces should provide clear feedback and previous models had, making it vulnerable to
error messages. software bugs.
The user manual also has to include every So, we have to have redundant safety measures,
malfunction messages hardware safeguards in this case
References