{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T04:25:05Z","timestamp":1790051105187,"version":"4.0.1"},"reference-count":44,"publisher":"Elsevier BV","issue":"4","license":[{"start":{"date-parts":[[2004,4,1]],"date-time":"2004-04-01T00:00:00Z","timestamp":1080777600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Safety Science"],"published-print":{"date-parts":[[2004,4]]},"DOI":"10.1016\/s0925-7535(03)00047-x","type":"journal-article","created":{"date-parts":[[2003,9,16]],"date-time":"2003-09-16T22:22:48Z","timestamp":1063750968000},"page":"237-270","source":"Crossref","is-referenced-by-count":1816,"title":["A new accident model for engineering safer systems"],"prefix":"10.1016","volume":"42","author":[{"given":"Nancy","family":"Leveson","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/S0925-7535(03)00047-X_BIB1","unstructured":"Aeronautica Civil of the Republic of Colombia, 1995. Control Flight into Terrain: American Airlines Flight 965, Final Report of Aircraft Accident: American Airlines Flight 965, 20 December."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB2","series-title":"An Introduction to Cybernetics","author":"Ashby","year":"1956"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB3","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1016\/0160-791X(87)90028-5","article-title":"Bhopal","volume":"9","author":"Ayres","year":"1987","journal-title":"Technology in Society"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB4","doi-asserted-by":"crossref","unstructured":"Bachelder, E., Leveson, N.G., 2001. Describing and probing complex system behavior: a graphical approach. In: Aviation Safety Conference, Society of Automotive Engineers, Seattle.","DOI":"10.4271\/2001-01-2646"},{"issue":"2","key":"10.1016\/S0925-7535(03)00047-X_BIB5","first-page":"67","article-title":"Accident investigations","volume":"7","author":"Benner","year":"1975","journal-title":"Journal of Safety Research"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB6","series-title":"The Bhopal Tragedy","author":"Bogart","year":"1989"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB7","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1016\/0001-6918(92)90019-A","article-title":"Dynamic decision making","volume":"81","author":"Brehmer","year":"1992","journal-title":"Acta Psychologica"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB8","series-title":"Advanced Technology Aircraft Safety Survey Report","year":"1996"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB9","series-title":"Systems Thinking, Systems Practice","author":"Checkland","year":"1981"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB10","doi-asserted-by":"crossref","first-page":"89","DOI":"10.1080\/00207727008920220","article-title":"Every good regulator of a system must be a model of that system","volume":"1","author":"Conant","year":"1970","journal-title":"International Journal of System Science"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB11","doi-asserted-by":"crossref","unstructured":"Cook, R.I., 1996. Verite, abstraction, and ordinateur systems in the evolution of complex process control. In: 3rd Annual Symposium on Human Interaction with Complex Systems (HICS \u201896), Dayton, OH.","DOI":"10.1109\/HUICS.1996.549490"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB12","doi-asserted-by":"crossref","first-page":"59","DOI":"10.1177\/001872086200400201","article-title":"Dynamic decision theory and probabilistic information processing","volume":"4","author":"Edwards","year":"1962","journal-title":"Human Factors"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB13","series-title":"Industrial Dynamics","author":"Forrester","year":"1961"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB14","unstructured":"Fujita, Y. 1991. What Shape Operator Performance? JAERI Human Factors Meeting, Tokyo."},{"issue":"4","key":"10.1016\/S0925-7535(03)00047-X_BIB15","doi-asserted-by":"crossref","first-page":"1982","DOI":"10.1002\/prsb.720010404","article-title":"Human problems with computer control","volume":"1","author":"Kletz","year":"1982","journal-title":"Plant\/Operations Progress"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB25","series-title":"Decision Making in Action: Models and Methods","year":"1993"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB16","unstructured":"Ladd, J., 1987. Bhopal: An Essay on Moral Responsibility and Civic Virtue. Department of Philosophy, Brown University, RI."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB17","series-title":"New Technology and Human Error","first-page":"181","article-title":"Occupational accident research and systems approach","author":"Leplat","year":"1987"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB18","doi-asserted-by":"crossref","unstructured":"Leveson, N.G., 1994. High-Pressure Steam Engines and Computer Software. IEEE Computer, October 1994 (keynote address from IEEE\/ACM International Conference on Software Engineering, 1992, Melbourne, Australia). Available from <http:\/\/sunnyday.mit.edu>.","DOI":"10.1109\/2.318597"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB19","series-title":"Safeware: System Safety and Computers","author":"Leveson","year":"1995"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB20","unstructured":"Leveson, N.G., 2001. Evaluating Accident Models using Recent Aerospace Accidents, Technical Report, MIT Dept. of Aeronautics and Astronautics. Available from <http:\/\/sunnyday.mit.edu\/accidents>."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB21","unstructured":"Leveson, N.G., Allen,P., Storey, M.A., 2002. The analysis of a friendly fire accident using a systems model of accidents. In: 20th International Conference on System Safety."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB22","unstructured":"Leveson, N.G., Daouk, M., Dulac, N., Marais, K. Applying STAMP in accident analysis. Available from <http:\/\/sunnyday.mit.edu\/accidents\/walkerton.pdf> (submitted for publication)."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB23","unstructured":"Mackall, D.A., 1988. Development and Flight Test Experiences with a Flight-critical Digital Control System. NASA Technical Paper 2857. Dryden Flight Research Facility, National Aeronautics and Space Administration."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB24","series-title":"Systems Concepts: Lectures on Contemporary Approaches to Systems","first-page":"1","article-title":"Introduction","author":"Miles","year":"1973"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB26","series-title":"Normal Accidents: Living with High-Risk Technology","author":"Perrow","year":"1984"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB27","series-title":"Cognitive Engineering in the Aviation Domain","first-page":"287","author":"Plat","year":"2000"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB28","series-title":"Human Factors in Hazardous Situations","first-page":"1","article-title":"Human error and the problem of causality in analysis of accidents","author":"Rasmussen","year":"1990"},{"issue":"2\/3","key":"10.1016\/S0925-7535(03)00047-X_BIB29","doi-asserted-by":"crossref","first-page":"183","DOI":"10.1016\/S0925-7535(97)00052-0","article-title":"Risk management in a dynamic society","volume":"27","author":"Rasmussen","year":"1997","journal-title":"Safety Science"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB30","series-title":"Cognitive System Engineering","author":"Rasmussen","year":"1994"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB31","unstructured":"Rasmussen, J., Svedung, I., 2000. Proactive Risk Management in a Dynamic Society. Swedish Rescue Services Agency."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB32","unstructured":"Rosness, R., 2001. Om jeg hamrer eller hamres, like fullt sa skal der jamres: Malkonflikter og sikkerhet (If I Hammer or Get Hammered, in Any Case There Will Be Groaning: Goal Conflicts and Safety). SINTEF Technologies Report (STF38 A01408). Available from <www.risikoforsk.no\/Publikasjoner\/Ragnar>."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB33","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1518\/001872095779049516","article-title":"How in the world did I ever get into that mode?","volume":"37","author":"Sarter","year":"1995","journal-title":"Human Factors"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB34","unstructured":"Sarter, N.N., Woods, D.D., 1995. Strong, Silent, and Out-of-the-Loop. CSEL Report 95-TR-01. Ohio State University, February."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB35","series-title":"Handbook of Human Factors\/Ergonomics, second edition","article-title":"Automation surprises","author":"Sarter","year":"1997"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB36","series-title":"Business Dynamics: Systems Thinking and Modeling for a Complex World","author":"Sterman","year":"2000"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB37","series-title":"On the Reliability and Validity of Safety Analysis. Technical Report Publications 25","author":"Suokas","year":"1985"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB38","doi-asserted-by":"crossref","first-page":"397","DOI":"10.1016\/S0925-7535(00)00036-9","article-title":"Graphic representation of accident scenarios","volume":"40","author":"Svedung","year":"2002","journal-title":"Safety Science"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB39","series-title":"A Field Study of Operator Cognitive Monitoring at Pickering Nuclear Generating Station. Technical Report CEL 9504","author":"Vicente","year":"1995"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB40","series-title":"Cognitive Work Analysis: Toward Safe, Productive, and Healthy Computer-Based Work","author":"Vicente","year":"1999"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB41","unstructured":"Vicente, K.J., Christoffersen, K., 2002. The Walkerton E. coli outbreak: a test of Rasmussen's framework for risk management in a dynamic society. Theoretical Issues in Ergonomics Science."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB42","doi-asserted-by":"crossref","unstructured":"Woods, D.D., 1984. Some results on operator performance in emergency events, In: Whitfield, D. (Ed.), Ergonomic Problems in Process Operations. Institute of Chemical Engineering Symposium, Ser. 90.","DOI":"10.1016\/B978-0-85295-172-9.50006-8"},{"key":"10.1016\/S0925-7535(03)00047-X_BIB43","unstructured":"Woods, D.D., 2000. Lessons from beyond Human Error: Designing for Resilience in the Face of Change and Surprise. Design for Safety Workshop, NASA Ames Research Center, 8\u201310 October."},{"key":"10.1016\/S0925-7535(03)00047-X_BIB44","series-title":"Naturalistic Decision Making","year":"1997"}],"container-title":["Safety Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S092575350300047X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S092575350300047X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2019,2,23]],"date-time":"2019-02-23T23:27:27Z","timestamp":1550964447000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S092575350300047X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004,4]]},"references-count":44,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2004,4]]}},"alternative-id":["S092575350300047X"],"URL":"https:\/\/doi.org\/10.1016\/s0925-7535(03)00047-x","relation":{},"ISSN":["0925-7535"],"issn-type":[{"value":"0925-7535","type":"print"}],"subject":[],"published":{"date-parts":[[2004,4]]}}}