{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,21]],"date-time":"2026-10-21T16:30:04Z","timestamp":1792600204269,"version":"4.5.0"},"reference-count":39,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2009,4,1]],"date-time":"2009-04-01T00:00:00Z","timestamp":1238544000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Commun. ACM"],"published-print":{"date-parts":[[2009,4]]},"abstract":"<jats:p>Who could fault an approach that offers greater credibility at reduced cost?<\/jats:p>","DOI":"10.1145\/1498765.1498787","type":"journal-article","created":{"date-parts":[[2009,4,6]],"date-time":"2009-04-06T16:34:22Z","timestamp":1239035662000},"page":"78-88","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":77,"title":["A direct path to dependable software"],"prefix":"10.1145","volume":"52","author":[{"given":"Daniel","family":"Jackson","sequence":"first","affiliation":[{"name":"MIT's Computer Science and Artificial Intelligence Lab, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2009,4]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1081706.1081728"},{"key":"e_1_2_1_2_1","series-title":"Mar. 2002","volume-title":"Correctness by construction: Better can also be cheaper. CrossTalk: The Journal of Defense Software Engineering","author":"Arney P."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503274"},{"key":"e_1_2_1_4_1","volume-title":"extra---read all about it: Nearly all binary searches and mergesorts are broken","author":"Bloch J.","year":"2006"},{"key":"e_1_2_1_5_1","first-page":"9","article-title":"The ugly history of tool development at the FAA","volume":"4","author":"Cone E","year":"2002","journal-title":"Baseline Magazine"},{"key":"e_1_2_1_6_1","volume-title":"Eds. American Society of Health-System Pharmacists","author":"Cook R.","year":"2005"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1289927.1289932"},{"key":"e_1_2_1_8_1","volume-title":"Beyond Calculation: The Next Fifty Years of Computing, Denning","author":"Dijkstra E.W.","year":"1997"},{"key":"e_1_2_1_9_1","volume-title":"CDRH's medical device post-market safety program","author":"Ensuring","year":"2006"},{"key":"e_1_2_1_10_1","volume-title":"Report of the Presidential Commission on the Space Shuttle Challenger Accident","author":"Feynman R.P.","year":"1986"},{"key":"e_1_2_1_11_1","volume-title":"Economic Impacts of Inadequate Infrastructure for Software Testing","author":"Gallaher M.","year":"2002"},{"key":"e_1_2_1_12_1","volume-title":"Publication PEMD-87--1","author":"Medical Devices","year":"1986"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSPEC.2004.1353787"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4471-0713-2_13"},{"key":"e_1_2_1_15_1","volume-title":"Reflection 2001: The Third International Conference on Metalevel Architectures and Separation of Crosscutting Concerns (Kyoto, Sept. 25--28","author":"Griswold W.","year":"2001"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/52.506463"},{"key":"e_1_2_1_17_1","volume-title":"Proceedings of the 5th International Symposium on Requirements Engineering","author":"Hammond J.","year":"2001"},{"key":"e_1_2_1_18_1","volume-title":"Developing Software in High-Integrity and Safety-Critical Systems","author":"Hatton L.","year":"1995"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2006.212"},{"key":"e_1_2_1_20_1","volume-title":"Austria, May 26--June 1","author":"Investigation","year":"2001"},{"key":"e_1_2_1_21_1","series-title":"June 2006","volume-title":"Dependable software by design. Scientific American","author":"Jackson D."},{"key":"e_1_2_1_22_1","volume-title":"Software For Dependable Systems: Sufficient Evidence? National Research Council","author":"Jackson D.","year":"2007"},{"key":"e_1_2_1_23_1","volume-title":"Problem Frames: Analysing and Structuring Software Development Problems","author":"Jackson M.","year":"2001"},{"key":"e_1_2_1_24_1","volume-title":"Network World (Aug. 22, 2008","author":"Gross G.","year":"2008"},{"key":"e_1_2_1_25_1","volume-title":"Cyber incident blamed for nuclear power plant shutdown. Washington Post (June 5","author":"Krebs B.","year":"2008"},{"key":"e_1_2_1_26_1","unstructured":"Ladkin P. Transcriber. Transcription of Report on the Accident of Airbus A320-211 Aircraft in Warsaw on Sept 14 1993 Main Commission Aircraft Accident Investigation Warsaw; www.rvs.uni-bielefeld.de\/publications\/Incidents\/DOCS\/ComAndRep\/Warsaw\/warsaw-report.html.  Ladkin P. Transcriber. Transcription of Report on the Accident of Airbus A320-211 Aircraft in Warsaw on Sept 14 1993 Main Commission Aircraft Accident Investigation Warsaw; www.rvs.uni-bielefeld.de\/publications\/Incidents\/DOCS\/ComAndRep\/Warsaw\/warsaw-report.html."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/155360.155367"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.637384"},{"key":"e_1_2_1_29_1","doi-asserted-by":"crossref","DOI":"10.7551\/mitpress\/4529.001.0001","volume-title":"Mechanizing Proof: Computing, Risk, and Trust","author":"MacKenzie D.","year":"2001"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1001\/jama.286.7.793"},{"key":"e_1_2_1_31_1","volume-title":"Defence Standard 00-42: Reliability And Maintainability Assurance Guides, Part 2: Software","author":"Ministry","year":"1997"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-6423(95)96871-J"},{"key":"e_1_2_1_33_1","volume-title":"Princeton University Press","author":"Perrow C.","year":"1999"},{"key":"e_1_2_1_34_1","volume-title":"The Next Catastrophe: Reducing our Vulnerabilities to Natural, Industrial, and Terrorist Disasters","author":"Perrow C.","year":"2004"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.566148"},{"key":"e_1_2_1_36_1","volume-title":"Flaws in medical coding can kill: Spread of computers creates new dangers","author":"Rockoff J.","year":"2008"},{"key":"e_1_2_1_37_1","volume-title":"Why Buildings Stand Up: The Strength of Architecture","author":"Salvadori M.","year":"1980"},{"key":"e_1_2_1_38_1","article-title":"Calibration flaw crashed Yorktown LAN","author":"Slabodkin G.","year":"1998","journal-title":"Government Computing News"},{"key":"e_1_2_1_39_1","volume-title":"Wired (December 17, 2003","author":"Zetter K.","year":"2003"}],"container-title":["Communications of the ACM"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1498765.1498787","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1498765.1498787","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:38:39Z","timestamp":1750253919000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1498765.1498787"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,4]]},"references-count":39,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2009,4]]}},"alternative-id":["10.1145\/1498765.1498787"],"URL":"https:\/\/doi.org\/10.1145\/1498765.1498787","relation":{},"ISSN":["0001-0782","1557-7317"],"issn-type":[{"value":"0001-0782","type":"print"},{"value":"1557-7317","type":"electronic"}],"subject":[],"published":{"date-parts":[[2009,4]]},"assertion":[{"value":"2009-04-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}