brian wichmann (Brian.Wichmann(at)freenet.co.uk)
Tue, 30 Apr 2002 15:53:55 +0100
Unfortunately (in my view) IEC 61508 does not give any guidance on the metric to be satisfied on the use of structural testing for each SIL. For simplicity, consider three levels of testing: 100% statement coverage 100% branch coverage 100% MCDC (as per DO-178B) One can therefore suggest that by analogy with DO-178B, SIL4 should require 100% MCDC. But what about SIL1-3? What would *You* advise? Again for simplicity, let us assume that there is no technical reason why 100% could not be achieved (or perhaps we exclude those cases which can be shown to be technically impossible). I will post my own views. If you are happy for me to have your views, but not the group, e-mail: Brian.Wichmann(at)freenet.co.uk Brian.