soft dev Identification Prelim drei

75 flashcardsby DiandreiE
Study these flashcardsFree · spaced repetition · iPhone, Android, Mac & web

All cards

1
When components of a system are integrated, new characteristics appear that were not present in the individual parts. These are known as
EMERGENT properties
2
A computer system that includes hardware and software, but crucially includes people, operational processes, and organizational politics, is classified as a
SOCIOTECHNICAL system
3
Problems that are complex, have no definitive problem statement, and where stakeholders have conflicting views on the solution are referred to as
WICKED problems
4
In the "Sociotechnical Systems Stack," the layer immediately above the operating system, which handles data management and communications, is often technically referred to as
MIDDLEWARE
5
Unlike hardware systems which usually behave predictably, systems involving human operators may react differently to the same input at different times. This characteristic is called
NON-DETERMINISM
6
This specific layer of the sociotechnical stack is governed by regulations, laws, and ethical rules that dictate how a system must be operated within a country or community
SOCIETY layer
7
This term describes the process of buying or acquiring a system, which involves deciding on the system scope and selecting suppliers
PROCUREMENT
8
When a system failure occurs not because of a bug, but because the user interface was confusing and caused the operator to make a mistake, this is categorized as a error within the wider system context
OPERATIONAL error
9
This property refers to the ability of the system to deliver services when requested; it is often confused with reliability but focuses specifically on uptime
AVAILABILITY
10
In the context of legacy systems, this term describes the activity where the system is modified to correct errors or adapt to environmental changes after it has been deployed
MAINTENANCE
11
This specific emergent property is concerned with the system's ability to resist external attacks or accidental intrusion
SECURITY
12
This layer of the sociotechnical stack represents the specific set of tasks and workflows that the organization uses to achieve its goals using the software
BUSINESS PROCESS layer
13
A system that is deterministic and consists only of hardware and software without the human element is often strictly defined as a
TECHNICAL computer-based system
14
The property that reflects the ease with which a system can be repaired or modified after a failure is discovered is called
REPAIRABILITY
15
The interdisciplinary field that encompasses the specification, design, implementation, validation, deployment, and operation of sociotechnical systems is called
SYSTEMS engineering
16
This overarching concept reflects the degree of confidence a user has that the system will operate as expected and will not cause damage if it fails. It is a collective term containing properties like availability and safety
DEPENDABILITY properties
17
When measuring system performance, this metric does not track how often the system crashes, but rather the probability that the system is up, running, and able to deliver services at the exact moment a user requests them
AVAILABILITY
18
This specific attribute is concerned with the continuity of service over a specified period. It measures the probability that the system will operate without a failure occurring during a defined time window
RELIABILITY
19
In critical systems, this property focuses entirely on ensuring that the system does not inflict injury on people or cause catastrophic damage to the environment, regardless of whether the system actually completes its intended task
SAFETY
20
This property measures the system's capacity to protect itself and its data from accidental or malicious intrusion
SECURITY
21
Instead of trying to implement every possible requirement, this approach identifies the most critical dangers to the system and limits the requirements to those necessary to mitigate those specific dangers
RISK-DRIVEN specification
22
This term describes a system state or condition that has the potential to cause an accident or mishap, such as a sensor giving a false reading in a chemical plant
HAZARD
23
This term refers to the unplanned event or sequence of events which results in human death or injury, damage to property, or environmental harm
ACCIDENT
24
To improve dependability, engineers often include multiple components of the same type (e.g., three backup generators) to ensure the system functions even if one fails
REDUNDANCY
25
This technique involves using different types of components or different implementations (e.g., software written by different teams in different languages) to perform the same function, reducing the chance of a common-mode failure
DIVERSITY
26
This dependability property reflects the ability of the system to operate correctly even when erroneous inputs are provided or when unexpected hardware faults occur
FAULT TOLERANCE
27
If a system failure occurs, this property measures how easily and quickly the system can be restored to an operational state
REPAIRABILITY
28
This type of failure occurs when the system performs the correct computation but delivers the result too late to be useful, which is critical in real-time embedded systems
TIMING failure
29
This term describes the ability of a system to continue delivering a minimum level of service even when part of the system has been compromised or destroyed
RESILIENCE
30
The measure of the loss resulting from a mishap, which can be categorized by the severity of the consequences (e.g., catastrophic, marginal, negligible)
DAMAGE
31
This acronym refers to a reliability metric used primarily for systems where services are demanded at irregular intervals, such as an emergency shutdown system
POFOD (Probability Of Failure On Demand)
32
This principle suggests that risks should be reduced to a level where further reduction would cost a disproportionate amount of money compared to the safety benefit gained
ALARP (AS LOW AS REASONABLY PRACTICABLE)
33
This is a specific type of requirement that describes what the system must not do, or constraints on the system to prevent an accident
SAFETY requirement
34
This term refers to the process of analyzing a system to determine what potential dangers exist before the system is even built
HAZARD identification
35
This reliability metric is appropriate for systems that run continuously, such as a web server or air traffic control radar, where the focus is on the frequency of crashes over time
ROCOF (RATE OF OCCURRENCE OF FAILURE)
36
This document or body of evidence provides a reasoned argument that a system is safe to operate in a specific context
SAFETY CASE
37
In the context of safety specification, this term describes the potential for a system failure to cause damage or injury
HAZARD
38
This term describes a requirement that defines a checking or protection feature added to the system specifically to ensure safety (e.g., "The system shall check the sensor value every 5ms")
FUNCTIONAL safety requirement
39
This statistical value represents the average time a component is expected to function before it encounters a failure
MTTF/ MEAN TIME TO FAILURE
40
This term describes a system state where the system has failed, but it has done so in a way that does not threaten human life or the environment (e.g., a train stopping when the signal is lost)
FAIL-SAFE STATE
41
This process involves assessing the likelihood of a hazard occurring and the severity of its consequences
risk ASSESSMENT
42
This type of reliability requirement specifies the required probability of success or failure rate using numerical values (e.g., "The system shall be available 99.99% of the time")
QUANTITATIVE reliability requirement
43
This strategy involves designing the system so that the occurrence of a hazard is made less likely, often through the use of monitoring or interlocks
risk REDUCTION
44
This term refers to the unplanned event that results in death, injury, or damage, which occurs when a hazard is not controlled
ACCIDENT
45
This metric measures the percentage of time that a system is up and running compared to the total time it is required to be operational
AVAILABILITY
46
This general architectural concept involves including extra components in a system that are not strictly necessary for normal operation but serve to handle failure scenarios
REDUNDANCY
47
This term describes the specific ability of a system to continue delivering its intended services, perhaps at a reduced level, even when hardware or software faults occur
FAULT TOLERANCE
48
To prevent common-mode failures where a single design error causes all backup systems to fail simultaneously, engineers use different teams or algorithms to implement the same specification
DIVERSITY
49
In this specific software fault tolerance architecture, three or more versions of the software are executed in parallel, and a voting mechanism determines the correct output by majority rule
N-VERSION programming
50
This is a technique used in error detection where a specific piece of hardware or software monitors the execution time of a process; if the process does not reset the timer within a specific window, it is assumed to have crashed
WATCHDOG timer
51
This fault tolerance strategy involves periodically saving the state of the system to stable storage so that, in the event of a failure, the system can restart from the last known good state rather than from the beginning
CHECKPOINTING
52
This type of error recovery allows the system to correct the damaged state and continue processing without rolling back; it typically requires accurate knowledge of the error type (e.g., error-correcting codes)
FORWARD error recovery
53
This dynamic software fault tolerance technique executes a primary algorithm and then checks the result against an acceptance test; if the test fails, the system restores the state and tries an alternative algorithm
RECOVERY blocks
54
This term refers to a specific type of failure where multiple redundant components fail at the exact same time due to a shared cause, such as a power supply surge or a specification error in the software
COMMON-MODE failure
55
This simplistic hardware redundancy architecture uses three identical hardware modules processing the same input, with a voting circuit selecting the majority output to mask a single component failure
TRIPLE Modular Redundancy
56
This recovery mechanism relies on restoring the system to a previous consistent state after a failure is detected; it is the most common mechanism used in database transaction systems
BACKWARD error recovery
57
In the context of diverse programming, this specific component is responsible for comparing the outputs of the different software versions to decide on the result
VOTER
58
This term describes a system behavior where, upon the detection of a failure, the system does not stop entirely but continues to provide a subset of the most critical functionalities
GRACEFUL degradation
59
This is a check placed inside a Recovery Block to verify that the output of the code execution is valid before passing it to the rest of the system
ACCEPTANCE test
60
This specific type of diversity involves running the exact same software on hardware components from different vendors (e.g., Intel vs. AMD) to protect against chip-level design faults
HARDWARE diversity
61
This term refers to a specific piece of information, a software component, or a piece of hardware within the system that has value to the organization and therefore requires protection
ASSET
62
This is a weakness or flaw in the system design, implementation, or code that could be utilized by an external party to cause harm to the system
VULNERABILITY
63
This term describes a circumstance or event with the potential to adversely impact the system, such as a hacker attempting to guess passwords or a fire in the server room
THREAT
64
This specific security property ensures that information is not disclosed or made accessible to unauthorized individuals or entities
CONFIDENTIALITY
65
This refers to the protective measure or mechanism put in place to reduce the system's vulnerability or the likelihood of a threat materializing
CONTROL
66
This security attribute guarantees that the system's data and resources have not been altered or corrupted by unauthorized activity
INTEGRITY
67
This process involves identifying potential dangers to the system, estimating the likelihood of those dangers occurring, and assessing the potential consequences
security RISK ASSESSMENT
68
This formal document or set of rules defines what is allowed and what is prohibited within the system, such as password strength requirements or data access rules
security POLICY
69
This is the exploitation of a system vulnerability, where a threat actor successfully bypasses security controls to damage or steal assets
ATTACK
70
This term describes the calculated probability that a specific threat will exploit a vulnerability and cause a specific amount of damage
security RISK
71
This architectural strategy involves organizing the system into multiple levels of protection, so that if one level is breached, others remain to protect the assets
LAYERED protection
72
This specific process verifies the identity of a user or system entity, ensuring they are who they claim to be (e.g., checking a password)
AUTHENTICATION
73
After identity is confirmed, this process determines what actions the authenticated user is permitted to perform or which data they are allowed to access
AUTHORIZATION
74
This type of security strategy focuses on recovering the system and its data after a successful attack has occurred, rather than preventing the attack
RECOVERY
75
This specific type of threat involves an authorized user misusing their privileges to harm the system, which is often difficult to detect because the user has legitimate access
INSIDER threat
Study all 75 cards for free