The therac25 and its accident investigation case study. Turner, university of california, irvine reprinted with permission, ieee computer, vol. An investigation of the therac25 accidents nancy g. The machine was developed by aecl,a canadian company that had worked which the french company, cgr, on the earlier therac models therac6 and therac20. Nancy leveson and clark turner, the investigation of the therac25 accidents, computer, 26, 7 july 1993 pp 1841. Therac25 accidents adapted from a proprietary report from the aecl research co may,1994 the n. Turner, university of california, irvine a thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. I have received feedback from several junior safety professionals who have stated the book was a valueadded resource during the early stages in. The accident investigation board was appointed to perform an investigation of this accident and.
An investigation of the therac25 accidents computer author. The therac 25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac 6 and therac 20 units the earlier units had been produced in partnership with cgr of france it was involved in at least six accidents between 1985 and 1987, in which patients were given massive overdoses of radiation. A thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. Mohammed aziz an airline captain with middle east airlinesis. The machine administered radiation beams to destroy tumours without adversely affecting the treatment site. An investigation of the therac 25 accidents nancy g. To help you cope with these problems, were offering you this accident. This document promotes a plan, do, check, act approach, and the investigation of accidents and incidents is part of the check step and may highlight shortcomings in. Memorandum on the investigatio,n of civil air accidents 1. An investigation of the therac25 accidents computer.
The user manual did not explain or even address the error codes, so the operator pressed the p. The therac25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac6 and therac20 units the earlier units had been produced in partnership with cgr of france it was involved in at least six accidents between 1985 and 1987, in which patients were given massive overdoses of radiation. The therac 25, like other medical linear accelerators including its predecessors therac 6 and therac 20, used highenergy electron beams to destroy tumors without damaging nearby healthy tissue. Nancy leveson and clark turner, the investigation of thetherac 25 accidents, computer, 26, 7 july 1993 pp 1841. As a result of the investigation, the safety board has submitted five recommendations to the federal aviation administration. Accident investigation techniques provides an excellent roadmap how to conduct effective and meaningful accident investigations for those preparing to undertake their first accident investigation. Emc insurance companies risk improvement department 8004772295, ext. Leveson et al reference is a very complete account of these accidents, although it is rather heavily slanted towards procedure and legality rather than concentrating on the technological lessons that are to be learned. Software in the therac6 and therac20 was reused in the therac25. The therac 25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac 6 and therac 20 units the earlier units had been produced in partnership with cgr of france. Feb 17, 2014 the therac 25 accidents form the basis for what is often considered the bestdocumented software safety casestudy available.
Essay on the therac25 and its accident investigation instructor name school coursenumber june 2, 2015 introduction in 1983, a machine was released to help in the studentshare our website is a unique platform where students can share their papers in a matter of giving an example of the work to be done. A number of radiation accidents have occurred over the past 50 years involving radiation producing machines, radio. For accidents or incidents involving an aircraft of a maximum mass over 5 700 kg, states in charge of an annex investigation must make the final report available to icao. When accidents are investigated, the emphasis should be concentrated on finding the root causes of the accident rather than the investigation procedure itself. He carries us back to the start in 1915 when the uks royal flying corps created the first organization dedicated to accident investigation. Air safety through investigation julyseptember 2014.
An investigation of the therac25 accidents abstract. Professionalismtherac25 wikibooks, open books for an open. The therac 25 a case study in safety failure radiation therapy machine the most serious computerrelated accidents to date people were killed reference. Therac 25 background medical linear accelerator developed by atomic energy of. Aircraft accident investigation bureau page 6 of 25 1 factual information 1. Accident prevention and management kit for convenience stores. Accidents can be timeconsuming, frustrating and expensive, and they can impact numerous company resources. First, like the therac 6 and the therac 20, the therac 25 is controlled by a pdp 11. For six unfortunate patients in 1986 and 1987, the therac25 did the unthinkable. The machine namely therac25 was manufactured by a canadian company i.
Accident prevention and management kit for convenience. A detailed investigation of the factors involved in the softwarerelated overdoses and attempts by users, manufacturers, and government agencies to deal with the accidents is presented. Rating accident models and investigation methodologies. One of the serious mistakes that led to the multiple therac25 accidents was the tendency to believe that the cause of an accident had been determined for example, a microswitch failure in the hamilton accident without adequate evidence to come to this conclusion and without looking at all possible contributing factors.
Researchers who investigated the accidents found several contributing causes. The therac 25 machine was a stateoftheart linear accelerator developed by the company atomic energy canada limited aecl and a french company cgr to provide radiation treatment to cancer patients. One of the serious mistakes that led to the multiple therac 25 accidents was the tendency to believe that the cause of an accident had been determined for example, a microswitch failure in the hamilton accident without adequate evidence to come to this conclusion and without looking at all possible contributing factors. Thus, while the hardware interlocks on therac20 prevented software errors from causing problems, therac25 had no similar mechanism. Pdf accident investigation on a large construction project. An investigation of the therac 25 accidents nancy leveson, university of washington clark s. After the tyler accidents, therac 20 users who had heard informally about the tyler accidents from therac 25 users conducted informal investigations to determine whether the same problem could occur with their machines. The therac 25, a computerized radiation therapy machine, massively overdosed. A detailed accident investigation, drawn from publicly available docu ments, can be found. An investigation of the therac25 accidents abstract oec.
Twa, flight 742, a boeing 707331b n8705t, was an international, scheduled passenger flight operating. Thus, while the hardware interlocks on therac 20 prevented software errors from causing problems, therac 25 had no similar mechanism. Therac 6 and therac 20 had histories of clinical use without computer control therac 25 software had more responsibility for safety than in previous machines. An investigation of the therac25 accidents essay 10546 words. Therac25 was a machine that had tow main treatment modes. An investigation of the therac25 accidents cal poly computer. Computers are increasingly being introduced into safetycritical systems and, as a consequence, have been involved in accidents. In case of doubt, a tclephone call to alb will resolve the problem. The operators manual supplied with the machine does.
Department of information and computer science authors. The preferred sources of information were agency accident investigation orders, directives, investigation work products, and related documents. An investigation of the therac 25 accidents computer author. Citeseerx document details isaac councill, lee giles, pradeep teregowda. An investigation of the therac25 accidents nancy leveson, university of washington clark s.
Turner, university of california, irvine a thorough account of the therac 25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. On the surface, the primary reason that therac20 killed far fewer people than therac25 was the fact that therac20 had hardware interlocks, while therac25 did not. Atomic energy of canada limited aecl in conjunction with a french company. Software in the therac 6 and therac 20 was reused in the therac25. Citeseerx an investigation of the therac25 accidents. The experience illustrates a number of principles that are vital to understanding how and why the design and analysis of safetycritical systems must be done in a methodical way according to established principles. The therac 25 was the most computerized and sophisticated radiation therapy machine of its time. Turner, an investigation of the therac25 accidents. Therac 25 accidents adapted from a proprietary report from the aecl research co may,1994 the n.
Since more than a decade, unsafe act has accounted as a foremost cause of workrelated accident, especially in the field of construction. An investigation of the therac 25 accidents volumes 92108 of technical report university of california, irvine. An unsafe act is a type of work that involves some risk. The therac 25 accidents form the basis for what is often considered the bestdocumented software safety casestudy available. Pdf accident investigation on a large construction. As a result, several people died and others were seriously injured. Much of this is due to the work of nancy leveson, a software safety expert. An investigation of the therac25 accidents part iv. Between june 1985 and january 1987, the therac25 medical electron accelerator was involved in six massive radiation overdoses. It is significant that the account is written by a professor of computer.
The therac 25 was a computerized radiation therapy machine 11 machines were installed us and canada in 19851987 there were 6 known accidents where massive overdoses were made patients died or suffered serious injuries these were traced to race conditions in reading operator input unique early investigation of safetycritical. Use of formal methods for investigation of major accidents may support the investigators during the investigation process and in the presentation of results and recommendations. Comparison of some selected methods for accident investigation. Depending on whether the tumor was close to the skin or in deeper tissue, the therac 25 would operate in an electronbeam or xray mode. Report also provided government, user, and manufacturers responses to each accident.
Therac 25 aecl designed therac 25 to use computer control from the start. Most importantly accident investigations are conducted to find out the causes of accidents and to prevent similar accidents in the future. With the aid of an onboard computer, the device could select multiple. The case of the b737800, ethiopian flight 409, crashing off the coast of beirut lebanon january 25, 2010. A detailed accident investigation, drawn from publicly available docu. Turner, university of california, irvine a thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to. As noted earlier, the software for the therac 25 and therac 20 both evolved from the therac 6 software. Therac25 aecl designed therac25 to use computer control from the start. The therac25 accidents are the most serious computerrelated accidents to date at least. Several fcatures of the therac 25 are important in understanding the acci dents. Surveys are seldom used, though they could have a place in discovering management factors which may have contributed to an accident.
Therac6 and therac20 had histories of clinical use without computer control therac25 software had more responsibility for safety than in previous machines. Essay on the therac25 and its accident investigation school number june 2, introduction in 1983, a machine was released to help in the treatment of cancerous tumors through the use of high energy laser beams. The big picture the therac25 was a computerized radiation therapy machine 11 machines were installed us and canada in 19851987 there were 6 known accidents where massive overdoses were made patients died or suffered serious injuries these were traced to race conditions in reading operator input unique early investigation of safetycritical. Very similar to levesons other therac 25 material, but this edition provides a bare boned timeline which guided research and inquiry. A thorough account of the therac 25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. The therac25 and its accident investigation case study 1. Software in the therac 6 and therac 20 was reused in the therac 25. Essay on the therac 25 and its accident investigation instructor name school coursenumber june 2, 2015 introduction in 1983, a machine was released to help in the studentshare our website is a unique platform where students can share their papers in a matter of giving an example of the work to be done. Accident investigation forms part of the health and safety executives hse approach to health and safety management in its document hsg65 managing for health and safety. The first mode consisted of an electron beam of 200 rads that was aimed at the patient directly. Therac25 was a medical tool used in cancer treatment. The therac25 was a computercontrolled radiation therapy machine produced by atomic.
Information and computer science, university of california, irvine, 1992. The second, higher energy mode, used the full power of the machine at 25 million electron volts. Archival research is sometimes used, when investigators search back through the files seeking some particular information from large numbers of accidents. It was involved in at least six accidents between 1985 and 1987, in which patients were given massive.
Therac 6 and therac 20 had histories of clinical use without computer control therac25 software had more responsibility for safety than in previous machines. However, aecl designed the therac 25 to take advantage of com puter control from the outset. The operators manual supplied with the machine does not ex. An investigation of the therac25 accidents stanford university. If you have questions about the enclosed materials, would like additional copies, or want additional help in preventing losses, contact your insurance agent or emc loss control representative. On the surface, the primary reason that therac 20 killed far fewer people than therac 25 was the fact that therac 20 had hardware interlocks, while therac 25 did not. One of the serious mistakes that led to the multiple therac 25 accidents was the tendency to believe that the cause of an accident had been determined e. This appendix is taken from nancy leveson, safeware.
In manual mode, a radiotherapy technician would physically set up. A regional distribution of the number of road accidents reveals that over half of all crashes occurred in khomas region 8,590 or 55. The therac 25 accidents are the most serious computerrelated accidents to date at least nonmilitary and admitted and have even drawn the attention of the popular press. It is not the purpose of this activity to apportion blame or liability. Essay on the therac 25 and its accident investigation school number june 2, introduction in 1983, a machine was released to help in the treatment of cancerous tumors through the use of high energy laser beams. Data in organization documents were considered preferable. Osh basics what is an accident and why should it be. Managing a major accident investigation in a small country.
838 256 1387 1498 1254 493 1386 1002 733 773 339 1090 123 772 413 1274 1171 1465 858 625 321 740 980 366 130 494 1522 634 987 1486 280 519 1092 1326 276 1437