An investigation of the therac 25 accidents nancy g. On the surface, the primary reason that therac20 killed far fewer people than therac25 was the fact that therac20 had hardware interlocks, while therac25 did not. A regional distribution of the number of road accidents reveals that over half of all crashes occurred in khomas region 8,590 or 55. Comparison of some selected methods for accident investigation. The therac 25 was a computerized radiation therapy machine 11 machines were installed us and canada in 19851987 there were 6 known accidents where massive overdoses were made patients died or suffered serious injuries these were traced to race conditions in reading operator input unique early investigation of safetycritical.
Accident investigation techniques provides an excellent roadmap how to conduct effective and meaningful accident investigations for those preparing to undertake their first accident investigation. The preferred sources of information were agency accident investigation orders, directives, investigation work products, and related documents. The second, higher energy mode, used the full power of the machine at 25 million electron volts. An unsafe act is a type of work that involves some risk. Therac 25 aecl designed therac 25 to use computer control from the start. Most importantly accident investigations are conducted to find out the causes of accidents and to prevent similar accidents in the future. Citeseerx an investigation of the therac25 accidents. The therac25 and its accident investigation case study 1. Accident investigation forms part of the health and safety executives hse approach to health and safety management in its document hsg65 managing for health and safety. Software in the therac6 and therac20 was reused in the therac25. Thus, while the hardware interlocks on therac20 prevented software errors from causing problems, therac25 had no similar mechanism. Information and computer science, university of california, irvine, 1992. The discussion of facts, as determined by the accident investigation board, and the views in the.
Archival research is sometimes used, when investigators search back through the files seeking some particular information from large numbers of accidents. For six unfortunate patients in 1986 and 1987, the therac25 did the unthinkable. An investigation of the therac 25 accidents volumes 92108 of technical report university of california, irvine. It is significant that the account is written by a professor of computer. On the surface, the primary reason that therac 20 killed far fewer people than therac 25 was the fact that therac 20 had hardware interlocks, while therac 25 did not. Use of formal methods for investigation of major accidents may support the investigators during the investigation process and in the presentation of results and recommendations. As noted earlier, the software for the therac 25 and therac 20 both evolved from the therac 6 software. Turner, university of california, irvine a thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to.
The big picture the therac25 was a computerized radiation therapy machine 11 machines were installed us and canada in 19851987 there were 6 known accidents where massive overdoses were made patients died or suffered serious injuries these were traced to race conditions in reading operator input unique early investigation of safetycritical. The accident investigation board was appointed to perform an investigation of this accident and. Much of this is due to the work of nancy leveson, a software safety expert. Radiation accidents radiation accidents may be viewed as unusual exposure events which provide possible high exposures to a few people and, in the case of nuclear plant events, low exposures to large populations. Data in organization documents were considered preferable.
Information and computer science, university of california, irvine, 1992 59 pages. Professionalismtherac25 wikibooks, open books for an open. An investigation of the therac25 accidents nancy leveson, university of washington clark s. Therac 25 accidents adapted from a proprietary report from the aecl research co may,1994 the n. Since more than a decade, unsafe act has accounted as a foremost cause of workrelated accident, especially in the field of construction.
An investigation of the therac25 accidents abstract oec. The therac 25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac 6 and therac 20 units the earlier units had been produced in partnership with cgr of france it was involved in at least six accidents between 1985 and 1987, in which patients were given massive overdoses of radiation. Therac25 was a machine that had tow main treatment modes. The therac25 accidents are the most serious computerrelated accidents to date at least. Investigation of alarmrelated accidents and incidents in aviation article pdf available in international journal of aviation psychology 3. Pdf accident investigation on a large construction project.
The therac 25 accidents are the most serious computerrelated accidents to date at least nonmilitary and admitted and have even drawn the attention of the popular press. The therac25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac6 and therac20 units the earlier units had been produced in partnership with cgr of france it was involved in at least six accidents between 1985 and 1987, in which patients were given massive overdoses of radiation. Aircraft accident investigation bureau page 6 of 25 1 factual information 1. The operators manual supplied with the machine does. Therac6 and therac20 had histories of clinical use without computer control therac25 software had more responsibility for safety than in previous machines. He carries us back to the start in 1915 when the uks royal flying corps created the first organization dedicated to accident investigation. Osh basics what is an accident and why should it be.
Leveson et al reference is a very complete account of these accidents, although it is rather heavily slanted towards procedure and legality rather than concentrating on the technological lessons that are to be learned. It was involved in at least six accidents between 1985 and 1987, in which patients were given massive. Therac 6 and therac 20 had histories of clinical use without computer control therac 25 software had more responsibility for safety than in previous machines. Therac25 aecl designed therac25 to use computer control from the start. Accidents can be timeconsuming, frustrating and expensive, and they can impact numerous company resources. The machine administered radiation beams to destroy tumours without adversely affecting the treatment site. Pdf accident investigation on a large construction. The experience illustrates a number of principles that are vital to understanding how and why the design and analysis of safetycritical systems must be done in a methodical way according to established principles. A detailed investigation of the factors involved in the softwarerelated overdoses and attempts by users, manufacturers, and government agencies to deal with the accidents is presented.
This document promotes a plan, do, check, act approach, and the investigation of accidents and incidents is part of the check step and may highlight shortcomings in. The case of the b737800, ethiopian flight 409, crashing off the coast of beirut lebanon january 25, 2010. Twa, flight 742, a boeing 707331b n8705t, was an international, scheduled passenger flight operating. Computers are increasingly being introduced into safetycritical systems and, as a consequence, have been involved in accidents. Turner, university of california, irvine a thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. Nancy leveson and clark turner, the investigation of the therac25 accidents, computer, 26, 7 july 1993 pp 1841. Report also provided government, user, and manufacturers responses to each accident. An investigation of the therac25 accidents cal poly computer. Essay on the therac 25 and its accident investigation school number june 2, introduction in 1983, a machine was released to help in the treatment of cancerous tumors through the use of high energy laser beams. For accidents or incidents involving an aircraft of a maximum mass over 5 700 kg, states in charge of an annex investigation must make the final report available to icao. An investigation of the therac25 accidents computer. A thorough account of the therac 25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future.
I have received feedback from several junior safety professionals who have stated the book was a valueadded resource during the early stages in. Surveys are seldom used, though they could have a place in discovering management factors which may have contributed to an accident. One of the serious mistakes that led to the multiple therac 25 accidents was the tendency to believe that the cause of an accident had been determined for example, a microswitch failure in the hamilton accident without adequate evidence to come to this conclusion and without looking at all possible contributing factors. After the tyler accidents, therac 20 users who had heard informally about the tyler accidents from therac 25 users conducted informal investigations to determine whether the same problem could occur with their machines. The therac 25 was the most computerized and sophisticated radiation therapy machine of its time. Essay on the therac25 and its accident investigation school number june 2, introduction in 1983, a machine was released to help in the treatment of cancerous tumors through the use of high energy laser beams. A detailed accident investigation, drawn from publicly available docu. An investigation of the therac 25 accidents nancy leveson, university of washington clark s. Memorandum on the investigatio,n of civil air accidents 1. The therac 25, like other medical linear accelerators including its predecessors therac 6 and therac 20, used highenergy electron beams to destroy tumors without damaging nearby healthy tissue. With the aid of an onboard computer, the device could select multiple.
First, like the therac 6 and the therac 20, the therac 25 is controlled by a pdp 11. Depending on whether the tumor was close to the skin or in deeper tissue, the therac 25 would operate in an electronbeam or xray mode. Accident prevention and management kit for convenience. To help you cope with these problems, were offering you this accident. Notification of accidents all notifiable accidents are required to be reported to the department of trade. Software in the therac 6 and therac 20 was reused in the therac 25. An investigation of the therac25 accidents stanford university. Georgia patient files suit against aecl and hospital. The therac 25 machine was a stateoftheart linear accelerator developed by the company atomic energy canada limited aecl and a french company cgr to provide radiation treatment to cancer patients.
Essay on the therac 25 and its accident investigation instructor name school coursenumber june 2, 2015 introduction in 1983, a machine was released to help in the studentshare our website is a unique platform where students can share their papers in a matter of giving an example of the work to be done. Therac25 was a medical tool used in cancer treatment. The therac 25 a case study in safety failure radiation therapy machine the most serious computerrelated accidents to date people were killed reference. This appendix is taken from nancy leveson, safeware. Therac 25 background medical linear accelerator developed by atomic energy of.
Emc insurance companies risk improvement department 8004772295, ext. The therac 25 accidents form the basis for what is often considered the bestdocumented software safety casestudy available. Researchers who investigated the accidents found several contributing causes. Managing a major accident investigation in a small country. Nancy leveson and clark turner, the investigation of thetherac 25 accidents, computer, 26, 7 july 1993 pp 1841. However, aecl designed the therac 25 to take advantage of com puter control from the outset. Atomic energy of canada limited aecl in conjunction with a french company. Air safety through investigation julyseptember 2014. Feb 17, 2014 the therac 25 accidents form the basis for what is often considered the bestdocumented software safety casestudy available. An investigation of the therac25 accidents abstract. The first mode consisted of an electron beam of 200 rads that was aimed at the patient directly. The therac25 was a computercontrolled radiation therapy machine produced by atomic. Software in the therac 6 and therac 20 was reused in the therac25. Very similar to levesons other therac 25 material, but this edition provides a bare boned timeline which guided research and inquiry.
Turner, an investigation of the therac25 accidents. It is not the purpose of this activity to apportion blame or liability. An investigation of the therac25 accidents nancy g. The machine was developed by aecl,a canadian company that had worked which the french company, cgr, on the earlier therac models therac6 and therac20. When accidents are investigated, the emphasis should be concentrated on finding the root causes of the accident rather than the investigation procedure itself. As a result of the investigation, the safety board has submitted five recommendations to the federal aviation administration. Department of information and computer science authors. Therac25 accidents adapted from a proprietary report from the aecl research co may,1994 the n. Thus, while the hardware interlocks on therac 20 prevented software errors from causing problems, therac 25 had no similar mechanism.
Mohammed aziz an airline captain with middle east airlinesis. If you have questions about the enclosed materials, would like additional copies, or want additional help in preventing losses, contact your insurance agent or emc loss control representative. The user manual did not explain or even address the error codes, so the operator pressed the p. One of the serious mistakes that led to the multiple therac25 accidents was the tendency to believe that the cause of an accident had been determined for example, a microswitch failure in the hamilton accident without adequate evidence to come to this conclusion and without looking at all possible contributing factors. An investigation of the therac25 accidents essay 10546 words. One of the serious mistakes that led to the multiple therac 25 accidents was the tendency to believe that the cause of an accident had been determined e. Rating accident models and investigation methodologies.
Citeseerx document details isaac councill, lee giles, pradeep teregowda. An investigation of the therac 25 accidents computer author. The therac25 and its accident investigation case study. An updated version of the original accident investigation paper by nancy leveson i have updated and changed slightly the original accident report. In manual mode, a radiotherapy technician would physically set up. An investigation of the therac25 accidents part iv. Essay on the therac25 and its accident investigation instructor name school coursenumber june 2, 2015 introduction in 1983, a machine was released to help in the studentshare our website is a unique platform where students can share their papers in a matter of giving an example of the work to be done. The machine namely therac25 was manufactured by a canadian company i. A detailed accident investigation, drawn from publicly available docu ments, can be found. Turner, university of california, irvine a thorough account of the therac 25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. Several fcatures of the therac 25 are important in understanding the acci dents.
Accident prevention and management kit for convenience stores. Between june 1985 and january 1987, the therac25 medical electron accelerator was involved in six massive radiation overdoses. The operators manual supplied with the machine does not ex. Stories about the therac 25 have appeared in trade journals, newspapers, people magazine, and on televisions 2020 and mcneil lehrer news hour. The therac 25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac 6 and therac 20 units the earlier units had been produced in partnership with cgr of france.
269 840 1353 68 1052 1394 1042 461 237 944 480 44 1127 618 620 226 1376 634 1496 1358 670 557 1181 1252 369 688 817 1231 928 936 1051 1304 586 507 180 92 1263 775 1331 59 59 1030 528