67: Software for Things That Can Kill People

Embedded.fm · 11 Sept 2014 · 1h 09m

What this episode covers

Hosts Chris White and Elecia White discuss the rigorous regulatory processes for safety-critical software, drawing on their experiences with the FAA (DO-178B) and FDA (510k, PMA) for medical devices and avionics. They explain how hazard analysis determines certification levels, the necessity of extensive documentation and traceability, and the tension between agile development and waterfall compliance. The conversation highlights the ethical responsibility of engineers to push back against unsafe deadlines, the use of hardware compartmentalization (FPGAs, voting systems) to ensure safety, and the legal liabilities associated with product failures.

Mentioned

Companies
Toyota, Kleiner Perkins
Chips
FPGA
Tools
PC Lint
Also
FAA, FDA, DO-178B, 510k, PMA, ISO-26262, DO-26262, Hacker Dojo, San Jose State University

Other shows on the same ground, closest first.

  • The Pragmatic Embedded Podcast · 37m

    Agile Manifesto Pt. 1

    Hosts Jeff Gable and Luca Engineer discuss the first two principles of the Agile Manifesto, specifically 'Individuals and interactions over processes and tools' and 'Working software over comprehensive documentation,' with a focus on safety-critical industries like medical devices. They argue that while processes and documentation are necessary for regulatory compliance (FDA, MDR) and safety, they must be useful and not become 'cargo cult' rituals that hinder development. The conversation highlights the danger of overly granular specifications and emphasizes that code, infrastructure, and user interfaces can serve as valuable forms of documentation if they are clear and maintained.

  • The Pragmatic Embedded Podcast · 33m

    How to Speed Up Safety Critical Processes

    Jeff Gable and Luca Njani discuss strategies to accelerate safety-critical development in medical devices, automotive, and aerospace without compromising quality. They argue that reducing scope for initial releases and automating documentation using modern tools like Jama and Matrix significantly shortens cycle times. The hosts emphasize that modern regulatory guidance, such as the FDA's Computer System Assurance, supports streamlined validation processes, allowing teams to iterate faster and uncover defects earlier.

  • Global Medical Device Podcast · 40m

    The Future of Cybersecurity

    Chris Gates, Director of Product Security at Velentium and author of 'Medical Device Cybersecurity for Engineers and Manufacturers', discusses the evolving landscape of software as a medical device (SaMD) security. He critiques the FDA's recent draft guidance for lacking harmonization with global standards like ISO and EU MDR, arguing that it imposes excessive burdens without clear, workable requirements. Gates emphasizes the critical need for machine-readable Software Bill of Materials (SBOMs) and Vulnerability Exposure (VEX) documents to help Health Delivery Organizations (HDOs) manage risks effectively. He advocates for integrating cybersecurity into the core development process, using tools like MedCrip and Heimdal, to streamline regulatory approval and create a competitive advantage for manufacturers.

  • The Pragmatic Embedded Podcast · 47m

    E94 Requirements Engineering, part 1: Fundamentals

    Jeff Gable, a medical device consultant, and Luca, with automotive and aerospace experience, discuss the fundamentals of requirements engineering for safety-critical products. They explain the hierarchy from user needs to system requirements, emphasizing the EARS format and the critical distinction between verifiable requirements and design choices. The hosts argue against using Word or Excel for complex traceability, advocating instead for dedicated requirements management tools to ensure regulatory compliance and engineering rigor.

  • The Pragmatic Embedded Podcast · 40m

    Does DevOps Make Sense for Embedded Systems?

    Jeff Gable and Luca Engeni discuss why DevOps and Agile principles are essential for embedded systems, particularly in safety-critical industries like medical devices and aerospace. They argue that while hardware iteration is slower than software, fixed cadences for PCB releases can still accelerate feedback loops. The conversation highlights the shift toward over-the-air updates, using Tesla as a case study for the new safety challenges introduced by connected vehicles.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.