Nancy Leveson Professions : Computer Scientist Browse All Authors Top 6 quotes by Nancy Leveson Safety is an emergent property of systems, not a component property. Nancy Leveson components property safety Reliability engineers often assume that reliability and safety are synonymous, but this assumption is true only in special cases. Nancy Leveson reliability safety special Software−related accidents are usually caused by flawed requirements. Nancy Leveson flawed requirements software Highly reliable components are not necessarily safe. . Nancy Leveson components safe What [software] must not do is not the inverse of what it must do. . Nancy Leveson inverse software Requirement completeness: Requirements are sufficient to distinguish the desired behavior of the software from that of any other undesired program that might be designed. . Nancy Leveson requirements behavior might Similar Authors Bill Joy computer-scientist Butler Lampson computer-scientist Brian Reid computer-scientist Brian Kernighan computer-scientist Andrew S. Tanenbaum computer-scientist Andy Hertzfeld computer-scientist All Authors