An investigation of the therac25 accidents nancy leveson, university of washington clark s. Accident investigation techniques, second edition, oakley. Raymond benjamin, secretary general, international civil aviation organization air safety through investigation journal of the international society of air safety. Although the authors warn against drawing any oversimplified conclusions from these complex accidents, it appears clear to me that the root cause was the omission from the therac25 of the hardware safety interlocks of its safely operated predecessor, the therac 20, and the devices dependence for these functions on poorly written, hardly. Their engineering method was poor, for instance, they assigned a single programmer to the daunting task of creating the machines real time software which was very complex. The therac25 ion chambers could not handle the high density of ionization from the unscanned electron beam at highbeam current. The therac 25 ion chambers could not handle the high density of ionization from the unscanned electron beam at highbeam current. Leveson, addison wesley, 1995 text by the same author with a 33page analysis of the therac25 case, somewhat less technical than the ieee paper but still including thorough details, with perhaps more emphasis on the ethical. Turner, university of california, irvine reprinted with permission, ieee computer, vol. It delivered two types of radiation beams, a lowpower electron beam and a highpower xray. On the surface, the primary reason that therac20 killed far fewer people than therac25 was the fact that therac20 had hardware interlocks, while therac25 did not. I do not own any of the images, music, or videos used.
Leveson et al reference is a very complete account of these accidents, although it is rather heavily slanted towards procedure and legality rather than concentrating on the technological lessons that are to be learned. The therac25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac6 and therac20 units the earlier units had been produced in partnership with cgr of france it was involved in at least six accidents between 1985 and 1987, in which patients were given massive overdoses of radiation. Therac25, however, was developed by aecl alone when the two companies drifted apart after the joint development of therac20. Air safety through investigation julyseptember 2014. Some claims, although questionable, may be paid due to a lack of conclusive evidence of fraud.
The therac25 is a radiation therapy machine, a medical linear. The therac25 software lied to the operators, and the machine itself could not detect that a massive overdose had occurred. In order to promote public education and public safety, equal justice for all, a better informed citizenry, the rule of law, world trade and world peace, this legal document is hereby made available on a noncommercial basis, as it is the right of all humans to know and speak the laws that govern them. The therac 25 was the most computerized and sophisticated radiation therapy machine of its time. Therac 25 aecl designed therac 25 to use computer control from the start. The therac 25 machine was a stateoftheart linear accelerator developed by the company atomic energy canada limited aecl and a french company cgr to provide radiation treatment to cancer patients. Apr 20, 20 an investigation of the therac25 accidents part iii nancy leveson, university of washington clark s.
Information and computer science, university of california, irvine, 1992 59 pages. An analysis conducted at the three levels of the case national, group, and individual levels gives insights on the ethical issues raised in the case study. Essay on the therac25 and its accident investigation instructor name school coursenumber june 2, 2015 introduction in 1983, a machine was released to help in the treatment of cancerous tumors through the use of high energy laser beams. An updated version of the original accident investigation paper by nancy leveson i have updated and changed slightly the original accident report. Serious accident investigation chief investigators handbook blm manual h11123 3 revised 062403 jdc chapter 1 administrative information and overview 1. In manual mode, a radiotherapy technician would manually set up various.
The therac 25 accidents form the basis for what is often considered the bestdocumented software safety casestudy available. After the tyler accidents, therac 20 users who had heard informally about the tyler accidents from therac 25 users conducted informal investigations to determine whether the same problem could occur with their machines. Software in the therac 6 and therac 20 was reused in the therac25. The user manual did not explain or even address the error codes, so the operator pressed the p. In the 1980s, a number of people were killed and injured by a flawed radiation therapy machine.
An investigation of the therac25 accidents computer author. An accident investigation is the methodical collection of evidence facts, and the analysis and interpretation of the evidence. In order to promote public education and public safety, equal justice for all, a better informed citizenry, the rule of law, world trade and world peace, this legal document is hereby made available on a noncommercial basis, as it is the right of all humans to. Between june 1985 and january 1987, the therac25 medical electron accelerator was involved in. An investigation of the therac25 accidents citeseerx. Citeseerx an investigation of the therac25 accidents.
Feb 17, 2014 the therac 25 accidents form the basis for what is often considered the bestdocumented software safety casestudy available. Software in the therac6 and therac20 was reused in the therac25. The big picture the therac25 was a computerized radiation therapy machine 11 machines were installed us and canada in 19851987 there were 6 known accidents where massive overdoses were made patients died or suffered serious injuries these were traced to race conditions in reading operator input unique early investigation of safetycritical. It was an extremely costly machine with high maintenance needs. The therac 25 software disaster the therac 25 is a computerized medical radiation therapy machine for cancer patients. Statements given on police report do not match statements given to insurance company. Download fulltext pdf investigation of alarmrelated accidents and incidents in aviation article pdf available in international journal of aviation psychology 3. This provided the economic advantage of delivering two kinds of therapeutic radiation with one machine.
You are viewing free content from a subscription product. Theyll give your presentations a professional, memorable appearance the kind of sophisticated look that todays audiences expect. The experience illustrates a number of principles that are vital to understanding how and why the design and analysis of safetycritical systems must be done in a methodical way according to established principles. Thorough investigations may uncover unsafe conditions, the need for new. The primary subject of concern in the case is safety bozdag 5. Dec 11, 2017 in the 1980s, a number of people were killed and injured by a flawed radiation therapy machine. An investigation of the therac25 accidents nancy g. Consult your telephone directory for the number of your local osha area or regional office for further assistance and advice listed under u. An investigation of the therac25 accidents part iv.
Aecl claims again that overdoes is impossible and that no other accidents. A detailed accident investigation, drawn from publicly available docu ments, can be found. Therac 25 just like any other technology, therac 25 too had its sociotechnical aspects. The first mode consisted of an electron beam of 200 rads that was aimed at the patient directly. Many lessons can be learned from this series of accidents.
Pdf investigation of alarmrelated accidents and incidents. The operators manual supplied with the machine does not ex. Will there be a full sized pdf of the cause map linked to this post. Police report was taken over the telephone or via walkin no on scene investigation. Accident investigation 101 a free powerpoint ppt presentation displayed as a flash slide show on id. Between june 1985 and january 1987, the therac25 medical electron accelerator was involved in six massive radiation overdoses. Nancy leveson and clark turner, the investigation of thetherac 25 accidents, computer, 26, 7 july 1993 pp 1841. Labor department or under the state government section where states administer their own osha programs. Citeseerx document details isaac councill, lee giles, pradeep teregowda. An investigation of the therac25 accidents essay 10546 words.
Turner, university of california, irvine a thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. The therac 25, like other medical linear accelerators including its predecessors therac 6 and therac 20, used highenergy electron beams to destroy tumors without damaging nearby healthy tissue. Accident investigation techniques, second edition kindle edition by oakley, jeffrey s download it once and read it on your kindle device, pc, phones or tablets. The therac 25 a case study in safety failure radiation therapy machine the most serious computerrelated accidents to date people were killed reference. It should not be performed in an ad hoc or unconsidered manner. Professionalismtherac25 wikibooks, open books for an open. As noted earlier, the software for the therac 25 and therac 20 both evolved from the therac 6 software. During the time span of june 1985 to january 1987, it. Therac 25 accidents adapted from a proprietary report from the aecl research co may,1994 the n. Ruckelshaus, risk in a free society, risk analysis, vol.
A common mistake in engineering, in this case and in many others, is to put too much confidence in software. A thorough account of the therac25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. Purpose investigations are conducted to fi nd out the cause of accidents, injuries and near misses, and to prevent similar events from happening in the future. The same witness appears in prior claims often with other insurance companies and with similar circumstances. The therac 25 software lied to the operators, and the machine itself could not detect that a massive overdose had occurred. An investigation of the therac25 accidents stanford university. An investigation of the therac25 accidents part iii nancy leveson, university of washington clark s. Therac25 radiation overdoses your expert root cause. Therac25 aecl designed therac25 to use computer control from the start. The therac25 software disaster essay 1293 words cram. A detailed investigation of the factors involved in the softwarerelated overdoses and. A regional distribution of the number of road accidents reveals that over half of all crashes occurred in khomas region 8,590 or 55. As a result, several people died and others were seriously injured.
An investigation of the therac 25 accidents nancy g. Therac 6 and therac 20 had histories of clinical use without computer control therac25 software had more responsibility for safety than in previous machines. Worlds best powerpoint templates crystalgraphics offers more powerpoint templates than anyone else in the world, with over 4 million to choose from. Thus, while the hardware interlocks on therac20 prevented software errors from causing problems, therac25 had no similar mechanism. Enter your mobile number or email address below and well send you a link to download the free kindle app. A brief summary of how therac25 actually operated is given as follows. The therac 25 was a computercontrolled radiation therapy machine produced by atomic energy of canada limited aecl in 1982 after the therac 6 and therac 20 units the earlier units had been produced in partnership with cgr of france.
Depending on whether the tumor was close to the skin or in deeper tissue, the therac 25 would operate in an electronbeam or xray mode. The therac25 and its accident investigation several factors led to the thera25 accidents. Scientific methods for accident investigation introduction most accident investigation authorities impose time and resource constraints, and we can all think of cases where the resulting pressure on investigators has caused poor quality reports. Leveson et al reference is a very complete account of these accidents, although it is rather heavily slanted towards procedure and legality rather than concentrating on the. Therac6 and therac20 had histories of clinical use without computer control therac25 software had more responsibility for safety than in previous machines. An investigation of the therac25 accidents computer. Published papers deal with medical, legal, economic, educational, behavioral, theoretical or empirical aspects of. A detailed investigation of the factors involved in the softwarerelated overdoses and attempts by users, manufacturers, and government agencies to deal with the accidents is presented. The therac25 was a computercontrolled radiation therapy machine produced by atomic. Therac 6 and therac 20 had histories of clinical use without computer control therac 25 software had more responsibility for safety than in previous machines. This resulted in everyone from the manufacturers, to fda, to hospitals and operators assuming that it was a failsafe machine, especially since its earlier versions had been working.
The investigation of accidents and incidents is a key activity and plays an important part in the management of health and safety. The machine was developed by aecl,a canadian company that had worked which the french company, cgr, on the earlier therac models therac6 and therac20. Winner of the standing ovation award for best powerpoint templates from presentations magazine. Leveson, addison wesley, 1995 text by the same author with a 33page analysis of the therac 25 case, somewhat less technical than the ieee paper but still including thorough details, with perhaps more emphasis on the ethical. The therac25 software disaster the therac25 is a computerized medical radiation therapy machine for cancer patients. The book will consist of the cases displayed at computing casestherac25, hughes. An investigation of the therac 25 accidents nancy leveson, university of washington clark s. The manufacturers were responsible for many of these factors that eventually caused death to the victims. Manual of aircraft accident and incident investigation. The therac 25 was a computerized radiation therapy machine 11 machines were installed us and canada in 19851987 there were 6 known accidents where massive overdoses were made patients died or suffered serious injuries these were traced to race conditions in reading operator input unique early investigation of safetycritical.
Right now, we only get the thumbnail view of it, as well as the virginia tech link. The therac25 case is what huff and frey call a thick. Ppt accident investigation 101 powerpoint presentation. An investigation of the therac25 accidents essay 10546. Software in the therac 6 and therac 20 was reused in the therac 25.
Regarding applicant or claimant or insured advises that they were referred to doctor or attorney by an. The therac25 and its accident investigation case study. Tool 1 investigation of accidents, injuries and near misses i. A thorough account of the therac 25 medical electron accelerator accidents reveals previously unknown details and suggests ways to reduce risk in the future. Computers are increasingly being introduced into safetycritical systems and, as a consequence, have been involved in accidents. Aug 08, 2010 the therac 25 is a radiation therapy machine used during the mid80s. Researchers who investigated the accidents found several contributing causes.
961 697 1552 1128 1228 875 850 1616 1290 1102 913 314 565 963 1227 1490 1204 1110 1561 793 1297 397 439 1106 493 62 292 1181 187 874 1280 161 56 681 1346 190 1482 731 696 1356