{"id":{"repo_id":"mit","oai_identifier":"oai:dspace.mit.edu:1721.1/83796"},"canonical_url":"https://search.dev.ndltd.org/etd/mit/oai:dspace.mit.edu:1721.1/83796","repository":{"repo_id":"mit","name":"MIT","base_url":"https://dspace.mit.edu/oai/request"},"display":{"title":"A system theoretic safety analysis of friendly fire prevention in ground based missile systems","abstract":"This thesis used Dr. Leveson's STAMP (Systems-Theoretic Accident Model and Process) model of accident causation to analyze a friendly fire accident that occurred on 22 March 03 between a British Tornado aircraft and a US Patriot Missile battery. This causation model analyzes system constraints, control loops, and process models to identify inadequate control structures leading to hazards and preventative measures that may be taken to reduce the effect of these hazards. By using a system-based causation model like STAMP, rather than a traditional chain of events model, this thesis aimed to identify systemic factors and component interactions that may have contributed to the accident, rather than simply analyzing component failures. Additionally, care was taken to understand the rationale for decisions that were made, rather than assigning blame. The analysis identified a number of areas in which control flaws or inadequacies led to the friendly fire incident. A set of recommendations was developed that may help to prevent similar accidents from occurring in the future.","abstract_html":"This thesis used Dr. Leveson's STAMP (Systems-Theoretic Accident Model and Process) model of accident causation to analyze a friendly fire accident that occurred on 22 March 03 between a British Tornado aircraft and a US Patriot Missile battery. This causation model analyzes system constraints, control loops, and process models to identify inadequate control structures leading to hazards and preventative measures that may be taken to reduce the effect of these hazards. By using a system-based causation model like STAMP, rather than a traditional chain of events model, this thesis aimed to identify systemic factors and component interactions that may have contributed to the accident, rather than simply analyzing component failures. Additionally, care was taken to understand the rationale for decisions that were made, rather than assigning blame. The analysis identified a number of areas in which control flaws or inadequacies led to the friendly fire incident. A set of recommendations was developed that may help to prevent similar accidents from occurring in the future.","abstract_has_math":false,"creators":["McCarthy, Scott (Scott Lewis)"],"institution":"Massachusetts Institute of Technology","degree_name":null,"degree_level":null,"degree_discipline":null,"degree_department":"Massachusetts Institute of Technology. Engineering Systems Division.","school":null,"contributors":[],"advisors":["Nancy Leveson."],"committee_chairs":[],"committee_members":[],"year":2013,"date_issued":"2013","date_published":"2013","updated_at":"2026-07-22T22:22:06Z","subjects":["Engineering Systems Division."],"languages":["eng"],"rights":["M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission."],"rights_urls":["http://dspace.mit.edu/handle/1721.1/7582"],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/1721.1/83796","outbound_label":"Handle","outbound_source":"dc:identifier.uri"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor.advisor","label":"Advisor","values":["Nancy Leveson."]},{"key":"dc:contributor.department","label":"Department","values":["Massachusetts Institute of Technology. Engineering Systems Division."]},{"key":"dc:contributor.other","label":"Dc Contributor Other","values":["Massachusetts Institute of Technology. Engineering Systems Division."]},{"key":"dc:creator","label":"Author","values":["McCarthy, Scott (Scott Lewis)"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date.accessioned","label":"Dc Date Accessioned","values":["2014-01-09T19:56:04Z"]},{"key":"dc:date.available","label":"Dc Date Available","values":["2014-01-09T19:56:04Z"]},{"key":"dc:date.issued","label":"Date","values":["2013"]},{"key":"dc:publisher","label":"Institution","values":["Massachusetts Institute of Technology"]},{"key":"dc:type","label":"Dc Type","values":["Thesis"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Engineering Systems Division."]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language.iso","label":"Language (ISO)","values":["eng"]},{"key":"dc:rights","label":"Dc Rights","values":["M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission."]},{"key":"dc:rights.uri","label":"Rights URI","values":["http://dspace.mit.edu/handle/1721.1/7582"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier.uri","label":"Identifier URI","values":["http://hdl.handle.net/1721.1/83796"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Thesis (S.M. in Engineering and Management)--Massachusetts Institute of Technology, Engineering Systems Division, 2013.","Cataloged from PDF version of thesis.","Includes bibliographical references (page 61)."]},{"key":"dc:description.abstract","label":"Abstract","values":["This thesis used Dr. Leveson's STAMP (Systems-Theoretic Accident Model and Process) model of accident causation to analyze a friendly fire accident that occurred on 22 March 03 between a British Tornado aircraft and a US Patriot Missile battery. This causation model analyzes system constraints, control loops, and process models to identify inadequate control structures leading to hazards and preventative measures that may be taken to reduce the effect of these hazards. By using a system-based causation model like STAMP, rather than a traditional chain of events model, this thesis aimed to identify systemic factors and component interactions that may have contributed to the accident, rather than simply analyzing component failures. Additionally, care was taken to understand the rationale for decisions that were made, rather than assigning blame. The analysis identified a number of areas in which control flaws or inadequacies led to the friendly fire incident. A set of recommendations was developed that may help to prevent similar accidents from occurring in the future."]},{"key":"dc:description.degree","label":"Dc Description Degree","values":["S.M.in Engineering and Management"]},{"key":"dc:title","label":"Title","values":["A system theoretic safety analysis of friendly fire prevention in ground based missile systems"]}]}],"canonical_facts":{"dc:contributor.advisor":["Nancy Leveson."],"dc:contributor.department":["Massachusetts Institute of Technology. Engineering Systems Division."],"dc:contributor.other":["Massachusetts Institute of Technology. Engineering Systems Division."],"dc:creator":["McCarthy, Scott (Scott Lewis)"],"dc:date.accessioned":["2014-01-09T19:56:04Z"],"dc:date.available":["2014-01-09T19:56:04Z"],"dc:date.issued":["2013"],"dc:description":["Thesis (S.M. in Engineering and Management)--Massachusetts Institute of Technology, Engineering Systems Division, 2013.","Cataloged from PDF version of thesis.","Includes bibliographical references (page 61)."],"dc:description.abstract":["This thesis used Dr. Leveson's STAMP (Systems-Theoretic Accident Model and Process) model of accident causation to analyze a friendly fire accident that occurred on 22 March 03 between a British Tornado aircraft and a US Patriot Missile battery. This causation model analyzes system constraints, control loops, and process models to identify inadequate control structures leading to hazards and preventative measures that may be taken to reduce the effect of these hazards. By using a system-based causation model like STAMP, rather than a traditional chain of events model, this thesis aimed to identify systemic factors and component interactions that may have contributed to the accident, rather than simply analyzing component failures. Additionally, care was taken to understand the rationale for decisions that were made, rather than assigning blame. The analysis identified a number of areas in which control flaws or inadequacies led to the friendly fire incident. A set of recommendations was developed that may help to prevent similar accidents from occurring in the future."],"dc:description.degree":["S.M.in Engineering and Management"],"dc:identifier.uri":["http://hdl.handle.net/1721.1/83796"],"dc:language.iso":["eng"],"dc:publisher":["Massachusetts Institute of Technology"],"dc:rights":["M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission."],"dc:rights.uri":["http://dspace.mit.edu/handle/1721.1/7582"],"dc:subject":["Engineering Systems Division."],"dc:title":["A system theoretic safety analysis of friendly fire prevention in ground based missile systems"],"dc:type":["Thesis"]},"updated_at":"2026-07-22T22:22:06Z"}