An error model for computer control systems

This paper presents an error model that is intended to allow the dependability of computer control systems, with fault tolerant mechanisms included, to be evaluated. The model allows error ´surfaces´ to be defined for a given application, and used to define an error region that will give a measure of error coverage. The paper applies the model to an illustrative example to show how it might be used in an autopilot model.