Incident: Software Bugs Delay F-35 Stealth Fighter Jet Deployment

Published Date: 2016-02-04

Postmortem Analysis
Timeline 1. The software failure incident related to the F-35 stealth fighter jet occurred in October 2015 [40499].
System 1. Computer software system of the F-35 stealth fighter jet [40499]
Responsible Organization 1. The Department of Defense's director for Operational Test and Evaluation warned of significant ongoing challenges with the F-35 stealth fighter jet's computer software [40499]. 2. The report highlighted issues with the computerized maintenance management system (CMMS) incorrectly authorizing older/inappropriate replacement parts [40499]. 3. The software failure incident also involved the failure to detect if the F-35 had been flying too fast and randomly preventing user logins into its computerized control system [40499].
Impacted Organization 1. The Department of Defense [40499] 2. The Air Force [40499] 3. The Marines [40499]
Software Causes 1. Ambiguous threat displays, limited ability to respond to threats, and a requirement for off-board sources to provide accurate coordinates for precision attack due to serious problems with the computer software [40499]. 2. Incorrect authorization of older/inappropriate replacement parts by the computerized maintenance management system (CMMS) [40499]. 3. Random prevention of user logins into the computerized control system [40499].
Non-software Causes 1. Engine problems causing one jet to burst into flames during take-off [Article 40499] 2. Wingtip lights not meeting Federal Aviation Administration (FAA) standards [Article 40499] 3. Tires unable to cope with landings [Article 40499]
Impacts 1. Ambiguous threat displays, limited ability to respond to threats, and a requirement for off-board sources to provide accurate coordinates for precision attack due to serious problems with the computer software [40499]. 2. Incorrect authorization of older/inappropriate replacement parts by the computerized maintenance management system [40499]. 3. Random prevention of user logins into the computerized control system [40499].
Preventions 1. Thorough and comprehensive software testing during the development phase could have potentially prevented the software failure incident [40499]. 2. Implementing proper quality control measures to identify and address bugs and issues in the software early on could have helped prevent the failure incident [40499]. 3. Conducting regular software maintenance and updates to ensure that the software remains functional and secure could have mitigated the risks of software failures [40499]. 4. Ensuring that the software undergoes rigorous validation and verification processes to confirm its functionality and reliability could have preempted the software failure incident [40499].
Fixes 1. Conduct rigorous testing and address the potentially lethal bugs facing the F-35 stealth fighter jet [40499]. 2. Address the serious problems with the computer software, including issues in fusion, electronic warfare, and weapons employment that result in ambiguous threat displays and limited ability to respond to threats [40499]. 3. Ensure the computerized maintenance management system (CMMS) correctly authorizes replacement parts and does not incorrectly authorize older/inappropriate parts [40499]. 4. Fix the issue where the software fails to detect if the aircraft has been flying too fast and randomly prevents user logins into the computerized control system [40499]. 5. Improve the software to prevent issues with the ejector seat, especially for pilots under certain weight limits, to avoid potential injuries or fatalities during ejection [40499].
References 1. Michael Gilmore, the Department of Defense's director for Operational Test and Evaluation [40499] 2. Air Force Lt. Gen. Chris Bogdan [40499]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization (a) The software failure incident having happened again at one_organization: The F-35 stealth fighter jet has faced a significant software failure incident related to potentially lethal bugs, ambiguous threat displays, limited ability to respond to threats, and the requirement for off-board sources to provide accurate coordinates for precision attack [40499]. (b) The software failure incident having happened again at multiple_organization: There is no specific mention in the provided article about a similar software failure incident happening at other organizations or with their products and services.
Phase (Design/Operation) design, operation (a) The software failure incident related to the design phase can be seen in the case of the F-35 stealth fighter jet. The Pentagon report revealed a massive list of potentially lethal bugs still facing the jet, including serious problems with the computer software such as issues in fusion, electronic warfare, and weapons employment resulting in ambiguous threat displays and limited ability to respond to threats [40499]. Additionally, the computerized maintenance management system incorrectly authorized older/inappropriate replacement parts, indicating a design flaw in the software [40499]. (b) In terms of software failure incidents related to the operation phase, the F-35 jet faced issues such as failing to detect if it had been flying too fast and randomly preventing user logins into its computerized control system [40499]. These operational failures point to contributing factors introduced by the operation or misuse of the system.
Boundary (Internal/External) within_system, outside_system (a) The software failure incident related to the F-35 stealth fighter jet includes issues within the system. The Pentagon report highlighted serious problems with the computer software, such as ambiguous threat displays, limited ability to respond to threats, and the need for off-board sources to provide accurate coordinates for precision attack [40499]. Additionally, the computerized maintenance management system incorrectly authorized older or inappropriate replacement parts, indicating internal software issues [40499]. (b) On the other hand, the incident also involved failures originating from outside the system. For example, the F-35 jet had issues with the ejector seat, where pilots under certain weight limits faced a high risk of injury or death upon ejection due to the seat's design flaw [40499]. This external factor, related to the physical design of the aircraft, contributed to the overall software failure incident.
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident occurring due to non-human actions: The F-35 stealth fighter jet faced a significant software issue related to the computer software, including problems in fusion, electronic warfare, and weapons employment, resulting in ambiguous threat displays and limited ability to respond to threats [40499]. Additionally, the computerized maintenance management system incorrectly authorized older or inappropriate replacement parts, indicating a software failure in the authorization process [40499]. (b) The software failure incident occurring due to human actions: The delays and escalating costs of the F-35 project were attributed to various factors, including engine problems causing a jet to burst into flames during take-off, simple mistakes such as wingtip lights not meeting FAA standards, and tires unable to cope with landings [40499]. These issues highlight software failures introduced by human actions during the development and production phases of the aircraft.
Dimension (Hardware/Software) hardware, software (a) The software failure incident occurring due to hardware: - The article mentions that the F-35 stealth fighter jet faced serious problems with the computer software, including issues in fusion, electronic warfare, and weapons employment resulting in ambiguous threat displays and limited ability to respond to threats [40499]. - It is reported that the F-35's computerized maintenance management system incorrectly authorizes older/inappropriate replacement parts, indicating a hardware-related issue with the system [40499]. (b) The software failure incident occurring due to software: - The article highlights that the F-35's computer software fails to detect if it has been flying too fast and randomly prevents user logins into its computerized control system, indicating software-related failures [40499]. - Additionally, the article mentions that the F-35's software issues include problems with the smart parts system incorrectly authorizing replacement parts, further emphasizing software-related failures [40499].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident related to the F-35 stealth fighter jet includes various issues that can be categorized as non-malicious failures: 1. The Pentagon report revealed a massive list of potentially lethal bugs facing the jet, including serious problems with the computer software affecting fusion, electronic warfare, and weapons employment [40499]. 2. The computerized maintenance management system incorrectly authorizes older/inappropriate replacement parts, indicating a software flaw [40499]. 3. The software fails to detect if it's been flying too fast and randomly prevents user logins into its computerized control system [40499]. These incidents point to software failures that were not introduced with malicious intent but rather as a result of flaws or errors in the system.
Intent (Poor/Accidental Decisions) poor_decisions, accidental_decisions (a) The software failure incident related to poor decisions can be inferred from the article. The F-35 stealth fighter jet faced significant challenges due to a massive list of potentially lethal bugs in its computer software, including issues in fusion, electronic warfare, and weapons employment resulting in ambiguous threat displays and limited ability to respond to threats [40499]. Additionally, the computerized maintenance management system incorrectly authorized older or inappropriate replacement parts, indicating poor decision-making in the software management process [40499]. (b) The software failure incident related to accidental decisions can be seen in the article as well. The F-35 jet's software failed to detect if it had been flying too fast and randomly prevented user logins into its computerized control system, indicating unintended decisions or mistakes in the software functionality [40499].
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident related to development incompetence can be seen in the case of the F-35 stealth fighter jet. The Pentagon report revealed a massive list of potentially lethal bugs still facing the jet, including serious problems with the computer software such as ambiguous threat displays, limited ability to respond to threats, and incorrect authorization of replacement parts by the computerized maintenance management system [40499]. (b) The software failure incident related to accidental factors includes issues such as the software failing to detect if the aircraft has been flying too fast and randomly preventing user logins into its computerized control system. These issues could be considered accidental in nature, as they may have been unintended consequences of the software design or implementation [40499].
Duration permanent (a) The software failure incident related to the F-35 stealth fighter jet seems to be more of a permanent nature. The article mentions significant ongoing challenges with the computer software, including issues in fusion, electronic warfare, and weapons employment resulting in ambiguous threat displays, limited ability to respond to threats, and a requirement for off-board sources to provide accurate coordinates for precision attack [40499]. Additionally, the computerized maintenance management system incorrectly authorizes older/inappropriate replacement parts, and it fails to detect if it's been flying too fast and randomly prevents user logins into its computerized control system [40499]. (b) The software failure incident does not seem to be temporary as the issues mentioned in the articles are fundamental and ongoing challenges rather than isolated incidents caused by specific circumstances.
Behaviour crash, omission, value, other (a) crash: The software failure incident related to a crash is evident in the article when it mentions that the F-35 stealth fighter jet experienced significant ongoing challenges, including serious problems with the computer software, resulting in ambiguous threat displays, limited ability to respond to threats, and a requirement for off-board sources to provide accurate coordinates for precision attack [40499]. (b) omission: The software failure incident related to omission is highlighted in the article when it states that the computerized maintenance management system incorrectly authorized older/inappropriate replacement parts, indicating a failure of the system to perform its intended function correctly [40499]. (d) value: The software failure incident related to performing its intended functions incorrectly is seen in the article when it mentions that the software failed to detect if it had been flying too fast and randomly prevented user logins into its computerized control system, indicating incorrect behavior [40499]. (f) other: The software failure incident also exhibited other behaviors such as the system failing to live up to expectations despite being the most expensive weapon in history, experiencing delays of over eight years, and being over budget by billions of dollars. Additionally, the software issues led to concerns about the safety of pilots, with restrictions on pilot weight due to potential risks during ejection [40499].

IoT System Layer

Layer Option Rationale
Perception sensor, processing_unit, embedded_software (a) sensor: The software failure incident related to sensor error is mentioned in the article. The report revealed serious problems with the computer software, including issues in fusion, electronic warfare, and weapons employment resulting in ambiguous threat displays and limited ability to respond to threats ([40499]). (b) actuator: The article does not specifically mention any software failure incident related to actuator error. (c) processing_unit: The article mentions issues with the computerized maintenance management system (CMMS) incorrectly authorizing older/inappropriate replacement parts, indicating a processing error in the software ([40499]). (d) network_communication: The article does not provide information on any software failure incident related to network communication error. (e) embedded_software: The article discusses the integration of the gun into the F-35A airframe, highlighting the need to keep the gun hidden behind closed doors until the trigger is pulled to maintain the F-35's low observable criteria. This integration involves embedded software that controls the gun system ([40499]).
Communication unknown The articles do not provide specific information about a software failure incident related to the communication layer of the cyber physical system that failed.
Application TRUE The software failure incident related to the application layer of the cyber physical system in the F-35 stealth fighter jet was due to significant ongoing challenges with the computer software. The Pentagon report highlighted problems with the software in fusion, electronic warfare, and weapons employment, resulting in ambiguous threat displays, limited ability to respond to threats, and a requirement for off-board sources to provide accurate coordinates for precision attack [40499]. Additionally, the computerized maintenance management system (CMMS) incorrectly authorized older/inappropriate replacement parts, indicating a software-related issue [40499].

Other Details

Category Option Rationale
Consequence harm, property, delay, non-human, theoretical_consequence (a) death: People lost their lives due to the software failure - The article does not mention any deaths caused by the software failure incident. [40499] (b) harm: People were physically harmed due to the software failure - The article mentions that pilots under 136 pounds have restrictions on flying the F-35 variant due to the ejector seat design, which could result in serious neck injury upon ejection. [40499] (c) basic: People's access to food or shelter was impacted because of the software failure - The article does not mention any impact on people's access to food or shelter due to the software failure incident. [40499] (d) property: People's material goods, money, or data was impacted due to the software failure - The article discusses the significant delays and cost overruns in the F-35 program, amounting to over $3.5 billion and being eight years late. This indicates a financial impact due to the software failure incident. [40499] (e) delay: People had to postpone an activity due to the software failure - The article highlights that the F-35 program has been delayed by more than eight years, indicating significant delays in the project timeline. [40499] (f) non-human: Non-human entities were impacted due to the software failure - The article discusses various issues with the F-35 stealth fighter jet, including bugs in the computer software, problems with the ejector seat design, and issues with the computerized maintenance management system. These issues impact the functionality and performance of the aircraft, which is a non-human entity. [40499] (g) no_consequence: There were no real observed consequences of the software failure - The article clearly outlines several consequences of the software failure incident, including financial impacts, delays in the project timeline, and issues affecting the performance and safety of the F-35 stealth fighter jet. [40499] (h) theoretical_consequence: There were potential consequences discussed of the software failure that did not occur - The article mentions potential consequences such as the limitations and challenges faced by the F-35 due to software bugs, design flaws in the ejector seat, and issues with the computerized maintenance management system. These potential consequences have been identified and discussed in the article. [40499] (i) other: Was there consequence(s) of the software failure not described in the (a to h) options? What is the other consequence(s)? - The article does not mention any other specific consequences of the software failure incident beyond those related to financial impacts, delays, safety concerns for pilots, and performance issues with the F-35 stealth fighter jet. [40499]
Domain government (a) The failed system was intended to support the defense industry, specifically the controversial F-35 stealth fighter jet project, which is described as the most expensive weapon in history [40499]. The software failures reported include serious problems with the computer software, such as issues in fusion, electronic warfare, weapons employment, ambiguous threat displays, limited ability to respond to threats, and the requirement for off-board sources to provide accurate coordinates for precision attack [40499]. Additionally, the computerized maintenance management system incorrectly authorizes older/inappropriate replacement parts, and the system fails to detect if it's been flying too fast and randomly prevents user logins into its computerized control system [40499].

Sources

Back to List