Incident: Software Failure: F-35 Joint Strike Fighter ALIS System Malfunction

Published Date: 2016-09-06

Postmortem Analysis
Timeline 1. The software failure incident related to the F-35 Joint Strike Fighter's logistics software system happened in August 2016 [47627].
System 1. Autonomic Logistics Information System (ALIS) - The software system that supports operations, mission planning, maintenance issue spotting, and pilot performance tracking for the F-35 Joint Strike Fighter [47627, 47627, 47627] 2. Computerized Maintenance Management System (CMMS) - The system that incorrectly authorizes replacement parts and fails to detect if the aircraft has been flying too fast [47627]
Responsible Organization 1. The Department of Defense officials were responsible for causing the software failure incident with the Autonomic Logistics Information System (ALIS) on the F-35 Joint Strike Fighter [47627].
Impacted Organization 1. The U.S. Air Force was impacted by the software failure incident related to the F-35 Joint Strike Fighter program, specifically with issues in the radar software and the ALIS (Autonomic Logistics Information System) software [47627]. 2. The U.S. Navy was also impacted as they were scheduled to deploy the F-35 jets in 2018, but the software issues, particularly with ALIS, posed a risk to their deployment plans [47627].
Software Causes 1. The software failure incident was caused by issues with the Autonomic Logistics Information System (ALIS), which is considered the 'brains' of the F-35 plane. The ALIS software is designed to support operations, mission planning, and maintenance issue spotting [47627]. 2. The ALIS software problems led to maintenance crews having to resort to labor-intensive alternatives, such as manually burning data onto CDs and sending files across a civilian WiFi network [47627]. 3. The lack of testing of the ALIS software meant it was not ready for deployment by the Air Force in August and the Navy in 2018, potentially leading to additional costs and operational challenges [47627].
Non-software Causes 1. Delays in development and deployment of the F-35 Joint Strike Fighter [47627] 2. Cost overruns and technical problems with the F-35 project [47627] 3. Issues with the radar system crashing during flight [47627] 4. Problems with the computer software affecting fusion, electronic warfare, and weapons employment [47627] 5. Concerns about the ejection seat design potentially causing serious neck injuries to pilots [47627]
Impacts 1. The software failure incident with the Autonomic Logistics Information System (ALIS) in the F-35 Joint Strike Fighter program caused problems with the radar software, leading to radar crashes and instability during flight, potentially delaying the operational deployability of the jets [47627, 47627]. 2. The failure of the ALIS software system, considered the 'brains' of the plane, grounded the entire fleet due to a lack of backup system, potentially costing billions in additional expenses and hindering operational readiness [47627, 47627]. 3. The software issues also affected the Computerized Maintenance Management System (CMMS) in the F-35, leading to incorrect authorization of replacement parts, failure to detect flying speed limits, and random prevention of user logins into the control system, impacting maintenance operations [47627, 47627].
Preventions 1. Proper testing and verification of the software before deployment could have prevented the software failure incident [47627]. 2. Implementing a backup system for critical software components like the Autonomic Logistics Information System (ALIS) could have mitigated the risk of fleet-wide grounding due to software issues [47627]. 3. Ensuring that the software development schedule is realistic and achievable to avoid delays and cost overruns that can lead to software failures [47627].
Fixes 1. Upgrading the software to the 3F version in 2017, which will give the F-35 its full war-fighting capability, including the ability to launch certain types of weapons and improved pilot interfaces and displays [47627]. 2. Addressing deficiencies and conducting verification testing to fix new problems discovered at a substantial rate in the software [47627]. 3. Resolving issues with the Autonomic Logistics Information System (ALIS) software, which supports operations, mission planning, maintenance issue spotting, and pilot mission planning [47627]. 4. Ensuring the radar software stability to prevent crashes and maintain the radar's ability to stay up and running during flight [47627]. 5. Fixing problems with the computer software related to fusion, electronic warfare, and weapons employment to improve threat displays and response capabilities [47627].
References 1. The Pentagon's director of testing, Michael Gilmore, as mentioned in the article [47627] 2. Air Force Secretary Deborah Lee James, General David Goldfein, and Frank Kendall, as mentioned in the article [47627] 3. Air Force Lieutenant General Chris Bogdan, as mentioned in the article [47627] 4. Senator John McCain, as mentioned in the article [47627] 5. Lockheed Martin, as mentioned in the article [47627] 6. Government Accountability Office, as mentioned in the article [47627] 7. Major General Jeffrey Harrigian, as mentioned in the article [47627]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident having happened again at one_organization: The F-35 Joint Strike Fighter program has faced software-related issues, particularly with the Autonomic Logistics Information System (ALIS), which is considered the 'brains' of the plane. The ALIS software is designed to support operations, mission planning, and maintenance issue spotting. Problems with the ALIS software have led to maintenance crews resorting to labor-intensive alternatives, such as manually burning data onto CDs and sending files across a civilian WiFi network. The software has been so flawed that it has caused delays and challenges in operations [47627]. (b) The software failure incident having happened again at multiple_organization: The F-35 Joint Strike Fighter program has faced challenges not only with its own software but also with the complex radar system. The software glitch in the radar system has interfered with the radar's ability to stay up and running during flight, posing a threat to the operational deployability of the jets. Additionally, a Pentagon report highlighted a list of potentially lethal bugs facing the jet, including issues with computer software related to fusion, electronic warfare, and weapons employment. These problems have led to ambiguous threat displays and limited ability to respond to threats [47627].
Phase (Design/Operation) design (a) The software failure incident related to the development phase of design can be seen in the case of the F-35 Joint Strike Fighter. The Autonomic Logistics Information System (ALIS), considered the 'brains' of the plane, faced issues leading to potential failures. The ALIS is designed to support operations, mission planning, and maintenance issue spotting. However, a failure in the ALIS could potentially take the entire fleet offline due to the lack of a backup system [47627]. (b) The software failure incident related to the development phase of operation can be observed in the case of the F-35's radar system. The complex radar system of the F-35 Lightning II Joint Strike Fighter experienced software glitches that interfered with the radar's ability to function properly during flight. This issue posed a significant threat to the USAF's plans to declare the jets operationally deployable [47627].
Boundary (Internal/External) within_system, outside_system (a) The software failure incident related to the F-35 Joint Strike Fighter can be categorized as within_system. The incident specifically involves issues with the Autonomic Logistics Information System (ALIS), which is considered the 'brains' of the plane [47627]. The ALIS software is designed to support operations, mission planning, maintenance issue spotting, and pilot performance review. Problems with the ALIS software have led to maintenance crews resorting to labor-intensive alternatives, such as manually burning data onto CDs and sending files across a civilian WiFi network [47627]. Additionally, the lack of testing of the ALIS software has raised concerns about its readiness for deployment by the Air Force and Navy [47627]. The failure of the ALIS software could potentially ground the entire fleet of F-35 aircraft, indicating an internal system issue. (b) On the other hand, the incident also involves external factors contributing to the software failure. For example, the Pentagon's F-35 program office has been in negotiations with Lockheed over long-delayed contracts for the next two batches of F-35 jets, worth about $15 billion [47627]. Delays in contract negotiations and external financial considerations can be seen as factors originating from outside the system that have an impact on the software failure incident. Additionally, the program has faced challenges related to cost overruns and technical problems, which are external factors influencing the software development and deployment process [47627].
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident occurring due to non-human actions: - The software glitch affecting the F-35 Lightning II Joint Strike Fighter's radar system was reported to interfere with the radar's ability to stay up and running during flight, posing a threat to operational deployability [47627]. - The Autonomic Logistics Information System (ALIS), considered the 'brains' of the plane, was identified as a critical component that experienced issues leading to potential fleet grounding. The failure of ALIS, a non-human system, could take the entire fleet offline due to the lack of a backup system [47627]. (b) The software failure incident occurring due to human actions: - The report highlighted that the computerized maintenance management system (CMMS) incorrectly authorized older or inappropriate replacement parts, indicating a potential failure introduced by human actions [47627]. - The Pentagon report revealed a list of potentially lethal bugs facing the F-35 jet, including problems with computer software related to fusion, electronic warfare, and weapons employment. These issues could result in ambiguous threat displays and limited ability to respond to threats, potentially linked to human actions during software development and implementation [47627].
Dimension (Hardware/Software) hardware, software (a) The software failure incident occurring due to hardware: - The F-35 Joint Strike Fighter faced a hardware-related issue with its complex radar system that kept crashing, affecting the AN/APG-81 AESA radar's ability to work in flight [47627]. - The ejection seat of the F-35 also posed a hardware-related risk, as pilots under certain weight limits had a higher chance of serious neck injury or death upon ejecting due to the seat's design [47627]. (b) The software failure incident occurring due to software: - The primary software-related issue was with the Autonomic Logistics Information System (ALIS), described as the 'brains' of the plane, which supports operations, mission planning, maintenance issue spotting, and pilot performance review. ALIS faced functionality problems, and a lack of testing meant it was not ready for deployment by the Air Force and Navy [47627]. - The F-35's computerized maintenance management system (CMMS) had software flaws, including incorrectly authorizing replacement parts and failing to detect if the aircraft had been flying too fast. It also randomly prevented user logins into the control system [47627]. - The software running on ground computers for the F-35 was highlighted as a potential issue, as it needed to be fully functional for the aircraft to operate as intended [47627].
Objective (Malicious/Non-malicious) non-malicious (a) The articles do not mention any malicious software failure incidents related to the F-35 Joint Strike Fighter. (b) The software failure incidents related to the F-35 Joint Strike Fighter are non-malicious in nature. The issues with the software, particularly the Autonomic Logistics Information System (ALIS), were not intentional acts to harm the system but rather technical challenges faced during the development and testing phases of the aircraft [47627]. The software glitches, radar stability problems, delays in software testing, and issues with the computer software were all non-malicious failures that impacted the functionality and readiness of the F-35 aircraft.
Intent (Poor/Accidental Decisions) poor_decisions (a) The software failure incident related to the F-35 Joint Strike Fighter program can be attributed to poor decisions. The Pentagon's director of testing, Michael Gilmore, warned that the F-35 program was "not on a path toward success but instead on a path toward failing to deliver" the plane's full combat capabilities on time [47627]. Additionally, a Government Accountability Office report highlighted that a failure in the Autonomic Logistics Information System (ALIS), considered the 'brains' of the plane, could potentially take the entire fleet offline due to the lack of a backup system [47627]. These instances point towards poor decisions and planning in the development and implementation of the software for the F-35 program.
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident occurring due to development incompetence: The software failure incident related to the F-35 Joint Strike Fighter program can be attributed to development incompetence. The Autonomic Logistics Information System (ALIS), considered the 'brains' of the plane, faced significant issues leading to the grounding of the entire fleet. The ALIS software, designed to support operations and maintenance, had flaws that required labor-intensive workarounds, such as manually burning data onto CDs and sending files over civilian WiFi networks. Additionally, the lack of testing and functionality problems with ALIS could result in substantial additional costs and operational challenges [47627]. (b) The software failure incident occurring accidentally: The software failure incident related to the F-35 Joint Strike Fighter program can also be seen as an accidental failure. For instance, the complex radar system of the F-35 had a software glitch that interfered with the radar's ability to function properly in flight. This issue was described as 'radar stability' problems, where the radar would need to be restarted due to signals indicating degradation or failure. Furthermore, a Pentagon report highlighted potentially lethal bugs in the jet's computer software, impacting areas like fusion, electronic warfare, and weapons employment, leading to ambiguous threat displays and limited response capabilities [47627].
Duration permanent, temporary The software failure incident related to the F-35 Joint Strike Fighter program can be categorized as both permanent and temporary. (a) Permanent: The software failure incident can be considered permanent due to contributing factors introduced by all circumstances. The Autonomic Logistics Information System (ALIS), described as the 'brains' of the plane, had issues that could potentially ground the entire fleet if a failure occurred, as there was no backup system in place [47627]. Additionally, the ALIS software was found to have flaws that required maintenance crews to resort to labor-intensive alternatives, such as manually burning data onto CDs and sending files across a civilian WiFi network [47627]. (b) Temporary: The software failure incident can also be seen as temporary due to contributing factors introduced by certain circumstances but not all. For example, the radar software glitch that interfered with the F-35's radar system working in flight was described as a problem with radar stability, requiring radar restarts but not a complete permanent failure [47627]. Furthermore, the computer software issues, including problems in fusion, electronic warfare, and weapons employment, were identified as issues that could be resolved through further development and testing efforts [47627].
Behaviour crash, omission, timing, value, byzantine, other (a) crash: The software failure incident related to a crash can be seen in the article where it mentions that problems with the complex radar system of the F-35 Lightning II Joint Strike Fighter caused the radar to crash, interfering with its ability to work in flight [47627]. (b) omission: The software failure incident related to omission can be observed in the article discussing the issue with the logistics software system of the F-35, known as the Autonomic Logistics Information System (ALIS). The ALIS software was not fully functional, which meant the F-35 could not be operated as frequently as intended [47627]. (c) timing: The software failure incident related to timing can be identified in the article where it mentions delays in the development schedule of the F-35, causing deliveries to be delayed and costs to skyrocket. The development schedule of the aircraft stretched to 15 years, indicating a timing failure in meeting the expected deadlines [47627]. (d) value: The software failure incident related to a value failure can be seen in the article discussing the computerized maintenance management system (CMMS) of the F-35. The CMMS incorrectly authorized older or inappropriate replacement parts, indicating a failure in performing its intended function correctly [47627]. (e) byzantine: The software failure incident related to a byzantine behavior can be observed in the article discussing the Autonomic Logistics Information System (ALIS) of the F-35. The ALIS software had functionality problems, and a lack of testing was done, leading to potential additional costs and issues with maintenance [47627]. (f) other: The software failure incident related to other behavior can be seen in the article where it mentions that the F-35 data produced goes through a single main operating unit with no backup, leading to potential problems and challenges in maintaining the aircraft [47627].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence delay, non-human, theoretical_consequence, other The consequence of the software failure incident related to the F-35 Joint Strike Fighter as reported in the articles is as follows: (a) death: There is no mention of people losing their lives due to the software failure incident in the articles. (b) harm: The software failure incident did not directly result in physical harm to individuals. (c) basic: The software failure incident did not impact people's access to food or shelter. (d) property: The software failure incident did not directly impact people's material goods, money, or data. (e) delay: The software failure incident led to delays in the F-35 program, with issues such as radar software problems and logistics software system failures causing setbacks in the operational readiness of the aircraft [47627]. (f) non-human: The software failure incident impacted the F-35 aircraft itself, leading to issues with the radar system crashing and problems with the computer software [47627]. (g) no_consequence: There were observed consequences of the software failure incident, including delays and setbacks in the F-35 program. (h) theoretical_consequence: The articles discuss potential consequences of the software failure incident, such as the risk of the entire fleet being grounded due to issues with the Autonomic Logistics Information System (ALIS) and the potential for additional costs due to functionality problems with ALIS [47627]. (i) other: The software failure incident also resulted in maintenance crews having to resort to labor-intensive alternatives, such as manually burning data onto CDs and sending files across a civilian WiFi network due to flawed software [47627].
Domain government The failed system mentioned in the articles is related to the defense industry, specifically in the context of the F-35 Joint Strike Fighter program. The software failure incident pertains to the Autonomic Logistics Information System (ALIS), which is described as the 'brains' of the plane and is designed to support operations, mission planning, and maintenance issues with the aircraft [47627]. The ALIS system is crucial for the maintenance and operation of the F-35 aircraft, allowing pilots to plan missions, monitor performance, and pre-position parts based on real-time data received during flight [47627]. The failure of the ALIS system could potentially ground the entire fleet of F-35 aircraft due to the lack of a backup system, and a Government Accountability Office report highlighted that a failure in the system could take the entire fleet offline [47627]. Furthermore, the ALIS system is a key component of the F-35 program, and its development and functionality are critical for the sustainment of the F-35 fleet over the next five decades of operations [47627]. In summary, the software failure incident in question is directly related to the defense industry, specifically impacting the operations and maintenance of the F-35 Joint Strike Fighter aircraft through the malfunction of the Autonomic Logistics Information System (ALIS).

Sources

Back to List