Abstract:
Automotive applications require an exceptionally high level of confidence. For instance, the faulty ignition switches in General Motors vehicles have resulted in 52 crashes and at least 2.6 million vehicles with these switches have been recalled. If each vehicle spent only 1,000 hours on the road, there has been less than 1 crash every 5 x 107 hours of operation. Test tracks and simulations are unable to reliably detect failures that occur this infrequently.
