Nancy Leveson

Nancy Leveson
Name	Nancy Leveson
Birth date	1950
Occupation	Systems safety engineer, researcher, professor
Known for	System safety, STAMP, accident analysis, software safety
Employer	Massachusetts Institute of Technology
Alma mater	University of California, Berkeley, Stanford University

Nancy Leveson is an American systems safety engineer and professor known for pioneering work in accident analysis, software safety, and safety engineering. Her work developed systemic approaches to accidents and hazards, influencing aviation, aerospace, automotive, nuclear, and medical device communities. She has led research projects, advised regulatory agencies, and authored foundational texts used across Massachusetts Institute of Technology, Federal Aviation Administration, and industry laboratories.

Early life and education

Leveson completed undergraduate and graduate studies that bridged University of California, Berkeley and Stanford University technical programs, engaging with research communities at NASA Ames Research Center, MIT Lincoln Laboratory, and other institutions. During her doctoral and postdoctoral training she interacted with researchers from Bell Laboratories, Carnegie Mellon University, Pratt & Whitney, and corporate teams at General Electric and Hewlett-Packard. Her academic formation connected to faculty and scholars affiliated with Institute of Electrical and Electronics Engineers, American Institute of Aeronautics and Astronautics, and Association for Computing Machinery.

Academic and professional career

Leveson joined the faculty of Massachusetts Institute of Technology where she worked in collaboration with laboratories and centers including Computer Science and Artificial Intelligence Laboratory, Aerospace Controls Laboratory, and Engineering Systems Division. She consulted for agencies and companies such as the Federal Aviation Administration, National Transportation Safety Board, Department of Defense, National Aeronautics and Space Administration, Boeing, Airbus, General Motors, Toyota Motor Corporation, Medtronic, and Siemens. Her professional engagements included membership in committees of National Academy of Engineering, National Research Council, International Civil Aviation Organization, and standard bodies like International Organization for Standardization and Institute of Electrical and Electronics Engineers working groups. She taught courses attended by students from Harvard University, Yale University, Princeton University, and visiting scholars from European Space Agency and Japan Aerospace Exploration Agency.

Research contributions and theories

Leveson developed the Systems-Theoretic Accident Model and Processes (STAMP) framework, integrating concepts from systems theory used in contexts like Aerospace accident investigations in Columbia (space shuttle), Air France Flight 447, and Boeing 737 MAX inquiries. Her work synthesizes ideas from control theory associated with Norbert Wiener, socio-technical analysis linked to Erving Goffman, and organizational studies influenced by James Reason. Leveson’s systems approach contrasts with failure-focused models such as the Swiss cheese model and failure analysis traditions exemplified by Fault tree analysis and Root cause analysis. She advanced methods for hazard analysis including System-Theoretic Process Analysis (STPA), drawing connections to safety standards like DO-178C, IEC 61508, ISO 26262, and IEEE 12207. Her theories informed investigations involving Space Shuttle Challenger, Chernobyl disaster, Three Mile Island accident, and complex incidents reviewed by National Transportation Safety Board and International Civil Aviation Organization panels. Collaborators and interlocutors include researchers from Stanford University, University of Cambridge, Imperial College London, ETH Zurich, University of Toronto, and Delft University of Technology.

Major publications

Leveson authored influential works used across Massachusetts Institute of Technology curricula and industry training, including "Engineering a Safer World" which interacts with literature from Donald Norman, Jared Diamond, Ulrich Beck, and safety texts by Charles Perrow. She produced technical papers published in journals such as IEEE Transactions on Software Engineering, Safety Science, Journal of Systems and Software, ACM Computing Surveys, and conference proceedings of International System Safety Conference, SIGSOFT, and Annual Reliability and Maintainability Symposium. Her publications address software safety for standards like DO-178B and regulatory frameworks used by Food and Drug Administration and European Medicines Agency for medical devices. She has contributed chapters to volumes from Springer, Elsevier, and conference volumes organized by Association for Computing Machinery and Institute of Electrical and Electronics Engineers.

Awards and honors

Leveson’s recognitions include fellowships and prizes from organizations such as Institute of Electrical and Electronics Engineers, Association for Computing Machinery, American Society of Mechanical Engineers, and Human Factors and Ergonomics Society. She received distinctions from National Academy of Engineering panels, awards associated with International System Safety Conference, and honors linked to Society of Automotive Engineers. Her advisory roles earned commendations from Federal Aviation Administration and National Transportation Safety Board for contributions to accident analysis and safety guidance. Other accolades include named lectureships associated with Carnegie Mellon University and visiting scholar appointments at Oxford University and King's College London.

Influence and legacy

Leveson’s STAMP and STPA methods shaped practices at Boeing, Airbus, NASA, European Space Agency, Toyota Motor Corporation, General Motors, Tesla, Inc., Lockheed Martin, Northrop Grumman, and regulators such as Federal Aviation Administration and European Union Aviation Safety Agency. Her students and collaborators have taken positions at MITRE Corporation, Sandia National Laboratories, Lawrence Livermore National Laboratory, and universities including University of California, Berkeley, University of Michigan, Georgia Institute of Technology, Purdue University, and Rensselaer Polytechnic Institute. Leveson’s frameworks continue to inform curriculum design at Massachusetts Institute of Technology and influence standards development at International Organization for Standardization and Institute of Electrical and Electronics Engineers, shaping safety practice across industries and international institutions.

Category:American engineers Category:Systems engineers Category:Massachusetts Institute of Technology faculty