除了最新的 MISRA 标准外，我还非常喜欢 Phil Koopman 写的《Better Embedded System Software》。理想情况下，你应该在启动项目之前读完它，因为它涉及产品规格/需求收集阶段，而这正是安全攸关系统（safety critical systems）的起点。……
Other than the latest MISRA, I really enjoyed "Better Embedded System Software" by Phil Koopman. Ideally you should read it before starting your project, since it deal with the product specification/gathering requirements phase, which is your starting point in safety critical systems.…
……对全局变量数量的批评直接来自 Phillip Koopman，“一位卡耐基梅隆大学的计算机工程教授、安全攸关嵌入式系统专家，著有教材《Better Embedded System Software》”。所以这可不是什么 Web 开发人员在瞎喷，而是深耕嵌入式软件开发的资深专家。也许在妄下结论之前先读读链接里的文章会……
…criticism of global variable count comes straight from Phillip Koopman, "a Carnegie Mellon University professor in computer engineering, a safety critical embedded systems specialist, authored a textbook, Better Embedded System Software". So this isn't a web developer providing criticism, but someone with extensive experience in embedded software development. Perhaps reading the article linked before jumping to conclusions might be…
……丰田的源代码，基于他那份长达 800 页的报告。Phillip Koopman，卡耐基梅隆大学计算机工程教授、安全攸关嵌入式系统专家、教材《Better Embedded System Software》的作者，长期从事私营工业界的嵌入式软件设计审查（包括汽车行业），他就丰田的工程安全流程出庭作证。两人都用了程序员讽刺性的黑话来形容……
…Toyota’s source code, based on his 800-page report. Phillip Koopman, a Carnegie Mellon University professor in computer engineering, a safety critical embedded systems specialist, authored a textbook, Better Embedded System Software, and performs private industry embedded software design reviews – including in the automotive industry – testified about Toyota’s engineering safety process. Both used a programmer’s derisive term for…
除了最新的 MISRA 标准外，我还非常喜欢 Phil Koopman 写的《Better Embedded System Software》。理想情况下，你应该在启动项目之前读完它，因为它涉及产品规格/需求收集阶段，而这正是安全攸关系统（safety critical systems）的起点。……
Other than the latest MISRA, I really enjoyed "Better Embedded System Software" by Phil Koopman. Ideally you should read it before starting your project, since it deal with the product specification/gathering requirements phase, which is your starting point in safety critical systems.…
Koopman 较新的《Better Embedded System Software》对该主题给出了极佳的全局概述。
Koopman's more recent "Better Embedded System Software" is a great overview of its subject.
……对全局变量数量的批评直接来自 Phillip Koopman，“一位卡耐基梅隆大学的计算机工程教授、安全攸关嵌入式系统专家，著有教材《Better Embedded System Software》”。所以这可不是什么 Web 开发人员在瞎喷，而是深耕嵌入式软件开发的资深专家。也许在妄下结论之前先读读链接里的文章会……
…criticism of global variable count comes straight from Phillip Koopman, "a Carnegie Mellon University professor in computer engineering, a safety critical embedded systems specialist, authored a textbook, Better Embedded System Software". So this isn't a web developer providing criticism, but someone with extensive experience in embedded software development. Perhaps reading the article linked before jumping to conclusions might be…
……丰田的源代码，基于他那份长达 800 页的报告。Phillip Koopman，卡耐基梅隆大学计算机工程教授、安全攸关嵌入式系统专家、教材《Better Embedded System Software》的作者，长期从事私营工业界的嵌入式软件设计审查（包括汽车行业），他就丰田的工程安全流程出庭作证。两人都用了程序员讽刺性的黑话来形容……
…Toyota’s source code, based on his 800-page report. Phillip Koopman, a Carnegie Mellon University professor in computer engineering, a safety critical embedded systems specialist, authored a textbook, Better Embedded System Software, and performs private industry embedded software design reviews – including in the automotive industry – testified about Toyota’s engineering safety process. Both used a programmer’s derisive term for…