Research Associates, Students, and Visitors


Professor Nancy Leveson

Nancy Leveson is Professor of Aeronautics and Astronautics and also Professor of Engineering Systems at MIT. She is an elected member of the National Academy of Engineering (NAE). Prof. Leveson conducts research on the topics of system safety, software safety, software and system engineering, and human-computer interaction. In 1999, she received the ACM Allen Newell Award for outstanding computer science research and in 1995 the AIAA Information Systems Award for “developing the field of software safety and for promoting responsible software and system engineering practices where life and property are at stake.” In 2005 she received the ACM Sigsoft Outstanding Research Award. She has published over 200 research papers and is author of two books, “Safeware: System Safety and Computers” published in 1995 by Addison-Wesley and “Engineering a Safer World” published in 2012 by MIT Press. She consults extensively in many industries on the ways to prevent accidents.

Research Staff

John Thomas

John is on the research staff in the department of Aeronautics and Astronautics at MIT. He recently received his Ph.D. from MIT, and he holds bachelor’s and master’s degrees in computer engineering.  John’s work involves creating structured processes for analyzing complex software and embedded systems, especially systems that may behave in unanticipated, unsafe, or otherwise undesirable ways through complex interactions with each other and their environment. By using control theory and systems theory, more efficient and effective design and analysis processes can be created to prevent flaws that lead to unsafe or unexpected behaviors when integrated with other systems. More recently he has been applying these techniques to automated systems that are heavily dependent on human interactions and may not only experience human error but may inadvertently induce human error through mode confusion, clumsy automation, and other mechanisms that can be difficult to anticipate.

John’s work also includes defining a formal structure underlying a systems-theoretic process that can be used to help ensure potentially hazardous or undesirable behaviors are systematically identified. He has also developed algorithms to automatically generate formal executable and model-based requirements for software components as well as methods to detect flaws in a set of existing requirements. The same process can be applied to both safety and functional goals of the system, thereby permitting the automated detection of conflicts between safety and other requirements during early system development.



MIT Students and Visitors


David Craig Horney

horney2nd Lt David , United States Air Force. Born 5 Oct 92 in Gunnison Colorado. B.S. Aeronautical Engineering from United States Air Force Academy (2015). He is conducting a pre-concept safety analysis for the Future Vertical Lift Initiative for the United States Army helping to design the system around safety. David is interested in military aircraft safety and will be a pilot in the USAF after graduation from MIT. He is currently pursuing a Master’s of Science in Aeronautics and Astronautics and plans to graduate in December of 2016.





Andrea Scarinci

andreaAndrea Scarinci received a double Master’s degree in Aerospace Engineering from the Polytechnic of Turin (Italy) and the Insititut Supérieur de l’Aéronautique et de l’Espace of Toulouse (France) in 2013. He then worked for two years as a consultant for AIRBUS civil aircrafts in the field of propulsion control (Airbus A330 and A340 aircraft). He is currently pursuing a Science Master in Systems Engineering at MIT, where he also works as a Research Assistant in Systems Safety Assessment Methods under the supervision of Professor Nancy Leveson. His research projects include STAMP/STPA applications to aircraft systems and CAST analysis for accident investigation. Andrea has also been awarded a Fulbright scholarship funded by the Finmeccanica group.



Diogo Castilho

diogoMaj Castilho, Brazilian Test Pilot, more than 30 different aircraft flown. Courses in Air Defense, Electronic Warfare and Safety. MBA in Public Administration. MsC in production engineering (ITA) with dissertation about the application of STPA on a hazard analysis of light aircraft crosswind takeoff. Currently in AeroAstro PhD program.





Kip Johnson

Kip is a first year graduate student, and an MIT Lincoln Laboratory Military Fellow. He is pursuing a PhD in the Department of Aeronautics & Astronautics at MIT. His research is looking at how to engineer and analyze safe and secure integration of Unmanned Aerial Systems into manned flight operations. His current focus is developing System Theoretic Process Analysis for Safety Driven Design of human-automation ontologies that will enable safe and secure National Airspace System integration.  Kip holds a BS in Aero from the US Air Force Academy, an MS in Aero/Astro from MIT, and an MS in Flight Test Engineering from the US Air Force Test Pilot School. He is an experimental test pilot, having flown over 25 different aircraft.



Carlos Henrique Netto Lahoz

Lahoz-Jan16Dr Carlos Lahoz is a System and Software Engineer at Instituto de Aeronautica e Espaco (IAE) – the Brazilian institute responsible for developing sounding rockets and launchers. His Doctorate was in software dependability in Sao Paulo University   POLI-USP, and is a invited professor in Space Sciences Post-graduation course at PG-CTE-ITA/Brazil. He is the Project Leader of ISO 18676: Space systems – Guidelines for the management of systems engineering. Post-doc fellow (2015-2016) in Aeroastro Dept at MIT, where his studies are focused in STAMP/STPA. He is sponsored by IAE and by Ciencias sem Fronteiras CsF/CNPq (Science without Borders Program/ National Council for Scientific and Technological Development) in Brazil. Also, in 2015 he received a complementary grant from Instituto Lemann/Brazil.



Megan Elizabeth France

MeganMeg is a Masters student in the Department of Aeronautics & Astronautics at MIT. She received her B.S. in Human Factors Engineering from Tufts University in May 2015, and has spent three years working at the US DOT Volpe Center as an intern in the Surface Transportation Human Factors division. Her primary interests are human systems integration, automation, and safety culture in the transportation domain. At MIT, her research focuses on using Systems-Theoretic Process Analysis (STPA) to examine human factors issues in automated parking assistance systems.



John Michel Mackovjak

JohnMichaelJohn Mackovjak is a Technology and Policy Program graduate student and Lincoln Laboratory Military Fellow working in the Autonomous Systems Laboratory, and the Integrated Systems and Concepts group. John maintains his passion for engineering he cultivated at the Naval Academy, however, he is currently focusing on the comprehensive issues that surround technological development for global security. Upon graduation John will travel to Pensacola, Florida to start flight training and begin his career as a Navy Pilot.




Daisuke Uesako

UesakoDaisuke Uesako received a Master’s Degree in Engineering from the University of Tokyo (Japan) in 2007. He has been working for the Government of Japan, mainly in the fields of environmental policy such as waste management and recycling, environmental impact assessment, and water supply, as well as in the Abandoned Chemical Weapon Projects in China. He is currently pursuing a Master’s Degree in Engineering and Management at MIT System Design & Management, with dissertation about the application of STAMP to Fukushima Daiichi nuclear disaster in 2011 and the safety of nuclear power plants in Japan.




Yusuke Urano

Urano Yusuke Urano is a second year graduate student earning a master’s degree in Technology and Policy at MIT. His research interest is in assuring safety of unmanned aircraft systems after integration into the national airspace. His research interest came from his experience of attending the international standard making conference of remotely piloted aircraft system during his summer internship at International CIvil Aviation Organization (ICAO). Urano also has a working experience as a regulator after entering the Japanese civil aviation authority in 2010. Urano received a B.E. in Aeronautics and Astronautics in the University of Tokyo in 2010.




Shinichi Yamaguchi

ShinichiShinichi works for Canon Inc.  His role at Canon is to lead and manage the development of systems or software used in Canon’s products. His previous position at Canon was a team leader of a project management team for embedded software concerning medical displays. He received his B.Engineering in medical engineering and M.Science in genetic engineering from Keio University. His research interests was the system safety of medical equipment. He has paid careful attention to requirement specifications to make the systems safe and reliable. During his stay at MIT, he can expect to learn skills that benefit both Canon and himself the most, which are the skills required to develop safe and reliable systems for medical equipment.



Ryo Ujiie

RyoRyo Ujiie is an engineer of Japan Aerospace Exploration Agency (JAXA). He was engaged in software IV&V and related research from 2009 to 2013, Software Architecture research from 2013 to 2015, and Model Based Engineering research from 2013 to 2015 in JAXA. He also worked on STPA application to Japanese aerospace systems from 2011 to 2015. He received a B.S. and an M.S. in geophysics from Tohoku University. He is currently pursuing a Master’s of Science in System Design and Management and plans to graduate in August of 2016.




Comments are closed.