• Hermann Kopetz


One fundamental difficulty in gaining an understanding of the behavior of a large artifact is the limited capacity of the cognitive apparatus of humans such that a large monolithic pragmatic mental model (PMM) that describes the full behavior of this artifact is not feasible (see also Sect.  2.5 on the limits of human rational cognition). To arrive at models for human analysis that can be handled by the limited capacity of the human mind we can either divide a large model of behavior of an artifact (divide and conquer) into a number of smaller models—the parts—, to restrict our design to static structures or to capture the essence of emergent behavior in a new concept (new conceptualization). In some cases, a combination of these techniques will be most appropriate.


  1. [Avi82]
    Avizienis, A., The Four Universe Information System Model for the Study of Fault-Tolerance. Proc. of FTCS 12. Pp. 6–13. IEEE Press. 1982.Google Scholar
  2. [Kop11]
    Kopetz, H.. Real-time Systems–Design Principles for Distributed Embedded Applications. Springer Verlag, 2011.Google Scholar
  3. [Suh90]
    Suh, N.P. The Principles of Design. Oxford University Press. 1990.Google Scholar

Copyright information

© Springer Nature Switzerland AG 2019

Authors and Affiliations

  • Hermann Kopetz
    • 1
  1. 1.Vienna University of TechnologyBaden-SiegenfeldAustria

Personalised recommendations