Did software kill soldiers?

By Leon Engelbrecht, ITWeb senior writer

Johannesburg, 16 Oct 2007

The National Defence Force is probing whether a software glitch led to an antiaircraft cannon malfunction that killed nine soldiers and seriously injured 14 others during a shooting exercise on Friday.

SA National Defence Force spokesman brigadier general Kwena Mangope says the cause of the malfunction is not yet known and will be determined by a Board of Inquiry. The police are conducting a separate investigation into the incident.

Media reports say the shooting exercise, using live ammunition, took place at the SA Army's Combat Training Centre, at Lohatlha, in the Northern Cape, as part of an annual force preparation endeavour.

Mangope told The Star that it "is assumed that there was a mechanical problem, which led to the accident. The gun, which was fully loaded, did not fire as it normally should have," he said. "It appears as though the gun, which is computerised, jammed before there was some sort of explosion, and then it opened fire uncontrollably, killing and injuring the soldiers."

Other reports have suggested a computer error might have been to blame. Defence pundit Helmoed-R"omer Heitman told the Weekend Argus that if "the cause lay in computer error, the reason for the tragedy might never be found".

Electronics engineer and defence company CEO Richard Young says he can't believe the incident was purely a mechanical fault. He says his company, C²I²,in the mid 1990s, was involved in two air defence artillery upgrade programmes, dubbed Projects Catchy and Dart.

Software details

During the shooting trials at Armscor's Alkantpan shooting range, "I personally saw a gun go out of control several times," Young says. "They made a temporary rig consisting of two steel poles on each side of the weapon, with a rope in between to keep the weapon from swinging. The weapon eventually knocked the polls down."

Young says he was also told at the time that the gun's original equipment manufacturer, Oerlikon, had warned that the GDF Mk V twin 35mm cannon system was not designed for fully automatic control. Yet the guns were automated. At the time, SA was still subject to an arms embargo and Oerlikon played no role in the upgrade.

"If I was an engineer on the Board of Inquiry, I would ask for all details about the software for the fire control system and gun drives," Young says. "If it was not a mechanical or operating system error, you must find out which company developed the software and did the upgrade."

Young says in the 1990s the defence force's acquisitions agency, Armscor, allocated project money on a year-by-year basis, meaning programmes were often rushed. "It would not surprise me if major shortcuts were taken in the qualification of the upgrades. A system like that should never fail to the dangerous mode [rather to the safe mode], except if it was a shoddy design or a shoddy modification.

"I think there have been multiple failures here; in software and the absence of interlocking safeguards." He asks if the guns were given arcs of fire and whether these were enforced with electromechanical end stops. "On a firing range you don't want guns to fire through 360 degrees."

Oerlikon's local agent, Intertechnic, did not respond to requests for comment. The SANDF said investigations were still under way.

The air defence artillery will, in the next two years, receive new missiles, radar and computer-based fire control equipment worth R3 billion as part of projects Guardian and Protector.