Abstract
For ensuring safety of an embedded system, it is required to demonstrate that the system has sufficient safety measures to mitigate hazardous failures identified by safety analysis. Developers of safety-critical embedded systems need a guideline and criterion to appropriately choice safety measures for products certification based on international functional safety standards. Although many safety measures for software faults have been researched, definitions of terminology and its taxonomy have not been established because each measure has been developed separately. Based on the automotive functional safety standard ISO 26262, this paper presents a guideline for safety design and choice of safety measures for software faults, and taxonomy of safety mechanisms.