Analyses of the Boeing 737-MAX Accidents: Formal Models and Psychological Perspectives

Two fatal accidents involving the B737MAX resulted from the flight crews’ inability to overcome the effects of the Maneuvering Characteristics Augmentation System (MCAS). MCAS was designed to mimic the control column feel pressure and pitching behavior of the B737NG, which was the certification basis for the B737MAX. We briefly describe the potential role of formally modeling different perspectives during system design, and how such modeling can reveal gaps and conflicts between perspectives. We also discuss some of the relevant human factors issues involved in these accidents and how the aircraft’s behavior may have affected the pilots’ psychological states. Implications for automation design are considered.