A Bayesian Belief Network model for quantifying the probability of failure on demand of a protection system due to software failures is presented. It is based on the assumption that the quality in carrying out the software development activities determines the reliability of the software. The oval BBN model is a generic one that can be applied to any safety critical software. It uses the quality evaluation and debugging data of a specific software program to estimate the number of faults injected and the number of Ihults detected and removed in each phase of the development process. The estimated number of faults is then converted into a software failure probability using a Fault Size Distribution.