Addressing the integration challenge for avionics and automotive systems-from components to rich services

Proceedings of the IEEE

Volumn 98, Issue 4, 2010, Pages 562-583

  Farcas, Claudiu ^a   Farcas, Emilia ^a   Krueger, Ingolf H ^b   Menarini, Massimiliano ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Architecture; Design methodology; Distributed information systems; Hierarchical systems

Indexed keywords

ARCHITECTURE; AVIONICS; FAILURE ANALYSIS; INFORMATION SERVICES; QUALITY OF SERVICE; SERVICE ORIENTED ARCHITECTURE (SOA); SYSTEM OF SYSTEMS;

DEPLOYMENT ARCHITECTURE; DESIGN METHODOLOGY; DEVELOPMENT PROCESS; DISTRIBUTED INFORMATION SYSTEMS; PARTIAL INTERACTION; REQUIREMENTS TRACEABILITY; SOFTWARE INTENSIVE SYSTEMS; SYSTEM INTEGRATION;

HIERARCHICAL SYSTEMS;

EID: 77950518629     PISSN: 00189219     EISSN: None     Source Type: Journal    
DOI: 10.1109/JPROC.2009.2039630     Document Type: Article

References (167)

1. M. Shaw, "Prospects for an engineering discipline of software," IEEE Softw., vol.7, no.6, pp. 15-24, 1990, IEEE Computer Society. (Pubitemid 21692020)
2. J. L. Bennett, "Managing to meet usability requirements: Establishing and meeting software development goals," in Visual Display Terminals, Usability Issues and Health Concern, J. L. Bennett, D. Case, J. Sandelin, and M. Smith, Eds. Englewood Cliffs, NJ: Prentice-Hall, 1984, pp. 161-184.
3. B. A. Nixon, "Representing and using performance requirements during the development of information systems," in Advances Database Technol. -EDBT '94, vol.779/1994, M. Jarke, J. Bubenko, and K. Jeffery, Eds. Springer, 1994, pp. 187-200.
4. P. J. Guinan, J. G. Cooprider, and S. Faraj, "Enabling software development team performance during requirements definition: A behavioral versus technical approach," Inf. Syst. Res., vol.9, no.2, pp. 101-125, 1998, Institute for Operations Research and the Management Sciences (INFORMS). (Pubitemid 128120615)
5. S. Balsamo, A. D. Marco, P. Inverardi, and M. Simeoni, "Model-based performance prediction in software development: A survey," IEEE Trans. Softw. Eng., vol.30, no.5, pp. 295-310, 2004, IEEE Computer Society.
6. D. Del Gobbo, M. Napolitano, J. Callahan, and B. Cukic, "Experience in developing system requirements specification for a sensor failure detection and identification scheme," in 3rd IEEE Int. High-Assurance Syst. Eng. Symp., 1998, pp. 209-212, IEEE Computer Society.
7. C. Smidts, M. Stutzke, and R. W. Stoddard, "Software reliability modeling: An approach to early reliability prediction," IEEE Trans. Rel., vol.47, no.3, pp. 268-278, 1998. (Pubitemid 128741120)
8. J. D. Mooney, "Issues in the specification and measurement of software portability," in Poster Session 15th Int. Conf. Softw. Eng., May 1993.
9. L. Chung, B. A. Nixon, E. Yu, and J. Mylopoulos, Non-Functional Requirements in Software Engineering. Springer, 1999, p. 476.
10. S. Lauesen, Software Requirements: Styles and Techniques. Reading, MA: Addison-Wesley, 2002, p. 608.
11. A. Al-Rawas and S. M. Easterbrook, "Communication problems in requirements engineering: A field study," in Proc. 1st Westminster Conf. Prof. Awareness Softw. Eng., 1996, Royal Society.
12. S. M. Easterbrook, "Domain modelling with hierarchies of alternative viewpoints," in IEEE Int. Symp. Requirements Eng., 1993, pp. 65-72, IEEE Computer Society.
13. P. Zave, "Classification of research efforts in requirements engineering," in Proc. 2nd IEEE Int. Symp. Requirements Eng., 1995, pp. 214-216, IEEE Computer Society.
14. P. Zave and M. Jackson, "Four dark corners of requirements engineering," ACM Trans. Softw. Eng. Methodology (TOSEM), W. R. Adrion, Ed., vol.6, no.1, pp. 1-30, 1997, ACM. (Pubitemid 127446681)
15. A. Dardenne, S. Fickas, and A. van Lamsweerde, "Goal-directed concept acquisition in requirements elicitation," in Proc. 6th Int. Workshop Softw. Specification Des., 1991, pp. 14-21, IEEE Computer Society.
16. Object Management Group, UML Profile for Schedulability, Performance, and Time, 2003. [Online]. Available: http://www.omg.org/ cgi-bin/apps/doc?formal/ 05-01-02.pdf
17. A. Dardenne, A. van Lamsweerde, and S. Fickas, "Goal-directed requirements acquisition," in Selected Papers 6th Int. Workshop Softw. Specification Des., M. Sintzoff, C. Ghezzi, and G. Roman, Eds., 1993, pp. 3-50, Elsevier Science Publishers. (Pubitemid 23672084)
18. E. S.-K. Yu, "Modelling strategic relationships for process reengineering," doctoral dissertation, University of Toronto, 1995.
19. E. S. Yu, "Towards modelling and reasoning support for early-phase requirements engineering," in Proc. 3rd IEEE Int. Symp. Requirements Eng., 1997, pp. 226-235, IEEE Computer Society.
20. D. T. Ross and K. E. Schoman, Jr., "Structured analysis for requirements definition," in Classics in Software Engineering, E. N. Yourdon, Ed. Upper Saddle River, NJ: Yourdon Press, 1979, pp. 363-386.
21. T. DeMarco, "Structured analysis and system specification," in Classics in Software Engineering, E. N. Yourdon, Ed. Upper Saddle River, NJ: Yourdon Press, 1979, pp. 409-424.
22. C. P. Gane and T. Sarson, Structured Systems Analysis: Tools and Techniques. Eanglewood, NJ: Prentice-Hall Professional Technical Reference, 1979, p. 241.
23. K. Orr, Structured Requirements Definition. Topeka, KS: Ken Orr and Associates Inc., 1981, p. 235.
24. K. L. Heninger, J. W. Kallander, D. L. Parnas, and J. E. Shore, Software Requirements for the A-7 E Aircraft. Washington, D.C.: Naval Research Lab., 1978.
25. K. L. Heninger, "Specifying software requirements for complex systems: New techniques and their application," IEEE Trans. Softw. Eng., vol.6, no.1, pp. 2-13, 1980, IEEE Computer Society.
26. D. L. Parnas and J. Madey, Functional Documentation for Computer Systems Engineering. Hamilton, ON, Canada: McMaster University, CRL, Telecommunications Research Institute of Ontario (TRIO), 1991, pp. 1-14, Vol.CRL Report 237.
27. C. Heitmeyer, B. Labaw, and D. Kiskis, "Consistency checking of SCR-style requirements specifications," in Proc. 2nd IEEE Int. Symp. Requirements Eng., 1995, pp. 56-63, IEEE Computer Society.
28. C. Heitmeyer and D. Mandrioli, Formal Methods for Real-Time Computing. Hoboken, NJ: Wiley, 1996, p. 225.
29. S. Faulk, J. Brackett, P. Ward, and J. Kirby, Jr., "The Core method for real-time requirements," IEEE Softw., vol.9, no.5, pp. 22-33, 1992, IEEE Computer Society.
30. M. S. Jaffe, N. G. Leveson, M. P. E. Heimdahl, and B. E. Melhart, "Software requirements analysis for real-time process-control systems," IEEE Trans. Softw. Eng., vol.17, no.3, pp. 241-258, 1991, IEEE Computer Society.
31. N. G. Leveson, M. P. E. Heimdahl, H. Hildreth, and J. D. Reese, "Requirements specification for process-control system," IEEE Trans. Softw. Eng., vol.20, no.9, pp. 684-707, 1994, IEEE Computer Society.
32. M. P. E. Heimdahl and N. G. Leveson, "Completeness and consistency in hierarchical state-based requirements," in IEEE Trans. Softw. Eng., Special Issue: Best Papers of the 17th Int. Conf. Softw. Eng. (ICSE-17), vol. 22, R. A. Kemmerer, D. Notkin, and D. R. Jeffery, Eds., 1996, vol. 22, no. 6, pp. 363-377, IEEE Press.
33. Object Management Group, Common Object Request Broker Architecture (CORBA) 3.1, 2008. [Online]. Available: http://www.omg. org/spec/CORBA/3.1/
34. Object Management Group, Common Object Request Broker Architecture (CORBA) for Embedded (CORBAe), ver. 1.0, 2008. [Online]. Available: http://www.omg.org/ spec/CORBAe/1.0
35. Object Management Group, Real-Time CORBA, ver. 1.2, 2002. [Online]. Available: http://www.omg.org/technology/ documents/formal/real-time-CORBA.htm
36. R. Klefstad, D. C. Schmidt, and C. O'Ryan, "Towards highly configurable real-time object request brokers," in Proc. 5th IEEE Int. Symp. Object-Oriented Real-Time Distributed Computing (ISORC), L. Bacellar, P. Puschner, and S. Hong, Eds., 2002, pp. 437-447, IEEE Computer Society.
37. D. C. Schmidt, D. L. Levine, and S. Mungee, "The design of the TAO real-time object request broker," Comput. Commun. Special Issue on Building Quality of Service Into Distributed Systems, vol.21, no.4, pp. 294-324, 1998, Elsevier Science. (Pubitemid 128393951)
38. J. Ahluwalia, I. H. Krüger, M. Meisinger, and W. Phillips, "Model-based run-time monitoring of end-to-end deadlines," in Proc. 5th ACM Int. Conf. Embedded Softw. (EMSOFT'05), 2005, pp. 100-109, ACM Press. (Pubitemid 41833004)
39. S. Vestal, MetaH Users Manual, ver. 1.27, Minneapolis, MN 55418, Honeywell Technology Center, 1998, 3660 Technology Drive.
40. S. Vestal, "MetaH support for real-time multi-processor avionics," in Proc. 1997 Joint Workshop Parallel Distrib. Real-Time Syst. (WPDRTS/OORTS '97), 1997, pp. 11-21, IEEE Computer Society.
41. B. Horowitz, "Giotto: A time-triggered language for embedded programming," doctoral dissertation, University of California, "erkeley, 2003.
42. P. Clements, "A survey of architecture description languages," in Proc. 8th Int. Workshop Softw. Specification Des., 1996, pp. 16-25, IEEE.
43. The Mathworks, Simulink. [Online]. Available: http://www.mathworks.com/ products/ simulink/
44. G. Stieglbauer, "Model-based development of embedded control systems with Giotto and simulink," master's thesis, Institute of Computer Science, University of Salzburg, 2003.
45. T. A. Henzinger, C. M. Kirsch, M. A. A. Sanvido, and W. Pree, "From control models to real-time code using Giotto," IEEE Control Syst. Mag., Feb. 2003.
46. preeTEC.com, TDLVTiming Definition Language Specification 1.5, 2008. [Online]. Available: http://www.preetec.com/ fileadmin/docs/Technology-Further- Docs/ TDL-report-September-2008.pdf
47. E. Farcas, C. Farcas, W. Pree, and J. Templ, "Real-time component integration based on transparent distribution," in Proc. 2nd Workshop SEAS, 27th ACM ICSE, 2005.
48. E. Farcas, C. Farcas, W. Pree, and J. Templ, "Transparent distribution of real-time components based on logical execution time," in Proc. ACM SIGPLAN/SIGBED Conf. LCTES, 2005, pp. 31-39. (Pubitemid 43182861)
49. C. Farcas and W. Pree, "A deterministic infrastructure for real-time distributed systems," in Proc. ECRTS Workshop OSPERT, 2007, National ICT Australia.
50. E. Farcas and W. Pree, "Hyperperiod bus scheduling and optimizations for TDL components," in Proc. 12th IEEE Conf. ETFA, 2007, pp. 1262-1269.
51. C. Farcas and W. Pree, "Virtual execution environment for real-time TDL components," in Proc. 12th IEEE Conf. ETFA, 2007, pp. 93-100.
52. W. Pree, G. Stieglbauer, and J. Templ, "Simulink integration of Giotto/TDL," in Automotive SoftwareVConnected Services in Mobile Networks, vol.4147, Lecture Notes in Computer Science, M. Broy, I. H. Krüger, and M. Meisinger, Eds. Springer, 2006, pp. 137-154.
53. Parlay Group, Parlay 3.0, 2009. [Online]. Available: http://www.parlay. org/en/ specifications/
54. ITU-T, Sector Abbreviations and Definitions for a Telecommunication Thesaurus Oriented Database (SANCHO). [Online]. Available: http://www.itu.int/ sancho/ index.asp
55. J. Snell, D. Tidwell, and P. Kulchenko, Programming Web Services With SOAP, 2002, p. 266
56. O'Reilly C. Prehofer, "Plug-and-play composition of features and feature interactions with statechart diagrams," Softw. Syst. Model., vol.3, no.3, pp. 221-234, 2004, Springer.
57. P. Zave, "Feature interactions and formal specifications in telecommunications," IEEE Comput., vol.26, no.8, pp. 20-28, 30, 1993.
58. Object Management Group, UML 2.0. [Online]. Available: http:// www.omg.org/uml
59. Object Management Group, Systems Modeling Language (SysML). [Online]. Available: http://www.sysml.org/
60. M. Broy, I. H. Krüger, and M. Meisinger, "A formal model of services," ACM Trans. Softw. Eng. Methodology (TOSEM), vol.16, no.1, p. 5, Feb. 2007. (Pubitemid 46361485)
61. W3C, Web Services Architecture, 2004. [Online]. Available: http://www.w3.org/TR/ ws-arch/
62. E. Christensen, F. Curbera, G. Meredith, and S. Weerawarana, Web Services Description Language (WSDL) 1.1, 2001. [Online]. Available: http://www.w3.org/TR/wsdl
63. OASIS, UDDI Version 3.0.2, 2004. [Online]. Available: http://uddi.org/pubs/ uddi-v3.0.2-20041019.htm
64. W3C, SOAP Version 1.2 Part 1: Messaging Framework (Second Edition) 2007. [Online]. Available: http://www.w3.org/TR/soap12/
65. OASIS, Web Services Business Process Execution Language Version 2.0 OASIS Standard ed., 2007. [Online]. Available: http://docs.oasis-open.org/wsbpel/2.0/ OS/ wsbpel-v2.0-OS.pdf
66. W3C, Web Services Choreography Description Language Version 1.0, 2005. [Online]. Available: http://www.w3.org/TR/ 2005/CR-ws-cdl-10-20051109/
67. AUTOSAR, Automotive Open System Architecture. [Online]. Available: http:// www.autosar.org
68. D. Skvorc, S. Srbljic, and M. Podravec, "Virtual network for development and execution of service-oriented applications," in ICNS '06, 2006, p. 96, IEEE.
69. S. T. Taft and R. A. Duff, Ada 95 Reference Manual: Language and Standard Libraries. Springer, 1995, vol.1246, p. 526.
70. C. A. R. Hoare, CSPVCommunicating Sequential Processes. Prentice-Hall, 1985, p. 256.
71. G. Bollella, B. Brosgol, P. Dibble, S. Furr, J. Gosling, D. Hardin, and M. Turnbull, The Real-Time Specification for Java. Addison-Wesley, 2000, p. 195.
72. G. Berry, "The foundations of Esterel," in Proof, Language and Interaction: Essays in Honour of Robin Milner, C. Stirling, G. Plotkin, and M. Tofte, Eds. MIT Press, 2000, pp. 425-454.
73. G. Berry, The Esterel v5 Language PrimerVVersion v5 91, 2000. [Online]. Available: http://www-sop.inria.fr/meije/ esterel/esterel-eng.html
74. D. Harel, "Statecharts: A visual formalism for complex systems," Sci. Comput. Program., vol.8, no.3, pp. 231-274, Jun. 1987, Elsevier. (Pubitemid 17617706)
75. F. Maraninchi, "The argos language: Graphical representation of automata and description of reactive systems," in IEEE Workshop Visual Lang., 1991. [Online]. Available: https://eprints.kfupm.edu.sa/ 68913/
76. C. Andŕe, "Representation and analysis of reactive behaviors: A synchronous approach," in Proc. CESA'96, 1996, pp. 19-29, IEEE-SMC.
77. N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud, "The synchronous data-flow programming language Lustre," Proc. IEEE, vol.79, no.9, pp. 1305-1320, Sep. 1991. (Pubitemid 21738062)
78. P. Caspi, D. Pilaud, N. Halbwachs, and J. Plaice, "Lustre: A declarative language for programming synchronous systems," in Proc. 14th ACM Symp. Principles Program. Lang., 1987, pp. 178-188.
79. P. L. Guernic, T. Gautier, M. L. Borgne, and C. d. Marie, "Programming real-time applications with signal," Proc. IEEE, vol.79, no.9, pp. 1321-1335, Sep. 1991.
80. A. Gill, Introduction to the Theory of Finite-State Machines. New York: McGraw-Hill, 1962, p. 207.
81. F. C. Hennie, Finite-State Models for Logical Machines. Hoboken, NJ: Wiley, 1968, p. 466.
82. G. J. Holzmann, The Spin Model Checker. Addison-Wesley Professional, 2003, p. 608.
83. V. Ermagan, C. Farcas, E. Farcas, I. H. Krüger, and M. Menarini, "A service-oriented approach to failure management," in Tagungsband Des Dagstuhl-Workshop MBEES: Modellbasierte Entwicklung Eingebetteter Systeme IV, H. Giese, M. Huhn, U. Nickel, and B. Scḧatz, Eds., 2008, Informatik-Bericht 2008-2102, Carl-Friedrich-GauQ-Fakulẗat für Mathematik und Informatik, Technische Universiẗat Braunschweig.
84. H. Kugler, D. Harel, A. Pnueli, Y. Lu, and Y. Bontemps, "Temporal logic for scenario-based specifications," in Tools and Algorithms for the Construction and Analysis of Systems. Springer, 2005, pp. 445-460. (Pubitemid 41273758)
85. R. Alur and M. Yannakakis, "Model checking of message sequence charts," in Proc. 10th Int. Conf. Concurrency Theory, 1999, pp. 114-129, Springer-Verlag.
86. A. Werner, "Visual TDLVThe timing description language integrated in Simulink," master's thesis, Department of Computer Science, University of Salzburg, Austria, 2005.
87. C. M. Kirsch, M. A. A. Sanvido, and T. A. Henzinger, "A programmable microkernel for real-time systems," in Proc. ACM/USENIX Conf. VEE, 2005, pp. 35-45.
88. C. Farcas, "Towards portable real-time software components," doctoral dissertation, Department of Computer Science, University of Salzburg, Austria, 2006.
89. G.Menkhaus,S.Fischmeister, M.Holzmann, and C. Farcas, "Towards efficient use of shared communication media in the timed model," in 11th IEEE RTAS 2005, 2005, pp. 342-351. (Pubitemid 41311485)
90. A. Arora and S. S. Kulkarni, "Component based design of multitolerant systems," IEEE Trans. Softw. Eng., vol.24, no.1, pp. 63-78, 1998. (Pubitemid 128740266)
91. F. C. G̈artner and A. Jhumka, "Automating the addition of fail-safe fault-tolerance: Beyond fusion-closed specifications," in Formal Techniques, Modelling and Analysis of Timed and Fault-Tolerant Systems. Springer, 2004, pp. 183-198. (Pubitemid 39738304)
92. P. C. Attie, A. Arora, and E. A. Emerson, "Synthesis of fault-tolerant concurrent programs," ACM Trans. Program. Lang. Syst., vol.26, no.1, pp. 125-185, 2004, ACM.
93. J. Camus and B. Dion, Efficient Development of Airborne Software With Scade Suite, 2003. [Online]. Available: http://www.tcs-trddc. com/tecs/2006-reading/Efficient% 20Development%20of%20Airborne% 20Software%20with%20SCADE% 20Suite.pdf
94. P. Caspi and P. Raymond, "From control system design to embedded code: The synchronous data-flow approach," in 40th IEEE Conf. Decision Control, 2001, pp. 3278-3283. (Pubitemid 34144009)
95. H. Kopetz and G. Bauer, "The time triggered architecture," Proc. IEEEVSpecial Issue on Modeling and Design of Embedded Software, vol.91, no.1, pp. 112-126, 2002.
96. G. Durrieu, O. Laurent, C. Seguin, and V. Wiels, "Formal proof and test case generation for critical embedded systems using scade," in Building the Information Society, vol.156/2004, R. Jacquart, Ed. Springer, 2004, pp. 499-504.
97. IEEE, Standard for Information TechnologyVPortable Operating System Interface (POSIX), 1003.1-2003, 2003. [Online]. Available: http://ieeexplore. ieee. org/servlet/opac?punumber=9157
98. OSEK Group, OSEK/VDX Operating System Specification 2.2.1, 2003. [Online]. Available: http://portal.osek-vdx.org/files/ pdf/specs/deprecated/ os221.pdf
99. ARINC, ARINC 653: Avionics Application Software Standard Interface (Draft 15), ARINC Incorporated, 1996.
100. IEEE, Standard for Information TechnologyVStandardized Application Environment ProfileVPOSIX Real-Time and Embedded Application Support (AEP), 1003. 13-2003, 2003, IEEE.
101. V. Yodaiken and M. Barabanov, "Real-time linux," in Proc. Linux Appl. Develop. Deployment Conf. (USELINUX), 1997.
102. Bosch, CAN Specification, ver. 2, 1991. [Online]. Available: http://www.can.bosch. com/docu/can2spec.pdf
103. TTTech, Time-Triggered Protocol TTP/C High-Level Specification Document, Edition 1.4.3, 2003. [Online]. Available: http://www. tttech.com/
104. FlexRay Consortium, FlexRay Communications SystemVProtocol Specification, ver. 2.0, 2004. [Online]. Available: http://www.flexray.com
105. J. Berwanger, M. Peller, and R. Griessbach, A New High-Performance Data Bus System for Safety-Related Applications, 2000. Vol.Technical Report EE-211 Development Safety Systems Electronics, "MW AG.
106. ARINC, ARINC Specification 659: Backplane Data Bus, 1993. [Online]. Available: https:// www.arinc.com
107. ARINC, ARINC Specification 629: Multi-Transmitter Data Bus; Part 1, Technical Description 1995. [Online]. Available: https:// www.arinc.com
108. J. A. Rushby, Comparison of Bus Architectures for Safety-Critical Embedded Systems, Computer Science Laboratory, SRI International, Menlo Park, CA, 2003.
109. P. A. Lee and T. Anderson, Fault Tolerance, Principles and Practice, 2nd ed. Springer-Verlag, 1990, p. 320.
110. A. Avizienis, J. Laprie, B. Randell, and C. Landwehr, "Basic concepts and taxonomy of dependable and secure computing," IEEE Trans. Dependable Secure Comput., vol.1, no.1, pp. 11-33, 2004. (Pubitemid 40134576)
111. S. S. Kulkarni and A. Ebnenasir, "Automated synthesis of multitolerance," in Int. Conf. Dependable Syst. Netw., 2004, pp. 209-218, IEEE.
112. N. Leveson, SafeWare: System Safety and Computers. Addison-Wesley, 1995, p. 704.
113. US Gov., Procedures for Performing a Failure Mode, Effects and Criticality Analysis, vol.MIL-STD-1629A, 1980, Military Standard.
114. Committee Automotive Quality and Process Improvement, Potential Failure Mode and Effects Analysis in Design (Design FMEA) and Potential Failure Mode and Effects Analysis in Manufacturing and Assembly Processes (Process FMEA) and Effects Analysis for Machinery (Machinery FMEA), 2002, vol.J1739, SAE.
115. W. E. Vesely, F. F. Goldberg, N. H. Roberts, and D. F. Haasl, Fault Tree Handbook. Washington, DC: U.S. Nuclear Regulatory Commission, 1981.
116. P. L. Goddard, "Software FMEA techniques," in Annu. Rel. Maintainability Symp., 2000, pp. 118-123, IEEE.
117. N. G. Leveson and P. R. Harvey, "Analyzing software safety," IEEE Trans. Softw. Eng., vol.9, no.5, pp. 569-579, 1983.
118. Object Management Group, Fault Tolerant CORBA, 2009. [Online]. Available: http:// www.omg.org/cgi-bin/doc?formal/01-09-29
119. D. Liang, C. Fang, C. Chen, and F. Lin, "Fault tolerant web service," in 10th Asia-Pacific Softw. Eng. Conf., 2003, pp. 310-319, IEEE.
120. G. T. Santos, L. C. Lung, and C. Montez, "FTWeb: A fault tolerant infrastructure for web services," in 9th IEEE Int. EDOC Enterprise Comput. Conf., 2005, pp. 95-105. (Pubitemid 44500101)
121. C. Pu, G. E. Kaiser, and N. C. Hutchinson, "Split-transactions for open-ended activities," in Proc. 14th Int. Conf. Very Large Data Bases, 1988, pp. 26-37, Morgan Kaufmann Publishers Inc.
122. D. Skeen, "Nonblocking commit protocols," in Proc. 1981 ACM SIGMOD Int. Conf. Manage. Data, 1981, pp. 133-142.
123. J. Gray and L. Lamport, "Consensus on transaction commit," ACM Trans. Database Syst., vol.31, no.1, pp. 133-160, 2006. (Pubitemid 43908999)
124. P. Pires, M. Benevides, and M. Mattoso, "Building reliable web services compositions," in Web, Web-Services, and Database Systems, vol.2593. Springer, 2003, pp. 59-72. (Pubitemid 36316942)
125. S. Tai, T. Mikalsen, E. Wohlstadter, N. Desai, and I. Rouvellou, "Transaction policies for service-oriented computing," Data Knowl. Eng., vol.51, no.1, pp. 59-79, Oct. 2004, Elsevier.
126. A. Liu, Q. Li, L. Huang, and M. Xiao, "A declarative approach to enhancing the reliability of BPEL processes," in IEEE Int. Conf. Web Services (ICWS 2007), 2007, pp. 272-279, IEEE Computer Society.
127. V. A. Braberman, "Modeling and checking real-time system designs," doctoral dissertation, Departamento de Computación, Universidad de Buenos Aires, 2000.
128. E. Fersman, "A generic approach to schedulability analysis of real-time systems," doctoral dissertation, Faculty of Science and Technology, UPPSALA University, 2003.
129. G. C. Buttazzo, Hard Real-Time Computing Systems: Predictable Scheduling Algorithms and Applications, 1st ed. Kluwer, 1997, p. 379.
130. J. W. S. Liu, Real-Time Systems. Prentice-Hall, 2000, p. 624.
131. R. Milner, Communicating and Mobile Systems: The Pi Calculus. Cambridge University Press, 1999, p. 161.
132. D. Harel, Modeling Reactive Systems With Statecharts: The Statemate Approach. McGraw-Hill, 1998, p. 258.
133. S. Owre, J. M. Rushby, and N. Shankar, "PVS: A prototype verification system," in 11th Int. Conf. Automated Deduction (CADE), 1992, pp. 748-752, Springer-Verlag.
134. L. C. Paulson, Isabelle: A Generic Theorem Prover. Springer, 1994, p. 338.
135. E. M. Clarke, O. Grumberg, and D. Peled, Model Checking. MIT Press, 2000, p. 330.
136. T. A. Henzinger, Z. Manna, and A. Pnueli, "Temporal proof methodologies for timed transition systems," Inf. Comput., vol.112, no.2, pp. 273-337, 1994, Academic Press.
137. R. Alur and D. Dill, "A theory of timed automata," Theoretical Computer Science, vol.126, no.2, pp. 183-235, 1994, Elsevier.
138. R. Alur and T. A. Henzinger, "Logics and models of real time: A survey," in Real Time: Theory in Practice, vol.600/1992, Lecture Notes in Computer Science. Springer, 1992, pp. 74-106.
139. S. Yovine, "Kronos: A verification tool for real-time systems," International Journal on Software Tools for Technology Transfer (STTT), vol.1, no.1-2, pp. 123-133, 1997, Springer.
140. K. Larsen, P. Petterson, and W. Yi, "Uppaal in a nutshell," International Journal on Software Tools for Technology Transfer (STTT), vol.1, no.1-2, pp. 134-152, 1997, Springer.
141. S. Campos, E. Clarke, W. Marrero, and M. Minea, "Verus: A tool for quantitative analysis of finite-state real-time systems," in Proc. Workshop on Languages, Compilers and Tools for Real-Time Systems, 1995, pp. 70-78, ACM.
142. T. A. Henzinger, P. Ho, and H. Wong-Toi, "HyTech: A model checker for hybrid systems," International Journal on Software Tools for Technology Transfer (STTT), vol.1, no.1-2, pp. 110-122, 1997, Springer.
143. J. Sifakis, "Modeling real-time systemsVChallenges and work directions," in Proceedings of the International Workshop on Embedded Software (EMSOFT), 2001, pp. 373-389, Springer. (Pubitemid 33351871)
144. J. Sifakis, S. Tripakis, and S. Yovine, "uilding Models of Real-Time Systems From Application Software, 2003, pp. 100-111, IEEE. (Pubitemid 43758701)
145. E. Closse, M. Poize, J. Pulou, J. Sifakis, P. Venier, D. Weil, and S. Yovine, "Taxys: A tool for the development and verification real-time embedded systems," in Proc. 13th Conf. Comput. Aided Verification, 2001, pp. 391-395, Springer-Verlag. (Pubitemid 33312937)
146. M. Arrott, B. Demchak, V. Ermagan, C. Farcas, E. Farcas, I. H. Krüger, and M. Menarini, "Rich services: The integration piece of the SOA puzzle," in Proc. IEEE Int. Conf. Web Services (ICWS), 2007, pp. 176-183.
147. MuleSource, Mule Open Source ESB and Integration Platform, 2008. [Online]. Available: http://mule.mulesource.org
148. I. H. Krüger, M. Meisinger, M. Menarini, and S. Pasco, "Rapid systems of systems integrationVCombining an architecture-centric approach with enterprise service bus infrastructure," in Proc. 2006 IEEE Int. Conf. Inf. Reuse Integration (IRI'06), 2006, pp. 51-56. (Pubitemid 47159166)
149. V. Ermagan, C. Farcas, E. Farcas, I. H. Krüger, and M. Menarini, "A service-oriented blueprint for COTS integration: The hidden part of the iceberg," in Proc. ICSE 2nd Int. Workshop Incorporating COTS Softw. Into Softw. Syst.: Tools and Techniques (IWICSS'07), 2007, p. 10, IEEE Computer Society.
150. I. H. Krüger, "Distributed system design with message sequence charts," doctoral dissertation, Fakulẗat für Informatik, Technischen Universiẗat München, 2000.
151. M. Broy and I. Krüger, "Interaction interfacesVTowards a scientific foundation of a methodological usage of message sequence charts," in Proc. 2nd IEEE ICFEM'98, J. Staples, M. G. Hinchey, and S. Liu, Eds., 1998, pp. 2-13.
152. B. Demchak, C. Farcas, E. Farcas, and I. H. Krüger, "The treasure map for rich services," in Proc. 2007 IEEE Int. Conf. IRI, 2007, pp. 400-405.
153. B. W. Boehm, "A spiral model of software development and enhancement," IEEE Comput., vol.21, pp. 61-72, 1988.
154. National Institute of Standards and Technology (NIST), National Information Assurance Partnership (NIAP)VThe Common Criteria Evaluation and Validation Scheme 2007. [Online]. Available: http://www.niap-ccevs.org/cc- scheme/
155. K. V. Prasad, T. J. Giuli, and D. Watson, "The case for modeling security, privacy, usability and reliability (SPUR)," in Automotive Softw., San Diego, CA, 2006, Automotive Software Workshop.
156. I. H. Krüger and R. Mathew, "Component synthesis from service specifications," in Scenarios: Models, Transformations and Tools, Int. Workshop, vol.3466, Lecture Notes in Computer Science, S. Leue and T. J. Sysẗa, Eds., Dagstuhl Castle, Germany, Sep. 7-12, 2003, pp. 255-277, Revised Selected Papers, Springer, 2005. (Pubitemid 41313394)
157. E. Evans, Domain-Driven Design: Tackling Complexity in the Heart of Software. Addison-Wesley, 2004, p. 560.
158. V. Ermagan, I. Krüger, and M. Menarini, "Model-based failure management for distributed reactive systems," in Composition of Embedded Systems. Scientific and Industrial Issues. Springer, 2007, pp. 53-74. (Pubitemid 351153864)
159. V. Ermagan and I. H. Krüger, "A UML2 profile for service modeling," in Proc. ACM/IEEE 10th Int. Conf. MoDELS, G. Engels, B. Opdyke, D. C. Schmidt, and F. Weil, Eds., 2007, pp. 360-374, Springer.
160. V. Ermagan, I. Krüger, and M. Menarini, "A fault tolerance approach for enterprise applications," in IEEE Int. SCC '08, 2008, pp. 63-72.
161. I. Krüger, R. Grosu, P. Scholz, and M. Broy, "From MSCs to statecharts," in Proc. IFIP WG10.3/WG10.5 Int. Workshop DIPES'98, F. J. Rammig, Ed. Kluwer, 1999, pp. 61-71.
162. B. Finkbeiner and I. Krüger, Using Message Sequence Charts for Component-Based Formal Verification, Oct. 2001.
163. G. Hohpe and B. Woolf, Enterprise Integration Patterns: Designing, "Building, and Deploying Messaging Solutions. Boston, MA: Addison-Wesley Professional, 2003, p. 736.
164. E. Gamma, R. Helm, R. Johnson, and J. M. Vlissides, Design Patterns: Elements of Reusable Object-Oriented Software. Reading, MA: Addison-Wesley Professional, 1995, p. 416, Menlo Park, California.
165. M. Fowler and D. Rice, Patterns of Enterprise Application Architecture. Addison-Wesley Professional, 2003, p. 560.
166. M. Schmidt, B. Hutchison, P. Lambros, and R. Phippen, "The enterprise service bus: Making service-oriented architecture real," IBM Syst. J., vol.44, no.4, pp. 781-797, 2005, IBM Corp. (Pubitemid 43024459)
167. M. Keen, S. Bishop, A. Hopkins, S. Milinski, C. Nott, R. Robinson, J. Adams, P. Verschueren, and A. Acharya, Patterns: Implementing an SOA Using an Enterprise Service Bus, 1st ed. Research Triangle Park, NC: IBM, International Technical Support Organization, 2004, p. 380, vol.IBM Redbooks.