Real-time systems: Design principles for distributed embedded applications

Real-Time Systems: Design Principles for Distributed Embedded Applications

Volumn , Issue , 2022, Pages 1-406

  Kopetz, Hermann ^a   Steiner, Wilfried ^b  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

^b TTTech North America   (Austria)

Author keywords

Cyber physical systems; Dependability; Distributed embedded applications; Distributed embedded systems; Embedded real time systems; Fault tolerance; Power and energy awareness; Real time distribution; Real time operating systems; Real time systems; Safety critical applications; Scheduling; System design; System performance; Time critical applications; Time triggered architecture

Indexed keywords

EID: 85159115952     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/978-3-031-11992-7     Document Type: Book

References (292)

1. Ahuja, M., Kshemkalyani, A. D., & Carlson, T. (1990). A basic unit of computation in a distributed system. In Proceedings of the 10th IEEE distributed computer systems conference (pp. 12-19). IEEE Press.
2. Alexander, C. S., et al. (1977). A pattern language. Oxford University Press.
3. Allende, I., et al. (2021). Towards Linux based safety systems-A statistical approach for software execution path coverage. Elsevier Journal of Systems Architecture.
4. Alur, R. (2015). Principles of cyber-physical systems. MIT Press.
5. Amazon. (2021). AWS Lambda. https://aws.amazon.com/lambda/. Accessed 3 Aug 2021.
6. Amidzic, O., Riehle, H. J., Fehr, T., Wienbruch, C., & Elbert, T. (2001). Pattern of focal y-bursts in chess players. Nature, 412, 603.
7. Anderson, D. L. (2001). Occam's razor; simplicity, complexity, and global geodynamics. Proceedings of the American Philosophical Society, 14(1), 56-76.
8. Anderson, J., Ramamurthy, S., & Jeffay, K. (1995). Real-time computing with lock-free shared objects. In Proceedings RTSS 1995 (pp. 28-37). IEEE Press.
9. ANSI/UL. (2020). Standard for evaluation of autonomous products (ANSI/UL 4600). UL.
10. ARINC. (2005). Design assurance guidance for airborne electronic hardware (RTCA/ DO-254). ARINC.
11. ARINC. (2011). Software considerations in airborne systems and equipment certification (ARINC DO-178C). ARINC.
12. ARINC. (1991). Multi-transmitter data bus ARINC 629-Part 1: Technical description. ARINC.
13. Arlat, J., et al. (2003). Comparison of physical and software-implemented fault injection techniques. IEEE Transactions on Computers, 52(9), 1115-1133.
14. Armbrust, M., et al. (2010). A view of cloud computing. Communications of the ACM, 53(4), 50-58.
15. ARTEMIS. (2006). Strategic research agenda. Reference designs and architectures. https://www.artemisia-association.org/downloads/RAPPORT_RDA.pdf
16. Arthur, W. B. (1994). On the evolution of complexity. In G. Cowan, D. Pines, & D. Meltzer (Eds.), Complexity: Metaphors, models, and reality. Westview Press.
17. Attaway, S. (2009). Matlab, a practical introduction to programming and problem solving. Elsevier.
18. Audi. (2017). Audi A8-Zentrales Fahrerassistenzsteuergerät (zFAS). https://www.audi-technology-portal.de/de/elektrik-elektronik/fahrerassistenzsysteme/audi-a8-zentrales-fahrerassistenzsteuergeraet-zfas. Accessed 27 Jan 2022.
19. Avizienis, A., et al. (2004). Basic concepts and taxonomy of dependable and secure computing. IEEE Transactions on Dependable and Secure Computing, 1 (1), 11-33.
20. Avizienis, A. (1982). The four-universe information system model for the study of fault tolerance. In Proceedings of the 12th FTCS symposium (pp. 6-13). IEEE Press.
21. Avizienis, A. (1985). The N-version approach to fault-tolerant systems. IEEE Transactions on Software Engineering, 11(12), 1491-1501.
22. Aversky, D., Arlat, J., Crouzet, Y., & Laprie, J. C. (1992). Fault injection for the formal testing of fault tolerance. In Proceedings of FTCS 22 (pp. 345-354). IEEE Press.
23. Baggerman, C. (2010). Avionics system architecture for NASA Orion vehicle (Presentation, 2010). NASA JSC.
24. Baldini, I., et al. (2017). Serverless computing: Current trends and open problems. In Research advances in cloud computing (pp. 1-20). Springer.
25. Baresi, L., & Young, M. (2001). Test Oracles. University of Oregon, Department of Computer Science.
26. Baronti, P., et al. (2007). Wireless sensor networks: A survey on the State of the Art and the 802.15.4 and Zigbee Standards. Computer Communication, 30, 1655-1695. Elsevier.
27. Barreno, M., et al. (2010). The security of machine learning. Machine Learning, 81, 121-148. Springer.
28. Barroso, L. A., Hölzle, U., & Ranganathan, P. (2018). The datacenter as a computer: Designing warehousescale machines. Synthesis Lectures on Computer Architecture, 13(3), i-189. Morgan&Claypool Publishers.
29. Barborak, M., & Malek, M. (1993). The consensus problem in fault-tolerant computing. ACM Computing Surveys, 25(2), 171-218.
30. Bauer, H., Scharbarg, J.-L., & Fraboul, C. (2009). Applying and optimizing trajectory approach for performance evaluation of AFDX avionics network. In 2009 IEEE conference on emerging technologies & factory automation (pp. 1-8). IEEE.
31. Beautement, A., Sasse, M. A., & Wonham, M. (2009). The compliance budget: Managing security behavior in organizations. In Proceedings of NSPW 8 (pp. 47-58). ACM Press.
32. Bedau, M. A., & Humphrey, P. (2008). Emergence. MIT Press.
33. Benini, L., & DeMicheli, G. (2000). System level power estimation: Techniques and tools. ACM Transactions on Design Automation of Electronic Systems, 5(2), 115-192.
34. Berwanger, J., et al. (2001). FlexRay-The communication system for advanced automotive control systems. In Proceedings of the SAE world congress 2001 (pp. 2001-0676). SAE Press.
35. Bertolino, A. (2007). Software testing research: Achievements, challenges, dreams. In Proceedings of FOSE 7 (pp. 85-103). IEEE Press.
36. Bernstein, D. (2014). Containers and cloud: From LXC to Docker to Kubernetes. IEEE Cloud Computing, 1(3), 81-84.
37. Berry, G., & Cosserat, L. (1985). The synchronous programming language ESTEREL and its mathematical semantics. In Proceedings of the seminar on concurrency (LNCS 197). Springer.
38. Bhattacharayya, R. et al. (2010). Low-cost, ubiquitous RFID-tag-antenna-based sensing. Proceedings of the IEEE. 98 (10). 1593-1600.
39. Black, D. C., Donovan, J., & Bunton, B. (2009). System C: From the ground up. Springer.
40. Boehm, B., & Basili, V. (2001). Software defect reduction top 10 list (pp. 135-137). IEEE Computer.
41. Borkar, S. (2007). Thousand core chips-A technology perspective. In Proceedings of DAC 2007 (pp. 746-749). ACM Press.
42. Boulding, K. E. (1961). The image. Ann Arbor Paperbacks.
43. Boussinot, F., & Simone, R. (1996). The SL synchronous language. IEEE Transactions on Software Engineering, 22(4), 256-266.
44. Boschert, S., & Rosen, R. (2016). Digital twin-the simulation aspect. In Mechatronic Futures. Springer. (pp. 59-74).
45. Brown, S. (2000). Overview of IEC 61508-Design of electrical/electronic/programmable electronic safety-related systems. Computing and Control Engineering Journal, 11(1), 6-12.
46. Brooks, F. P. (2010). The design of design: Essays from a computer scientist. Addison Wesley.
47. Bunge, M. (2008). Causality and modern science. Transaction Publishers.
48. Burns, A., & Wellings, A. (2009). Real-time systems and programming languages: Ada, real-time Java and C/real-time POSIX. Addison-Wesley.
49. Buttazzo, G. (2004). Hard real-time computing systems: Predictable scheduling algorithms and applications. Springer.
50. Cadavid, H., et al. (2022). System and software architecting harmonization practices in ultralargescale Systems of Systems. Preprint at: https://arxiv.org/pdf/2201.03275.pdf. Accessed 22 Feb 2022.
51. CAN. (1992). Controller area network CAN, an in-vehicle serial communication protocol (SAE Handbook 1992) (pp. 20.341-20.355). SAE Press.
52. Cardenas, A., Amin, S., & Shastry, S. (2008). Research challenges for the security of control systems. In Proceedings of the workshop on Hot topics in security. Usenix Association. http://portal.acm.org/citation.cfm?id=1496671.1496677
53. Chandola, V., Banerjee, A., & Kumar, V. (2009). Anomaly detection: A survey. ACM Computing Surveys, 41(3), 15.1-15.58.
54. Cheng, S. C. (1987). Scheduling algorithms for hard real-time systems-A brief survey. In Hard real-time systems. IEEE Press.
55. Cinque, M., & Cotroneo, D. (2018). Towards lightweight temporal and fault isolation in mixed-criticality systems with real-time containers. In 48th annual IEEE/IFIP international conference on dependable systems and networks workshops (pp. 59-60).
56. Clark, E., et al. (2003). Counterexample-guided abstraction refinement for symbolic model checking. Journal of the ACM, 50(5), 752-794.
57. Clavier, R., Sautereau, P., & Dufour, J.-F. (2014). TTEthernet, a promising candidate for Ariane 6. In Proceedings of DASIA 2014 DAta systems in aerospace (Vol. 725, p. 34 f). ESA SP.
58. Clark, D. (1988). The design philosophy of the DARPA internet protocols. Computer Communication Review, 18(4), 106-114.
59. Clerckx, B., Popovic, Z., & Murch, R. (2022). Future networks with wireless power transfer and energy harvesting. Proceedings of the IEEE, 110(1), 3-7.
60. Constantinescu, C. (2002). Impact of deep submicron technology on dependability of VLSI circuits. In Proceedings of DSN 2002 (pp. 205-209). IEEE Press.
61. Craciunas, S., et al. (2016). Scheduling real-time communication in IEEE 802.1 Qbv time sensitive networks. In 24th international conference on real-time networks and systems (pp. 183-192). ACM.
62. Cristian, F. (1989). Probabilistic clock synchronization. Distributed Computing, 3, 146-185. Springer.
63. Cruz, R. L. (1991). A calculus for network delay. I. Network elements in isolation. IEEE Transactions on Information Theory, 37(1), 114-131.
64. Cruz, R. L. (1991). A calculus for network delay. II. Network analysis. IEEE Transactions on Information Theory, 37(1), 132-141.
65. Cumming, D. M. (2010, March 11). Haven't found that software glitch, Toyota? Keep trying. Los Angeles Times.
66. Davies, C. T. (1979). Data processing integrity. In Computing systems reliability (pp. 288-354). Cambridge University Press.
67. Deavours, D., et al. (2002). The Mobius framework and its implementation. IEEE Transactions on Software Engineering, 28(10), 1-15.
68. Degani, A., Shafto, M., & Kirlik, A. (1995). Mode usage in automated cockpits: Some initial observations. In Proceedings of IFAC 1995 (pp. 1-13). IFAC Press.
69. Dizdarevic, J., et al. (2019). A survey of communication protocols for internet of things and related challenges of fog and cloud computing integration. ACM Computing Surveys, 51(6), 1-29.
70. Dragoni, N., et al. (2017). Microservices: Yesterday, today, and tomorrow. In Present and ulterior software engineering. Springer.
71. Driscoll, K., et al. (2003). Byzantine fault-tolerance: From theory to reality. In Proceedings of SAFECOMP 2003 (LNCS 2788) (pp. 235-248). Springer.
72. Dyson, G. B. (1998). Darwin among the machines-The evolution of global intelligence. Basic Books.
73. European Association of Research & Technology Organisations. (2014). The TRL scale as a research & innovation policy tool, EARTO recommendations.
74. Edmonds, B. (2000). Complexity and scientific modeling. In Foundations of science (pp. 379-390). Springer.
75. Eidson, J. (2006). Measurement, control and communication using IEEE 1588. Springer.
76. Epstein, S. (2008). Intuition from the perspective of cognitive experiential self-theory. In Intuition in judgment and decision making (pp. 23-38). Lawrence Erlbaum.
77. ETSI. (2019). Analysis of the collective perception service (CPS) (ETSI TR 103 562). ETSI.
78. Eugster, P. T., et al. (2003). The many faces of publish/subscribe. ACM Computing Surveys, 35(2), 114-131.
79. Evensen, K., & Weiss, K. (2010). A comparison and evaluation of real-time software systems modeling languages (p. 3504). AIAA Infotechat Aerospace.
80. Feiler, P., Gluch, D., & Hudak, J. (2006). The architecture analysis and design language (AADL): An introduction (Report CMU-SEI 2006-TN-011). Software Engineering Institute.
81. Feltovich, P. J., et al. (2004). Keeping it too simple: How the reductive tendency effects cognitive engineering. In IEEE intelligent systems (pp. 90-94). IEEE Press.
82. Feldhofer, M., Dominikus, S., & Wokerstorfer, J. (2004). Strong authentication for RFID systems using the AES algorithms (LCNS 3156) (pp. 357-370). Springer.
83. Finkenzeller, K. (2003). RFID handbook. Wiley.
84. Fisher, D. A. (2006). An emergent perspective on the operation of system-of-systems (CMU/SEI-2006-TR-003). Carnegie Mellon Software Engineering Institute. http://www.dtic.mil/cgi-bin/GetTRDoc?Location=U2&doc=GetTRDoc.pdf&AD=ADA449020
85. Fohler, G. (1994). Flexibility in statically scheduled hard real-time systems. PhD thesis, Institut für Technische Informatik. Technical University of Vienna.
86. Frank, D., et al. (2001). Device scaling limits of Si MOSFETs and their application dependencies. Proceedings of the IEEE, 89(3), 259-288.
87. Freitag, C., et al. (2020). The climate impact of ICT: A review of estimates, trends and regulations. Lancester University. https://arxiv.org/abs/2102.02622. Accessed 11 Mar 2022
88. Gadh, R., et al. (2010). RFID: A unique radio innovation for the 21st century. Proceedings of the IEEE, 98(2), 1541-1680.
89. Gajski, D. D., et al. (2009). Embedded system design. Springer.
90. Garey, M. R., & Johnson, D. S. (1975). Complexity results for multiprocessor scheduling under resource constraints. SIAM Journal of Computing, 4(4), 397-411.
91. Gaudel, M. C. (2005). Formal methods and testing: Hypotheses, and correctness approximations. In Proceedings of formal methods 2005 (LNCS 3582). Springer.
92. Goldberg, R. P. (1973). Architectural principles for virtual computer systems (Technical Report). Harvard University.
93. Gray, J. (1985). Why do computers stop and what can be done about it? Tandem Technical Report TR85.7.
94. Halford, G. S., et al. (2005). How many variables can humans process? Psychological Science, 16(1), 70-76.
95. Halbwachs, N. (1992). Synchronous programming of reactive systems. Springer.
96. Halford, G. S., Wilson, W. H., & Phillips, S. (1996). Abstraction, nature, costs, and benefits. Department of Psychology, University of Queensland.
97. Hause, M. (2006). The SysML modelling language. In Fifteenth European systems engineering conference (Vol. 9, pp. 1-12).
98. Hayakawa, S. I. (1990). Language in thought and action. Harvest Original.
99. Heinzelman, W. R., Chandrakasan, A., & Balakrishan, H. (2000). Energy-efficient communication protocol for wireless microsensor networks. In Proceedings of the 33rd Hawaii international conference on system science (pp. 3722-3725). IEEE Press.
100. Henzinger, T., Horowitz, B., & Kirsch, C. M. (2003). Giotto: A time-triggered language for embedded programming. Proceedings of the IEEE, 91(1), 84-99.
101. Hennessy, J. L., & Patterson, D. A. (2019). Computer architecture: A quantitative approach (6th ed.). Elsevier.
102. Herault, L. (2009). Holistic approach for future energy-efficient cellular networks. In Proceedings of the second Japan-EU symposium on the future internet (pp. 212-220). European Communities Brussels.
103. HERE. (2015). Sensor ingestion interface specification. https://360.here.com/2015/06/23/here-sensor-data-ingestion/. https://developer.here.com/documentation/sdii-data-spec/. Accessed 27 Jan 2022.
104. Hmelo-Silver, C. E., & Pfeffer, M. G. (2004). Comparing expert and novice understanding of a complex system from the perspective of structures, behaviors, and functions. Cognitive Science, 28, 127-138. Elsevier.
105. Hoefer, C. (2010). Causal determinism. In Stanford encyclopedia of philosophy (pp. 1-24) http://plato.stanford.edu/entries/determinism-causal/
106. Hopkins, A. L., Smith, T. B., & Lala, J. H. (1978). FTMP: A highly reliable fault-tolerant multiprocessor for aircraft control. Proceedings IEEE, 66(10), 1221-1239.
107. Huebscher, M. C., & McCann, J. A. (2008). A survey of autonomic computing-degrees, models and applications. ACM Computing Surveys, 40(3), 7.1-7.28.
108. Data Centres and Data Transmission Networks. (2022). IEA. https://www.iea.org/reports/data-centres-and-data-transmission-networks. Accessed 11 Mar 2022.
109. IEC. (2021). Industrial communication networks-Network and system security (IEC 62443). IEC.
110. Intel. (2009). Teraflop research chip. http://techresearch.intel.com/articles/Tera-Scale/1449.htm
111. Iorga, M., et al. (2018). Fog computing conceptual model (NIST SP) (pp. 500-325).
112. NIST. ISO. (2021). Road vehicles-Cybersecurity engineering (ISO/SAE 21434:2021). ISO.
113. ITRS Roadmap. (2009). International technology roadmap for semiconductors, 2009 ed. Executive summary. Semiconductor Industry Association.
114. Jackson, D., Thomas, M., & Millet, L. I. (2007). Software for dependable systems: Sufficient evidence? National Academic Press.
115. Jerri, A. J. (1977). The Shannon sampling theorem-Its various extensions and applications: A tutorial review. Proceedings of the IEEE, 65(11), 1565-1596.
116. Johnson, S. C., & Butler, R. W. (1992). Design for validation. IEEE Aerospace and Electronic Systems Magazine, 7(1), 38-43.
117. Jones, J. C. (1978). Design methods, seeds of human futures. Wiley.
118. Jones, M. (1997). What really happened on Mars Rover Pathfinder. http://catless.ncl.ac.uk/Risks/19.49.html#subj1
119. Jouppi, N., et al. (2018). Motivation for and evaluation of the first tensor processing unit. IEEE Micro, 38(3), 10-19.
120. Juels, A., & Weis, S. A. (2005). Authenticating pervasive devices with human protocols. In Proceedings of CRYPTO 2005 (pp. 293-308). Springer.
121. Juristo, N., Moreno, A. M., & Vegas, S. (2004). Reviewing 25 years of testing technique experiments. Empirical Software Engineering, 9, 7-44. Springer.
122. Kahne, S., Lefkowitz, I., & Rose, C. (1979). Automatic control by distributed intelligence. Scientific American, 240(6), 78-92.
123. Kantz, H., & Koza, C. (1995). The ELECTRA railway signaling-system: field experience with an actively replicated system with diversity. Proceedings FTCS, 25, 453-458.
124. Karlson, J., et al. (1995). Integration and comparison of three physical fault-injection experiments. In Predictably dependable computing systems. Springer.
125. Kauffman, S. (1993). The origins of order: Self-organization and selection in evolution. Oxford University Press.
126. Keating, M., et al. (2007). Low power methodology manual for chip design. Springer.
127. Kim, K. H., & Kopetz, H. (1994). A real-time object model RTO. k and an experimental investigation of its potential. In Proceedings COMPSAC 94. IEEE Press.
128. Knight, J. C., & Leveson, N. G. (1986). An experimental evaluation of the assumption of independence in multiversion programming. IEEE Transactions on Software Engineering, SE-12(1), 96-109.
129. Koopman, P. (2004). Embedded system security. IEEE Computer, 95-97.
130. Koopman, P., & Wagner, M. (2020). Positive trust balance for self-driving car deployment. In Proceedings of international conference on computer safety, reliability, and security (pp. 351-357). Springer.
131. Kopetz, H., & Suri, N. (2003). Compositional design of RT systems: A conceptual basis for the specification of linking interfaces. In Proceedings of 6th ISORC (pp. 51-59). IEEE Press.
132. Kopetz, H., & Bauer, G. (2003). The time-triggered architecture. Proceedings of the IEEE, 91(1), 112-126.
133. Kopetz, H., Ademai, A., & Hanzlik, A. (2004). Integration of internal and external clock synchronization by the combination of clock state and clock rate correction in fault tolerant distributed systems. In Proceedings of the RTSS 2004 (pp. 415-425). IEEE Press.
134. Kopetz, H. (2006). Pulsed data streams. In From model-driven design to resource management for distributed embedded systems (IFIP Series 225/2006) (pp. 105-114). Springer.
135. Kopetz, H., et al. (2007). Periodic finite-state machines. In Proceedings of ISORC 2007 (pp. 10-20). IEEE Press.
136. Kopetz, H. (2008). The rationale for time-triggered ethernet (RTSS 2008) (pp. 3-11). IEEE Press.
137. Kopetz, H. (2008). The complexity challenge in embedded system design. In Proceedings of ISORC 2008 (pp. 3-12). IEEE Press.
138. Kopetz, H. (2009). Temporal uncertainties in cyber-physical systems (Report 1/2009). Institute für Technische Informatik, TU Vienna.
139. Kopetz, H. (2010). Energy-savings mechanism in the time-triggered architecture. In Proceedings of the 13th ISORC (pp. 28-33). IEEE Press.
140. Kopetz, H. (2021). An architecture for driving automation. https://www.the-autonomous.com/news/an-architecture-for-driving-automation. Accessed 13 Dec 2021.
141. Kopetz, H. (2022). Data, information and time: The DIT model (Springer Briefs in Computer Science). Springer.
142. Kopetz, H., & Merker, W. (1985). The architecture of MARS. In Proceedings of FTCS-15 (pp. 274-279). IEEE Press.
143. Kopetz, H., & Ochsenreiter, W. (1987). Clock synchronization in distributed real-time systems. IEEE Transactions on Computers, 36(8), 933-940.
144. Kopetz, H., & Kim, K. (1990). Temporal uncertainties in interactions among realtime objects. In Proceedings 9th IEEE symposium on reliable distributed systems (pp. 165-174). IEEE Press.
145. Kopetz, H., Grünsteidl, G., & Reisinger, J. (1991). Fault-tolerant membership service in a synchronous distributed real-time system. In Dependable computing for critical applications (pp. 411-429). Springer.
146. Kopetz, H. (1992). Sparse time versus dense time in distributed real-time systems. In Proceedings 14th international conference on distributed computing systems (pp. 460-467). IEEE Press.
147. Kopetz, H., & Gruensteidl, G. (1993). TTP-A time-triggered protocol for fault-tolerant real-time systems. In Proceedings FTCS-23 (pp. 524-532). IEEE Press.
148. Kopetz, H., & Reisinger, J. (1993). The non-blocking write protocol NBW: A solution to a real-time synchronisation problem. In Proceedings of RTSS 1993 (pp. 131-137). IEEE Press.
149. Kopetz, H. (1998). The time-triggered model of computation. In Proceedings of RTSS 1998 (pp. 168-176). IEEE Press.
150. Kopetz, H. (1999). Elementary versus composite interfaces in distributed real-time systems. In Proceedings of ISADS 99 (pp. 26-34). IEEE Press.
151. Kortuem, G., et al. (2010). Smart objects as the building block for the internet of things. IEEE Internet Computing, 2010, 44-50.
152. Kumar, K., & Lu, Y. H. (2020). Cloud computing for mobile users: Can offloading computation save energy? IEEE Computer, 2010, 51-56.
153. Lala, J. H., & Harper, R. E. (1994). Architectural principles for safety-critical real-time applications. Proceedings of the IEEE, 82(1), 25-40.
154. Lamport, L. (1994). A new solution of Dijkstra's concurrent programming problem. Communications of the ACM, 8(7), 453-455.
155. Lamport, L. (1978). Time, clocks, and the ordering of events. Communications of the ACM, 21(7), 558-565.
156. Lamport, L., Shostak, R., & Pease, M. (1982). The byzantine generals problem. Communications of the ACM TOPLAS, 4(3), 382-401.
157. Lamport, L., & Melliar Smith, P. M. (1985). Synchronizing clocks in the presence of faults. Journal of the ACM, 32(1), 52-58.
158. Langley, P., Laird, J. E., & Rogers, S. (2009). Cognitive architectures: Research issues and challenges. Cognitive System Research, 10(2), 141-160.
159. Landwehr, C. E. (1981). Formal models for computer security. ACM Computing Suverys, 13(3), 248-278.
160. Landwehr, C. E., & Goldschlag, D. M. (1997). Security issues in networks with internet access. Proceedings of the IEEE, 85(12), 2034-2051.
161. Laprie, J.-C. (2008). From dependability to resilience. In Proceedings of 38th IEEE/ IFIP international conference on dependable systems and networks (pp. G8-G9). IEEE Press.
162. Lauwereins, R. (2006). Multi-core platforms are a reality... but where is the software support? (Visual Presentation). IMEC. http://www.mpsoc-forum.org/2006/slides/Lauwereins.pdf
163. Lee, E. A. (2002). Embedded software. In Advances in computers (Vol. 56). Academic.
164. Lee, E. A., & Seshia, S. A. (2010). Introduction to embedded systems-A cyber-physical systems approach. http://LeeSeshia.org
165. Lee, P. A., & Anderson, T. (1990). Fault tolerance: Principles and practice. Springer.
166. Lehmann, M. M., & Belady, L. (1985). Program evolution: Processes of software change. Academic.
167. Leverich, J., et al. (2008). Comparative evaluation of memory models of chip multiprocessors. ACM Transactions on Architecture and Code Optimization, 5(3), 12.1-12.30.
168. Leveson, N. G. (1995). Safeware: System safety and computers. Addison Wesley Company.
169. Li, H., et al. (2019). ACRN: A big little hypervisor for IoT development. In 15th ACM SIGPLAN/SIGOPS international conference on virtual execution environments (pp. 31-44).
170. Lienert, D., & Kriso, S. (2010). Assessing criticality in automotive systems. IEEE Computer, 43(5), 30.
171. Littlewood, B., & Strigini, L. (1993). Validation of ultra-high dependability for software-based systems. Communications of the ACM, 36(11), 69-80.
172. Liu, J. W. S. (2000). Real-time systems. Prentice Hall.
173. Liu, C. L., & Layland, J. W. (1973). Scheduling algorithms for multiprogramming in a hard-real-time environment. Journal of the ACM, 20(1), 46-61.
174. Lo Bello, L., & Steiner, W. (2019). A perspective on IEEE time-sensitive networking for industrial communication and automation systems. Proceedings of the IEEE, 107(6), 1094-1120.
175. Lundelius, L., & Lynch, N. (1984). An upper and lower bound for clock synchronization. Information and Control, 62, 199-204.
176. Lv, M., et al. (2009). A survey of WCET analysis of real-time operating systems. http://www.neu-rtes.org/publications/lv_ICESS09.pdf
177. Maier, M. W. (1998). Architecting principles for system of systems. Systems Engineering, 1(4), 267-284.
178. MARS. (1991). The Mars video. TU Vienna. http://pan.vmars.tuwien.ac.at/mars/video
179. Martin, T. L., & Siewiorek, D. P. (1999). The impact of battery capacity and memory bandwidth on CPU speed setting: A case study. In Proceedings of ISLPED99 (pp. 200-205). IEEE Press.
180. McCabe, M., et al. (2009). Avionics architecture interface considerations between constellation vehicles. In Proceedings DASC'09 (pp. 1.E.2.1-1.E.2.10). IEEE Press.
181. Mell, P., & Grance, T. (2011). The NIST definition of cloud computing (NIST SP 800-145). NIST.
182. Mesarovic, M. D., Screenath, S. N., & Keene, J. D. (2004). Search for organizing principles: Understanding in systems biology. Systems Biology On Line, 1(1), 19-27.
183. Mesarovic, M. D. (1989). Abstract system theory (Lecture Notes in Control and Information Science) (Vol. 116). Springer.
184. Metclafe, R. M., & Ethernet. (1976). Distributed packet switching for local computer networks. Communications of the ACM, 395-404.
185. Miller, D. (2004, October 27). AFDX determinism. Visual Presentation at ARINC general session, Rockwell Collins.
186. Miller, G. A. (1956). The magical number seven, plus or minus two: Some limits on our capacity for processing information. The Psychological Review, 63, 81-97.
187. Mills, D. L. (1991). Internet time synchronization: The network time protocol. IEEE Transactions on Communications, 39(10), 1482-1493.
188. Miner, P. S., Malekpour, M., & Torres, W. (2002). A conceptual design for a reliable optical bus (ROBUS). In Proceedings of the 21st digital avionics systems conference (p. 13D3). IEEE Press.
189. Mogul, C. (2006). Emergent (mis)behavior vs. complex software systems. In Proceedings of EuroSys 2006. ACM Press.
190. Mok, A. (1983). Fundamental design problems of distributed systems for the hard realtime environment. PhD thesis, Massachusetts Institute of Technology.
191. Morin, E. (2007). Restricted complexity, general complexity. World Scientific Publishing Corporation.
192. Moses, J. Complexity and flexibility (Working Paper).
193. NASA. (1999). Mars climate orbiter Mishap investigation report. Washington, DC. ftp://ftp.hq.nasa.gov/pub/pao/reports/2000/MCO_MIB_Report.pdf
194. Neumann, J. (1956). Probabilistic logic and the synthesis of reliable organisms from unreliable components. In C. E. Shannon & J. McCarthy (Eds.), Automata studies (Annals of Mathematics Studies, No 34) (pp. 43-98). Princeton University Press.
195. Neuman, B. C., & Ts'o, T. (1994). Kerberos-An authentication service for computer networks. IEEE Communication Magazine, 32(9), 33-38.
196. Neumann, P. G. (1995). Computer related risks. Addison Wesley/ACM Press.
197. Neumann, P. G. (1996). Risks to the public in computers and related systems. Software Engineering Notes, 21(5), 18. ACM Press.
198. Ross, R., et al. (2021). Developing cyber-resilient systems: A systems security engineering approach (NIST SP 800-160) (Vol. 2, Revision 1). NIST.
199. Obermaisser, R., & Kopetz, H. (2009). GENSYS-An ARTEMIS cross-domain reference architecture for embedded systems. Südwestdeutscher Verlag für Hochschulschriften (SVH).
200. OMG, MARTE. (2008). Modeling and analysis of real-time and embedded systems. Object Management Group.
201. OMG. (2015). OMG data distribution service (DDS). Version 1.4. Object Management Group.
202. Pappu, R., et al. (2002). Physical one-way functions. Science, 297, 2026-2030.
203. Parunak, H. V. D., et al. (1997). Managing emergent behavior in distributed control systems. Proceedings of ISA Tech, 97, 1-8.
204. Paukovits, C., & Kopetz, H. (2008). Concepts of switching in the time-triggered network-on-chip. In 14th IEEE conference on embedded and real-time computing systems and applications (pp. 120-129). IEEE Press.
205. Pauli, B., A. Meyna, & P. Heitmann. (1998). Reliability of electronic components and control units in motor vehicle applications. Verein Deutscher Ingenieure (VDI). 1009-1024.
206. Pease, M., Shostak, R., & Lamport, L. (1980). Reaching agreement in the presence of faults. Journal of the ACM, 27(2), 228-234.
207. Pedram, M., & Nazarian, S. (2006). Thermal modeling, analysis and management in VLSI circuits: Principles and methods. Proceedings of the IEEE, 94(8), 1487-1501.
208. Perez, J. M. (2010). Executable time-triggered model (E-TTM) for the development of safetycritical embedded systems (pp. 1-168). PhD. thesis, Institut für Technische Informatik, TU Wien, Austria.
209. Perrow, C. (1999). Normal accidents: Living with high risk technologies. Princeton University Press.
210. Peters, L. (1979). Software design: Current methods and techniques. In Infotech state of the art report on structured software development. Infotech International.
211. Peterson, I. (1996). Comment on time on Jan 1, 1996. Software Engineering Notes, 19(3), 16.
212. Polleti, F., et al. (2007). Energy-efficient multiprocessor systems-on-chip for embedded computing: Exploring programming models and their architectural support. Proceedings of the IEEE, 56(5), 606-620.
213. Poledna, S. (1995). Fault-tolerant real-time systems, the problem of replica determinism. Springer.
214. Poledna, S. (1995). Tolerating sensor timing faults in highly responsive hard real-time systems. IEEE Transactions on Computers, 44(2), 181-191.
215. Pop, P., et al. (2018). Enabling fog computing for industrial automation through timesensitive networking (TSN). IEEE Communications Standards Magazine, 2(2), 55-61.
216. Pop, P., et al. (2021). The FORA fog computing platform for industrial IoT. Elsevier Information Systems, 98, 101727.
217. Popper, K. R. (1968). The logic of scientific discovery. Hutchinson.
218. Popek, G. J., & Goldberg, R. P. (1974). Formal requirements for virtualizable third generation architectures. Communications of the ACM, 17(7), 412-421.
219. Pott, C. (2021). Firmware security module. Springer Journal of Hardware and Systems Security, 2021(5), 103-113.
220. Powell, D. (1991). Delta-4, A generic architecture for dependable distributed computing (pp. 1-484). Springer.
221. Powell, D. (1995). Failure mode assumptions and assumption coverage. In B. Randell, J. C. Laprie, H. Kopetz, & B. Littlewood (Eds.), Predictably dependable computing systems (pp. 123-140). Springer.
222. Puschner, P., & Koza, C. (1989). Calculating the maximum execution time of real-time programs. Real-Time Systems, 1(2), 159-176. Springer.
223. Qasaimeh, M., et al. (2019). Comparing energy efficiency of CPU, GPU and FPGA implementations for vision kernels. In Proceedings of IEEE international conference on embedded software and systems (pp. 1-8). IEEE Press.
224. Randell, B. (1975). System structure for software fault tolerance. IEEE Transactions on Software Engineering, SE-1(2), 220-232.
225. Ray, K. (2010). Introduction to service-oriented architectures. http://anengineersper-spective.com/wp-content/uploads/2010/03/Introduction-to-SOA.pdf
226. Rechtin, E., & Maier, M. W. (2002). The art of systems architecting. CRC Press.
227. Rechtin, E. (1991). Systems architecting, creating and building complex systems. Prentice Hall.
228. Reisberg, D. (2010). Cognition. W.W. Norton.
229. Reichenbach, H. (1957). The philosophy of space and time. Dover.
230. 2 emissions come from aviation? Our World in Data. https://ourworldindata.org/co2-emissions-from-aviation. Accessed 11 Mar 2022
231. Rivest, R. L., Shamir, A., & Adleman, L. (1978). A method for obtaining signatures and public-key cryptosystems. Communications of the ACM, 21(2), 120-126.
232. Robati, T., Gherbi, A., & Mullins, J. (2016). A modeling and verification approach to the design of distributed IMA architectures using TTEthernet. Elsevier Procedia Computer Science, 83, 229-236.
233. Roman, R., Alcarez, C., & Lopez, J. (2007). A survey of cryptographic primitives and implementations for hardware-constrained sensor network nodes. Mobile Network Applications, 12, 231-244. Springer.
234. Ruh, J., Steiner, W., & Fohler, G. (2021). Clock synchronization in virtualized distributed real-time systems using IEEE 802.1AS and ACRN. IEEE Access, 9, 126075-126094.
235. Ruiz De Azua, J. A., & Boyer, M. (2014). Complete modelling of AVB in network calculus framework. In 22nd international conference on real-time networks and systems (pp. 55-64). ACM.
236. Rumpler, B. (2008). Design comprehension of embedded rea-time systems. PhD thesis, Institut für Technische Informatik, TU Wien.
237. Rushby, J. (1999). Systematic formal verification for fault-tolerant time-triggered algorithms. IEEE Transactions on Software Engineering, 25(5), 651-660.
238. Rushby, J. (2003). A comparison of bus architectures for safety critical embedded systems. Report NASA/CR-2003-212161.
239. Rushby, J. (1993). Formal methods and the certification of critical systems (Research Report No. SRI-CSL-93-07). Computer Science Lab, SRI.
240. SAE. (1995). Class C application requirements, survey of known protocols, J20056. In SAE handbook (pp. 23.437-23.461). SAE Press.
241. Sagiroglu, S., & Sinanc, D. (2013). Big Data: A review. In International conference on collaboration technologies and systems (pp. 42-47). IEEE Press.
242. Sah, K. D., & Amgoth, T. (2020). Reliable energy harvesting schemes in wireless sensor networks: A survey. Elsevier Information Fusion, 63, 223-247.
243. Salfner, F., Lenk, M., & Malek, M. (2010). A survey of online failure prediction methods. ACM Computing Surveys, 42(3), 10.10-10.42.
244. Saltzer, J., Reed, D. P., & Clark, D. D. (1984). End-to-end arguments in system design. ACM Transactions on Computer Systems, 2(4), 277-288.
245. Schwabl, W. (1988). The effect of random and systematic errors on clock synchronization in distributed systems. PhD thesis, Technical University of Vienna, Institut für Technische Informatik.
246. Selberg, S. A., & Austin, M. A. (2008). Towards an evolutionary system of systems architecture. Institute for Systems Research. http://ajcisr.eng.umd.edu/~austin/reports.d/INCOSE2008-Paper378.pdf
247. Sessions, R. (2008). Simple architectures for complex enterprises. Microsoft Press.
248. Sha, L., et al. (2004). Real-time scheduling theory: A historical perspective. Real-Time Systems Journal, 28(3/4), 101-155. Springer.
249. Shafto, M., et al. (2010). Draft: NASA technology roadmap: Modeling, simulation, information technology & processing roadmap-Technology area 11. NASA.
250. Shaw, A. C. (1989). Reasoning about time in higher-level language software. IEEE Transactions on Software Engineering, SE-15, 875-889.
251. Sha, L., Rajkumar, R., & Lehoczky, J. P. (1990). Priority inheritence protocols: An approach to real-time synchronization. IEEE Transactions on Computers, 39(9), 1175-1185.
252. Sha, L., Rajkumar, R., & Sathaye, S. S. (1994). Generalized rate-monotonic scheduling theory: A framework for developing real-time systems. Proceedings of the IEEE, 82(1), 68-82.
253. Shi, W., et al. (2016). Edge computing: Vision and challenges. IEEE Internet of Things Journal, 3(5), 637-646.
254. Siegel, J. (2000). CORBA 3-Fundamentals and programming. OMG Press/Wiley.
255. Siminiceanu, R., Miner, P. S., & Person, S. (2011). A methodology for evaluating artifacts produced by a formal verification process (Technical Memorandum 20110022654). NASA.
256. Simon, H. A. (1981). Science of the artificial. MIT Press.
257. Smith, J. S. S. (1997). Application specific integrated circuits. Addision Wesley.
258. Soeleman, H., Roy, K., & Paul, B. C. (2001). Robust subtreshold logic for ultra-low power operation. IEEE Transactions on VLSI Systems, 9(1), 90-99.
259. Soltesz, S., et al. (2007). Container-based operating system virtualization: A scalable, high-performance alternative to hypervisors. In 2nd ACM SIGOPS/EuroSys European conference on computer systems (pp. 275-287).
260. Sprunt, B., Sha, L., & Lehoczky, J. (1989). Aperiodic task scheduling for hard real-time systems. Real-Time Systems, 1(1), 27-60.
261. Stamatis, D. H. (2003). Failure mode and effect analysis: FMEA from theory to execution. ASQ Quality Press.
262. Stallings, W. (2018). Operating systems: Internals and design principles. Pearson.
263. Steiner, W. (2010). An evaluation of SMT-based schedule synthesis for time-triggered multi-hop networks. In 31st IEEE real-time systems symposium (pp. 375-384). IEEE.
264. Steiner, W., & Dutertre, B. (2011). Automated formal verification of the TTEthernet synchronization quality. In NASA formal methods symposium (LNCS) (Vol. 6617, pp. 375-390). Springer.
265. Steiner, W., & Rushby, J. (2011). TTA and PALS: Formally verified design patterns for distributed cyber-physical systems. In 2011 IEEE/AIAA 30th digital avionics systems conference (pp. 7B51-7B515). IEEE.
266. Sussman, J. (2000). Introduction to Transportation Systems. Artech House Publishers.
267. Sussman, J. (2003). Collected views on complexity in systems (Working Paper Series. ESD-WP-2003-01.06-ESD). MIT Engineering Systems Division.
268. Szyperski, C. (1999). Component software-Beyond object-oriented programming. Addision Wesley.
269. Taiani, F., Fabre, J. C., & Killijian, M. O. (2003). Towards implementing multilayer reflection for fault-tolerance. In Proceedings of the DSN 2003 (pp. 435-444). IEEE Press.
270. Taleb, N. N. (2008). The black swan: The impact of the highly improbable. Penguin.
271. Force, T. (2004). Final report on the August 14, 2003 Blackout in the United States and Canada. US Department of Energy.
272. Japan, T. (2009). Cyber-Clean Center (CCC) project for anti-bot countermeasures in Japan. In Proceedings of the second Japan-EU symposium on the future internet (pp. 212-220). European Communities Brussels.
273. Tindell, K. (1995). Analysis of hard real-time communications. Real-Time Systems, 9(2), 147-171.
274. Traverse, P. (1988). AIRBUS and ATR system architecture and specification. In Software diversity in computerized control systems. Springer.
275. TTTech. (2021). Nerve. https://www.tttech-industrial.com/products/nerve. Accessed 28 Dec 2021.
276. Vermesan, O., et al. (2009). Internet of things-Strategic research roadmap. European Commission-Information Society and Media DG.
277. Verissimo, P. (1994). Ordering and timeliness requirements of dependable real-time programs. Real-Time Systems, 7(3), 105-128.
278. Vigras, W. J. (2010). Calculation of semiconductorfailure data. http://rel.intersil.com/docs/rel/calculation_of_semiconductor_failure_rates.pdf
279. Vigotsky, L. S. (1962). Thought and language. MIT Press.
280. Wensley, J. H., et al. (1978). SIFT: The design and analysis of a fault-tolerant computer for aircraft control. Proceedings IEEE, 66(10), 1240-1255.
281. Washington's Axe. (2010). Wikipedia. http://en.wikipedia.org/wiki/George_Washington%27s_axe#George_Washington.27s_axe
282. Wilhelm, R., et al. (2008). The worst-case execution time problem-Overview of methods and survey of tools. ACM Transactions on Embedded Computing Systems, 7(3), 1-53.
283. Williamsson, D., & Sellgren, U. (2022). Integrated modularization methodology and process of heavy-duty trucks. https://www.diva-portal.org/smash/record.jsf?pid=diva2%3A1532165&dswid=-5065. Accessed 22 Feb 2022.
284. Williams, T. J. (1990). A reference model for computer integrated manufacturing from the viewpoint of industrial automation. Elsevier IFAC Proceedings Volumes, 23(8), 281-291.
285. Wilson, E. O. (1998). Consilience-The unity of knowledge. Vintage Books.
286. Winfree, A. T. (2001). The geometry of biological time. Springer.
287. Withrow, G. J. (1990). The natural philosophy of time. Oxford Science Publications/ Clarendon Press.
288. Wojciak, J., & Bray, T. (2017). Decouple and scale applications using Amazon SQS and Amazon SNS. https://aws.amazon.com/pub-sub-messaging/. Accessed 3 Aug 2021.
289. Xi, S., et al. (2011). RT-Xen: Towards real-time hypervisor scheduling in Xen. In International conference on embedded software (EMSOFT) (pp. 39-48). IEEE Press.
290. Xing, L., & Amari, S. V. (2008). Handbook ofperformability engineering. Springer.
291. Xu, J., & Parnas, D. (1990). Scheduling processes with release times, deadlines, precedence, and exclusion relations. IEEE Transactions on Software Engineering, 16(3), 360-369.
292. Zilberstein, S. (1996). Using anytime algorithms in intelligent systems. AI Magazine, 16(3), 73-83.