AUTOSAR timing papera and related papers(40/100), AUTOSAR(24)

AUTOSARで時間に関する論文を読もうと思った。

別の調査では、ネットワーク設計、模擬試験を
MATLABでやっている研究が３分の１、
ns2, ns3のオープンソースの模擬試験ソフトが３分の１、
それ以外が３分の１だった。

Arxiv, Resarchgate, CiteSeerx の３箇所で検索した

ArxivではAUTOSARで３文献だった。

Researchgateで AUTOSAR timingで検索した。
該当する文献は、Download可能なものがなかなかなく、
AUTOSARでDownload可能なものを10ダウンロードした。

CiteSeerxでAUTOSAR timingで検索した。
Timingに関する文献を順次ダウンロードしている。
AUTOSARに関連する文献を100番に並べた。
AUTOSAR以外の文献を200番に並べた。

全部で１００文献になるまで記録予定。

それぞれの参考文献のURLを順次追記予定。

|no.|title and URL|
|:----|:----|
|arxiv.1|FMCW SAR with New Synthesis Method Based on A-SPC Technique, Junhyeong Park, Dae-Hwan Jung, Seong-Ook Park https://arxiv.org/abs/2009.14415|
|arxiv.2|Achieving Determinism in Adaptive AUTOSAR, Christian Menard, Andres Goens, Marten Lohstroh, Jeronimo Castrillon https://arxiv.org/abs/1912.01367|
|arxiv.3|Modelling of Autosar Libraries for Large Scale Testing, Wojciech Mostowski, Thomas Arts, John Hughes https://arxiv.org/abs/1703.06574|
|researchgate1|Tool Support for Seamless System Development based on AUTOSAR Timing Extensions, Jan 2012 Embedded Real Time Software Exhibition and Congress ERTS Toulouse, Peter GliwaOliver Scheickl, Christoph Ainhauser https://www.researchgate.net/profile/Peter-Gliwa/publication/259853044_Tool_Support_for_Seamless_System_Development_based_on_AUTOSAR_Timing_Extensions/links/542d14930cf29bbc126d106c/Tool-Support-for-Seamless-System-Development-based-on-AUTOSAR-Timing-Extensions.pdf?|
|researchgate2|Evaluating MARTE in an Industry-Driven Environment: TIMMO's Challenges for AUTOSAR Timing Modeling, Huáscar Espinoza, Kai Richter, Sébastien Gérard, https://www.researchgate.net/profile/Sebastien-Gerard/publication/228709053_Evaluating_MARTE_in_an_Industry-Driven_Environment_TIMMO%27s_Challenges_for_AUTOSAR_Timing_Modeling/links/02bfe50cb731dcc63b000000/Evaluating-MARTE-in-an-Industry-Driven-Environment-TIMMOs-Challenges-for-AUTOSAR-Timing-Modeling.pdf?|
|researchgate3|Applying Holistic Distributed Scheduling to AUTOSAR Methodology, Ahmed DAGHSEN, Khaled CHAABAN, Sébastien SAUDRAIS, Patrick LESERF, May 2010,https://www.researchgate.net/profile/Patrick-Leserf/publication/255564900_Applying_Holistic_Distributed_Scheduling_to_AUTOSAR_Methodology/links/54ec509b0cf2465f532df340/Applying-Holistic-Distributed-Scheduling-to-AUTOSAR-Methodology.pdf?|
|researchgate4|Model Transformation and Scheduling Analysis of an AUTOSAR System, Jul 2011, Ahmed Daghsen, Khaled Chaaban, Sébastien Saudrais, M. Shawky,https://www.researchgate.net/profile/Sebastien-Saudrais/publication/255564902_Model_Transformation_and_Scheduling_Analysis_of_an_AUTOSAR_System/links/5548d9fb0cf205bce7abf99e/Model-Transformation-and-Scheduling-Analysis-of-an-AUTOSAR-System.pdf?|
|researchgate5|End-to-End Timing Analysis of Sporadic Cause-Effect Chains in Distributed Systems Oct 2019, Marco DürrGeorg von der Brüggen,Kuan-Hsun Chen, Jian-Jia Chen,https://www.researchgate.net/profile/Kuan-Hsun-Chen/publication/336429839_End-to-End_Timing_Analysis_of_Sporadic_Cause-Effect_Chains_in_Distributed_Systems/links/5e95e891a6fdcca789158edd/End-to-End-Timing-Analysis-of-Sporadic-Cause-Effect-Chains-in-Distributed-Systems.pdf?|
|researchgate6|A Service-Oriented Real-Time Communication Scheme for AUTOSAR Adaptive Using OPC UA and Time-Sensitive Networking, Anna ArestovaMaximilian Martin, Kai-Steffen Hielscher Reinhard German, https://www.researchgate.net/publication/350460013_A_Service-Oriented_Real-Time_Communication_Scheme_for_AUTOSAR_Adaptive_Using_OPC_UA_and_Time-Sensitive_Networking/fulltext/60754f3a92851cb4a9d85327/A-Service-Oriented-Real-Time-Communication-Scheme-for-AUTOSAR-Adaptive-Using-OPC-UA-and-Time-Sensitive-Networking.pdf?|
|researchgate7|The TIMMO-2-USE project: Time modeling and analysis to use, February 2012, Marie-Agnès Peraldi-FratiMarie-Agnès Peraldi-FratiDaniel KarlssonDaniel KarlssonArne HamannArne HamannShow all 5 authorsJohan NordlanderJohan Nordlander https://www.researchgate.net/profile/Stefan-Kuntz-2/publication/266524600_The_TIMMO-2-USE_project_Time_modeling_and_analysis_to_use/links/55b929d208aed621de086353/The-TIMMO-2-USE-project-Time-modeling-and-analysis-to-use.pdf?|
|researchgate8|UTOSAR Runtime Environment Test,Aug 2020, Ishfaque Ahmed, https://www.researchgate.net/profile/Ishfaque-Ahmed-4/publication/345942764_AUTOSAR_Runtime_Environment_Test/links/600c35fc45851553a065bfa6/AUTOSAR-Runtime-Environment-Test.pdf?
|researchgate9|Achieving Determinism in Adaptive AUTOSAR, Dec 2019, Christian Menard, Andrés Goens, Marten Lohstroh, Jerónimo Castrillón, https://www.researchgate.net/profile/Christian-Menard/publication/337729812_Achieving_Determinism_in_Adaptive_AUTOSAR/links/5df1facfa6fdcc28371a42ea/Achieving-Determinism-in-Adaptive-AUTOSAR.pdf?|
|researchgate10|Time and memory tradeoffs in the implementation of AUTOSAR components, Apr 2009 Design, Automation and Test in Europe, DATE 2009, Nice, France, April 20-24, 2009, Alberto Ferrari, Marco Di Natale, Giacomo Gentile, Paolo Gai,https://www.researchgate.net/profile/Paolo-Gai/publication/221339751_Time_and_memory_tradeoffs_in_the_implementation_of_AUTOSAR_components/links/0912f5108d36b185f0000000/Time-and-memory-tradeoffs-in-the-implementation-of-AUTOSAR-components.pdf?|
|citeseerx.1|Deadline Analysis of AUTOSAR OS Periodic Tasks in the Presence of Interrupts http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.915.5634&rep=rep1&type=pdf|
|citeseerx.2|How Timing Interfaces in AUTOSAR can Improve Distributed Development of Real-Time Software http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.648.2735&rep=rep1&type=pdf|
|citeseerx.3|Timing Simulation of Interconnected AUTOSAR Software-Components http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.659.7962&rep=rep1&type=pdf|
|citeseerx.4|Timing modeling and analysis for AUTOSAR-based software development-a case study (2010) http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.655.5136&rep=rep1&type=pdf|
|101|Beyond AUTOSAR – Optimized AUTOSAR Compliant Basic Software Modules,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.506.234&rep=rep1&type=pdf|
|102|An AUTOSAR ECU Mapping Algorithm, http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.880.68&rep=rep1&type=pdf|
|103|Achievements and exploitation of the AUTOSAR development partnership. Technical report, Society of Automotive Engineers (2006),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.461.5164&rep=rep1&type=pdf|
|104|The Use of Java in the Context of AUTOSAR 4.0 Expectations and Possibilities,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.636.5321&rep=rep1&type=pdf|
|105|AUTOBEST: A United AUTOSAR-OS and ARINC 653 Kernel,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.696.7973&rep=rep1&type=pdf|
|106|Towards Transactional Self-Adaptation for AUTOSAR on the Example of a Collision Detection System,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.648.7644&rep=rep1&type=pdf|
|107|On Spin Locks in AUTOSAR: Blocking Analysis of FIFO, Unordered, and Priority-Ordered Spin Locks,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.385.4961&rep=rep1&type=pdf|
|108|Research and Implementation of AUTOSAR NM Mechanism in FlexRay Network on Electronic Vehicle Motor Drive Control System,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.385.4961&rep=rep1&type=pdf|
|109|On Spin Locks in AUTOSAR: Blocking Analysis of FIFO, Unordered, and Priority-Ordered Spin Locks (2013),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.712.5842&rep=rep1&type=pdf|
|110|Network (CAN) Device Driver for a 32-Bit RISC Architecture based RENESAS Micro-Processor Series with AUTOSAR Software Conformance, http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.681.8077&rep=rep1&type=pdf|
|111|A time-scale decomposition approach to adaptive ECN marking,” presented at the INFOCOM 2001 (2001),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.659.7962&rep=rep1&type=pdf|
|112|Implementing an Untrusted Operating System on Trusted Hardware (2003),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.11.2554&rep=rep1&type=pdf|
|113|SAFER SLOTH: Efficient, Hardware-Tailored Memory Protection,http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.640.3262&rep=rep1&type=pdf|
|114|Configurable memory protection by aspects (2007),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.304.6175&rep=rep1&type=pdf|
|201|A Hierarchical CPU Scheduler for Multimedia Operating Systems (1996), http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.100.4332&rep=rep1&type=pdf|
|202|Cello: a disk scheduling framework for next generation operating systems. (1998),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.1086.6468&rep=rep1&type=pdf|
|203|Efficient Techniques for Comprehensive Protection from Memory Error Exploits (2005),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.144.6892&rep=rep1&type=pdf|
|204|Mondrian Memory Protection (2002),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.19.4473&rep=rep1&type=pdf|
|205|Remus: High Availability via Asynchronous Virtual Machine Replication,” (2008),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.1054.5209&rep=rep1&type=pdf|
|206|Channel Access Algorithms with Active Link Protection for Wireless Communication Networks with Power Control (2000),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.24.3701&rep=rep1&type=pdf|
|207|A linear time algorithm for deciding subject security (1977),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.149.4807&rep=rep1&type=pdf|
|208|The Rio File Cache: Surviving Operating System Crashes (1996),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.142.4371&rep=rep1&type=pdf|
|209|Detection and Localization of Sybil Nodes in VANETs, http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.111.4836&rep=rep1&type=pdf|
|210|Resource reservation in dynamic real-time systems (2004),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.379.9335&rep=rep1&type=pdf|
|211|Bypassing Combinatorial Protections: Polynomial-Time Algorithms for Single-peaked Electorates (2010),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.172.146&rep=rep1&type=pdf|
|212|Association Rule Hiding (2004),http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.8665&rep=rep1&type=pdf|


# arxiv
https://arxiv.org/search/?query=AUTOSAR&source=header&searchtype=all

## ax.1
FMCW SAR with New Synthesis Method Based on A-SPC Technique, Junhyeong Park, Dae-Hwan Jung, Seong-Ook Park
https://arxiv.org/abs/2009.14415

[1] D. Jung and S.-O. Park, "Ku-band car-borne FMCW stripmap synthetic aperture radar," in Proc. 2019 Int. Symp. Antennas Propag., Phuket, Thailand, Oct. 2017, pp. 1-2.
[2] C. Esposito, A. Natale, P. Berardino, G. Palmese, R. Lanari and S. Perna, "AXIS: an airborne X-band interferometric FMCW SAR system,” in Proc. IEEE Int. Geosci. Remote Sensing Symp., Valencia, Spain, Jul. 2018, pp. 5697-5699.
[3] E. Schreiber, A. Heinzel, M. Peichl, M. Engel and W. Wiesbeck, “Advanced buried object detection by multichannel, UAV/Drone carried synthetic aperture radar,” in 13th Eur. Conf. Antennas Propag., Krakow, Poland, Apr. 2019, pp. 1-5.
[4] D. Jung, H. Kang, C. Kim, J. Park and S.-O. Park, "Sparse scene recovery for high-resolution automobile FMCW SAR via scaled compressed sensing," in IEEE Trans. Geosci. Remote Sens., vol. 57, no. 12, pp. 10136-10146, Dec. 2019.
[5] D. Jung, D. Kim, M. T. Azim, J. Park and S. Park, "A novel signal processing technique for Ku-band automobile FMCW fully polarimetric SAR system using triangular LFM," IEEE Trans. Instrum. Meas., Early Access, pp. 1-10, Jul. 2020.
[6] J. Park, S. Park, D.-H Kim, and S.-O. Park, "Leakage mitigation in heterodyne FMCW radar for small drone detection with stationary point concentration technique," IEEE Trans. Microw. Theory and Techn., vol. 67, no. 3, pp. 1221-1232, Mar. 2019.
[7] J. Park, K.-B. Bae, D.-H. Jung, and S.-O. Park, "Micro-drone detection with FMCW radar based on stationary point concentration technique," in Proc. 2019 Int. Symp. Antennas Propag., Xi'an, China, Oct. 2019, pp. 1-3.
[8] J. Park, D.-H. Jung, K.-B. Bae, and S.-O. Park, "Range-Doppler map improvement in FMCW radar for small moving drone detection using the stationary point concentration technique," IEEE Trans. Microw. Theory and Techn., vol. 68, no. 5, pp. 1858-1871, May 2020.
[9] J. Park, J.-S. Park, K.-B. Bae, and S.-O. Park, "Advanced stationary point concentration technique for leakage mitigation and small drone detection with FMCW radar," submitted for publication in IEEE. [Online]. Available: https://arxiv.org/abs/2007.06880

## ax.2
Achieving Determinism in Adaptive AUTOSAR,  Christian Menard, Andres Goens, Marten Lohstroh, Jeronimo Castrillon
https://arxiv.org/abs/1912.01367

[1] E. A. Lee, “The problem with threads,” Computer, vol. 39, no. 5, pp. 33–42, May 2006.
[2] N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud, “The synchronous data flow programming language LUSTRE,” Proceedings of the IEEE, vol. 79, no. 9, pp. 1305–1320, 1991.
[3] G. Berry and G. Gonthier, “The Esterel synchronous programming language: Design, semantics, implementation,” Science of computer programming, vol. 19, no. 2, pp. 87–152, 1992.
[4] G. Berry, “SCADE: Synchronous design and validation of embedded control software,” in Next Generation Design and Verification Method- ologies for Distributed Embedded Control Systems, S. Ramesh and P. Sampath, Eds., Dordrecht: Springer Netherlands, 2007, pp. 19–33.
[5] J.-L. Boulanger, F.-X. Fornari, J.-L. Camus, and B. Dion, SCADE: Language and applications, 1st. Wiley-IEEE Press, 2015.
[6] C. M. Kirsch and A. Sokolova, “The logical execution time paradigm,” in Advances in Real-Time Systems, S. Chakraborty and J. Eberspa ̈cher, Eds. Berlin, Heidelberg: Springer Berlin Heidelberg, 2012, pp. 103–120.
[7] AUTOSAR, “Specification of timing extensions,” AUTOSAR CP Release 4.4.0, Oct. 2018.
[8] A. Biondi and M. Di Natale, “Achieving predictable multicore execution of automotive applications using the LET paradigm,” in 2018 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS), Apr. 2018, pp. 240–250.
[9] AUTOSAR, “Specification of communication management,” AUTOSAR AP Release 19-03, Mar. 2019.
[10] M. Lohstroh, M. Schoeberl, A. Goens, et al., “Actors revisited for time- critical systems,” in Proceedings of the 56th Annual Design Automation Conference 2019, ser. DAC ’19, Las Vegas, NV, USA: ACM, 2019, 152:1–152:4.
[11] AUTOSAR, “SOME/IP protocol specification,” AUTOSAR FO Release 1.5.0, Oct. 2018.
[12] ——, “SOME/IP service discovery protocol specification,” AUTOSAR FO Release 1.5.0, Oct. 2018.
[13] R. Gu, G. Jin, L. Song, L. Zhu, and S. Lu, “What change history tells us about thread synchronization,” in Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering, ser. ESEC/FSE 2015, Bergamo, Italy: ACM, 2015, pp. 426–438.
[14] AUTOSAR, “Specification of execution management,” AUTOSAR AP Release 19-03, Mar. 2019.
[15] C. Hewitt, “Viewing control structures as patterns of passing messages,” Artificial intelligence, vol. 8, no. 3, pp. 323–364, 1977.
[16] G. A. Agha, “Actors: A model of concurrent computation in distributed systems,” MIT Artificial Intelligence Lab, Tech. Rep., 1985.
[17] M. Lohstroh and E. A. Lee, “Deterministic actors,” in 2019 Forum on Specification and Design Languages (FDL), IEEE, 2019.
[18] M.Lohstroh, ́I. ́IncerRomeo,A.Goens,etal.,“Reactors:Adetermin- istic model for composable reactive systems,” in Model-Based Design of Cyber Physical Systems (CyPhy’19), 2019, To appear.
[19] Y. Zhao, J. Liu, and E. A. Lee, “A programming model for time- synchronized distributed real-time systems,” in 13th IEEE Real Time and Embedded Technology and Applications Symposium (RTAS’07), Apr. 2007, pp. 259–268.
[20] P. Derler, T. H. Feng, E. A. Lee, et al., “PTIDES: A programming model for distributed real-time embedded systems,” EECS Department, University of California, Berkeley, Tech. Rep., May 2008.
[21] AUTOSAR, “Specification of time synchronization for adaptive plat- form,” AUTOSAR AP Release 19-03, Mar. 2019.
[22] R. Ernst, L. Ko ̈hler, and K.-B. Gemlau, “System level LET: Mastering cause-effect chains in distributed systems,” in 44th Annual Conference of the IEEE Industrial Electronics Society (IECON), Oct. 2018.

## ax.3
Modelling of Autosar Libraries for Large Scale Testing,  Wojciech Mostowski, Thomas Arts, John Hughes
https://arxiv.org/abs/1703.06574

[1] T. Arts & J. Hughes (2016): How Well are Your Requirements Tested? In: 2016 IEEE International Confer- ence on Software Testing, Verification and Validation, pp. 244–254, doi:10.1109/ICST.2016.23.
[2] T. Arts, J. Hughes, J. Johansson & U. Wiger (2006): Testing telecoms software with QuviQ QuickCheck. In: Proceedings of ERLANG’06, ACM, pp. 2–10, doi:10.1145/1159789.1159792.
[3] T. Arts, J. Hughes, U. Norell & H. Svensson (2015): Testing AUTOSAR software with QuickCheck. In: Eighth IEEE International Conference on Software Testing, Verification and Validation Workshops, pp. 1–4, doi:10.1109/ICSTW.2015.7107466.
[4] T. Arts & M.R. Mousavi (2015): Automatic Consequence Analysis of Automotive Standards (AUTO-CAAS). In: First International Workshop on Automotive Software Architectures (WASA 2015), ACM Press, pp. 35–38, doi:10.1145/2752489.2752495.
[5] AUTOSAR Consortium (2013): AUTomotive Open System ARchitecture, standard documents. https:// autosar.org/.
[6] AUTOSAR Consortium (2014): Acceptance Test Specification of Communication on CAN bus – Release 1.0.0.
W. Mostowski, T. Arts, J. Hughes 195
[7] F. Cesarini & S. Thompson (2009): Erlang Programming. O’Reilly.
[8] J. Hughes (2007): QuickCheck testing for fun and profit. In: Proceedings of PADL’07, Springer, pp. 1–32, doi:10.1007/978-3-540-69611-7 1.
[9] S. Kunze, W. Mostowski, M.R. Mousavi & M. Varshosaz (2016): Generation of Failure Models through Automata Learning. In: Second International Workshop on Automotive Software Architectures (WASA 2016), IEEE Society, pp. 22–25, doi:10.1109/WASA.2016.7.
[10] J.Svenningsson,H.Svensson,N.Smallbone,T.Arts,U.Norell&J.Hughes(2014):AnExpressiveSemantics of Mocking. In: Fundamental Approaches to Software Engineering, LNCS 8411, Springer, pp. 385–399, doi:10.1007/978-3-642-54804-8 27.
[11] J. Tretmans (2011): Model-Based Testing and Some Steps towards Test-Based Modelling. In: Formal Meth- ods for Eternal Networked Software Systems, LNCS 6659, Springer, pp. 297–326, doi:10.1007/978-3-642- 21455-4 9.

# reserachgate
## R.G.1
Tool Support for Seamless System Development based on AUTOSAR Timing Extensions, Jan 2012 Embedded Real Time Software Exhibition and Congress ERTS Toulouse, Peter GliwaOliver Scheickl, Christoph Ainhauser
https://www.researchgate.net/profile/Peter-Gliwa/publication/259853044_Tool_Support_for_Seamless_System_Development_based_on_AUTOSAR_Timing_Extensions/links/542d14930cf29bbc126d106c/Tool-Support-for-Seamless-System-Development-based-on-AUTOSAR-Timing-Extensions.pdf?

[1] AUTOSAR Development Partnership. Specification of Timing Extensions, Version 1.0.0, Release 4.0.1.
[2] M. Broy, I. H. Krüger, A. Pretschner, and C. Salzmann. Engineering Automotive Software. In Proceedings of the IEEE, volume 95, pages 356 – 373, Feb. 2007.
[3] EAST-ADL Association. EAST-ADL - An Architecture Description Language. http://www.eastadl.info/.
[4] P. Gliwa and A. Mayer. Application Performance Measurement on Automotive Microcontrollers. In Proceedings of VDI congress “Elektronik im Kraftfahrzeug” (Baden-Baden), 2011.
[5] M. Jersak, P. Gliwa, and K. Richter. Planung und Absicherung der Echtzeitfähigkeit von Software und vernetzten Steuergeräten. In Simulation und Test in der Funktions- und Softwareentwicklung für die Automobilelektronik III, 2010.
[6] M. Rudorfer, C. Knüchel, S. Voget, S. Eberle, and A. Loyer. Artop - an Ecosystem Approach for Collaborative AUTOSAR Tool Development. In Proceedings of ERTS2, 2010.
[7] O. Scheickl. Timing Constraints in Distributed Development of Automotive Real-time Systems. PhD thesis, Technische Universität München, 2011.
[8] O. Scheickl, C. Ainhauser, and M. Rudorfer. Distributed Development of Automotive Real-time Systems based on Function-triggered Timing Constraints. In Proceedings of ERTS2, 2010.
[9] The ALL-TIMES Consortium. D4.4.2 Report on main project results. Technical Report Ver. 1.2, 2010.
[10] TIMMO-2-USE Consortium. TIMMO-2-USE - Mastering Timing Tools, Algorithms and Languages. http://timmo-2-use.org/pressreleases/31032011.pdf.

## R.G.2
Evaluating MARTE in an Industry-Driven Environment: TIMMO's Challenges for AUTOSAR Timing Modeling
Huáscar Espinoza, Kai Richter, Sébastien Gérard
https://www.researchgate.net/profile/Sebastien-Gerard/publication/228709053_Evaluating_MARTE_in_an_Industry-Driven_Environment_TIMMO%27s_Challenges_for_AUTOSAR_Timing_Modeling/links/02bfe50cb731dcc63b000000/Evaluating-MARTE-in-an-Industry-Driven-Environment-TIMMOs-Challenges-for-AUTOSAR-Timing-Modeling.pdf?

[1] AUTOSAR Partnership. http://www.autosar.org
[2] AUTOSAR Partnership. AUTOSAR—Current results and
preparations for exploitation. In Proc. 7th EUROFORUM
“Software in the vehicle”. Stuttgart, Germany, May 2006
[3] M. Jersak et.al. Timing-Modell und Methodik für
AUTOSAR. Elektronik automotive, Special issue
AUTOSAR, October 2007
[4] K. Richter, On the Complexity of Adding Real-Time
Properties to the AUTOSAR Software Component Model.
In Proc. OMER4 Workshop. Paderborn, Germany, October
2007
[5] R. Henia, A. Hamann, M. Jersak, R. Racu, K. Richter, R. Ernst. System Level Performance Analysis - the SymTA/S, Approach. In IEE Proceedings Computers and Digital Techniques, Vol. 152, Is. 2, March 2005.
[6] O. Scheickl and M. Rudorfer. Automotive Real Time
Development Using a Timing-augmented AUTOSAR
Specification. In Proc. Embedded Real-Time Software
Congress (ERTS), Toulouse, France, 2008
[7] J.L. Medina, M. G. Harbour, and J.M. Drake: MAST
Real-Time View: A Graphic UML Tool for Modeling Object-
Oriented Real-Time Systems. Proc. of the 22th IEEE
RTS, pp. 245-256. December 2001.
[8] R. Chen, M. Sgroi, G. Martin, L. Lavagno, A. L. Sangiovanni-
Vincentelli, J. Rabaey: UML for Real: Design of
Embedded Real-Time Systems, pp. 189-270, Kluwer Academic
Publishers, May 2003.
[9] H. Espinoza, “An Integrated Model-Driven Framework
for Specifying and Analyzing Non-Functional Properties
of Real-Time Systems”, PhD Thesis, University of Evry,
FRANCE. Sept. 2007.
[10] OMG: UML Profile for Modelling and Analysis of Real-
Time and Embedded systems (MARTE), version Beta 1,
July, 2007
[11] H. Espinoza, D. Servat, and S. Gérard, Leveraging Analysis-
Aided Design Decision Knowledge in
UML-Based Development of Embedded Systems,
SHARK-ICSE 2008. Leipzig, Germany. May 2008.
[12] C. André, F. Mallet, R. de Simone, "Modeling of Immediate
vs. Delayed Data Communications: from AADL to
UML MARTE", ECSI Forum (FDL), September 2007,
Spain.

## R.G.3
Applying Holistic Distributed Scheduling to AUTOSAR Methodology, Ahmed DAGHSEN, Khaled CHAABAN, Sébastien SAUDRAIS, Patrick LESERF, May 2010
https://www.researchgate.net/profile/Patrick-Leserf/publication/255564900_Applying_Holistic_Distributed_Scheduling_to_AUTOSAR_Methodology/links/54ec509b0cf2465f532df340/Applying-Holistic-Distributed-Scheduling-to-AUTOSAR-Methodology.pdf?

[1] K. Chaaban, P. Leserf, S. Saudrais: “Steer-By-Wire
System Development Using AUTOSAR
Methodology”, ETFA, SPAIN, 2009.
[2] J. Sun, J. Liu, R. Bettat: “An End-To-End Approach
to Schedule Tasks with Shared Resources in
Multiprocessor Systems”, Department of Computer
Science- University of Illinois.
[3] O. Scheickl, M. Rudorfer: “Automotive Real Time
Development Using a Timing-augmented
AUTOSAR Specification”. BMW Car IT, Munich.
[4] K. Richter, R. Racu, R. Ernst: “The Need of a
Timing Model for the AUTOSAR software
standard”, Braunschweig, Germany.
[5] S. Fürst et al.: “AUTOSAR – A Worldwide Standard
is on the Road”, 14th International VDI Congress
Electronic Systems for Vehicles 2009, Baden-
Baden.
[6] A. Cervin, D. Henriksson, B. Lincoln, J. Eker, K.
Årzén: "How Does Control Timing Affect
Performance? Analysis and Simulation of Timing
Using Jitterbug and TrueTime". IEEE Control
Systems Magazine, 23:3, pp. 16--30, June 2003.
[7] K. Tindell: “Adding time-offsets to schedulability
analysis”. Technical Report YCS 221, Department
of Computer Science, University of York, UK, 1994.
[8] J. C. Palencia and M. G. Harbour: “Exploiting
precedence relations in the schedulability analysis
of distributed real-time systems”. In Proceedings of
the IEEE Real-Time Systems Symposium, pages
328–399. IEEE Computer Society, 1999.

## R.G.4
Model Transformation and Scheduling Analysis of an AUTOSAR System, Jul 2011, Ahmed Daghsen, Khaled Chaaban, Sébastien Saudrais, M. Shawky
https://www.researchgate.net/profile/Sebastien-Saudrais/publication/255564902_Model_Transformation_and_Scheduling_Analysis_of_an_AUTOSAR_System/links/5548d9fb0cf205bce7abf99e/Model-Transformation-and-Scheduling-Analysis-of-an-AUTOSAR-System.pdf?

[1] Simon F¨urst et al. Autosar - a worldwide standard is on the
road. In 14th International VDI Congress Electronic Systems
for Vehicles, Baden-Baden, 2009.
[2] Rajesh K. Gupta and Giovanni De Micheli. System-level
Synthesis using Re-programmable Components. PhD thesis,
1992.
[3] Rafik Henia, Arne Hamann, Marek Jersak, Razvan Racu, Kai
Richter, and Rolf Ernst. System level performance analysis -
the symta/s approach. 2005.
[4] Marek Jersak. Compositional Performance Analysis for Complex
Embedded Applications. PhD thesis, Technical University
of Braunschweig, 2004.
[5] Jukka Mki-turja and Mikael Nolin. Tighter response-times for
tasks with offsets. 2004.
[6] M. Rudorfer O. Scheickl. Automotive real time development
using a timing-augmented autosar specification. BMW, Munich.
[7] Jun Sun, Riccardo Bettati, and Jane W. s. Liu. An endto-
end approach to schedule tasks with shared resources in
multiprocessor systems. 1994.
[8] Ken Tindell and John Clark. Holistic schedulability analysis
for distributed hard real-time systems. Microprocess. Microprogram.,
40(2-3):117–134, 1994.

## R.G.5
End-to-End Timing Analysis of Sporadic Cause-Effect Chains in Distributed Systems Oct 2019
Marco DürrGeorg von der Brüggen,Kuan-Hsun Chen, Jian-Jia Chen
https://www.researchgate.net/profile/Kuan-Hsun-Chen/publication/336429839_End-to-End_Timing_Analysis_of_Sporadic_Cause-Effect_Chains_in_Distributed_Systems/links/5e95e891a6fdcca789158edd/End-to-End-Timing-Analysis-of-Sporadic-Cause-Effect-Chains-in-Distributed-Systems.pdf?

[1] AUTOSAR. 2017. Specification of Timing Extensions, Release 4.3.1. (Aug. 2017).
[2] M. Becker, D. Dasari, S. Mubeen, M. Behnam, and T. Nolte. 2016. Mechaniser-a timing analysis and synthesis tool for multi-rate effect chains with job-level dependencies. In 7th InternationalWorkshop on Analysis Tools and Methodologies
for Embedded and Real-time Systems (WATERS).
[3] M. Becker, D. Dasari, S. Mubeen, M. Behnam, and T. Nolte. 2016. Synthesizing job-level dependencies for automotive multi-rate effect chains. In 22nd IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA 2016, Daegu, South Korea, August 17–19, 2016. 159–169. DOI:https://doi.org/10.1109/RTCSA.2016.
41
[4] M. Becker, S. Mubeen, D. Dasari, M. Behnam, and T. Nolte. 2017. A generic framework facilitating early analysis of data propagation delays in multi-rate systems (Invited paper). In IEEE International Conference on Embedded and Real-Time Computing Systems and Applications, RTCSA. 1–11. DOI:https://doi.org/10.1109/RTCSA.2017.8046323
[5] A. Benveniste, P. Caspi, P. L. Guernic, H. Marchand, J.-P. Talpin, and S. Tripaki. 2002. A protocol for loosely timetriggered architectures. In Embedded Software, Second International Conference, EMSOFT. 252–265. DOI:https://doi.org/10.1007/3-540-45828-X_19
[6] E. Bini and G. C. Buttazzo. 2005. Measuring the performance of schedulability tests. Real-Time Systems 30, 1–2 (2005),
129–154. DOI:https://doi.org/10.1007/s11241-005-0507-9
[7] Bosch. 1991. Controller Area Network Specification 2.0.
[8] A. Burns. 1994. Preemptive priority-based scheduling: An appropriate engineering approach. In Advances in Real-Time Systems, chapter 10. Prentice Hall, 225–248.
[9] A. Davare, Q. Zhu, M. D. Natale, C. Pinello, S. Kanajan, and A. L. Sangiovanni-Vincentelli. 2007. Period optimization for hard real-time distributed automotive systems. In Design Automation Conference, DAC. 278–283. DOI:https://doi.org/10.1145/1278480.1278553
[10] P. Emberson, R. Stafford, and R. I. Davis. 2010. Techniques for the synthesis of multiprocessor tasksets. In International Workshop on Analysis Tools and Methodologies for Embedded and Real-time Systems (WATERS 2010). 6–11.
[11] N. Feiertag, K. Richter, J. Nordlander, and J. Jonsson. 2009. A compositional framework for end-to-end path delay calculation of automotive systems under different path semantics. InWorkshop on Compositional Theory and Technology for Real-Time Embedded Systems.
[12] J. Forget, F. Boniol, and C. Pagetti. 2017. Verifying end-to-end real-time constraints on multi-periodic models. In 22nd IEEE International Conference on Emerging Technologies and Factory Automation, ETFA. 1–8. DOI:https://doi.org/10.1109/ETFA.2017.8247612
[13] A. Hamann, D. Dasari, S. Kramer, M. Pressler, and F. Wurst. 2018. Improving and estimating the precision of bounds on the worst-case latency of task chains. IEEE Trans. on CAD of Integrated Circuits and Systems, (Special Issue for EMSOFT) 37, 11 (2018), 2578–2589. DOI:https://doi.org/10.1109/TCAD.2018.2861016
[14] A. Hamann, D. Dasari, S. Kramer, M. Pressler, and F. Wurst. 2017. Communication centric design in complex automotive embedded systems. In Euromicro Conference on Real-Time Systems, ECRTS. 10:1–10:20.
[15] T. Klaus, F. Franzmann, M. Becker, and P. Ulbrich. 2018. Data propagation delay constraints in multi-rate systems: Deadlines vs. job-level dependencies. In Proceedings of the 26th International Conference on Real-Time Networks and Systems. ACM, 93–103.
[16] T. Kloda, A. Bertout, and Y. Sorel. 2018. Latency analysis for data chains of real-time periodic tasks. In 23rd IEEE International Conference on Emerging Technologies and Factory Automation, ETFA. 360–367. DOI:https://doi.org/10.1109/ETFA.2018.8502498
[17] H. Kopetz. 2011. Real-Time Systems - Design Principles for Distributed Embedded Applications. Springer. DOI:https://doi.org/10.1007/978-1-4419-8237-7
ACM Transactions on Embedded Computing Systems, Vol. 18, No. 5s, Article 58. Publication date: October 2019.
58:24 M. Dürr et al.
[18] S. Kramer, D. Ziegenbein, and A. Hamann. 2015. Real world automotive benchmark for free. In 6th International Workshop on Analysis Tools and Methodologies for Embedded and Real-time Systems (WATERS).
[19] J. P. Lehoczky, L. Sha, and Y. Ding. 1989. The ratemonotonic scheduling algorithm: Exact characterization and average case behavior. In IEEE Real-Time Systems Symposium’89. 166–171. DOI:https://doi.org/10.1109/REAL.1989.63567
[20] C. L. Liu and J. W. Layland. 1973. Scheduling algorithms for multiprogramming in a hard-real-time environment. J. ACM 20, 1 (1973), 46–61. DOI:https://doi.org/10.1145/321738.321743
[21] A. K. Mok. 1983. Fundamental Design Problems of Distributed Systems for the Hard-Real-Time Environment. Technical
Report. Massachusetts Institute of Technology, Cambridge, MA, USA.
[22] S. Mubeen, J. Mäki-Turja, and M. Sjödin. 2012. Implementation of end-to-end latency analysis for component-based
multi-rate real-time systems in Rubus-ICE. In Factory Communication Systems (WFCS), 2012 9th IEEE International
Workshop on. IEEE, 165–168.
[23] S. Mubeen, J. Mäki-Turja, and M. Sjödin. 2012. Translating end-to-end timing requirements to timing analysis model
in component-based distributed real-time systems. SIGBED Review 9, 4 (2012), 17–20. DOI:https://doi.org/10.1145/
2452537.2452539
[24] A. Rajeev, S. Mohalik, M. G. Dixit, D. B. Chokshi, and S. Ramesh. 2010. Schedulability and end-to-end latency in
distributed ecu networks: Formal modeling and precise estimation. In Proceedings of the Tenth ACM International
Conference on Embedded Software. ACM, 129–138.
[25] J. Schlatow and R. Ernst.. 2016. Response-time analysis for task chains in communicating threads. In IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS). 245–254. DOI:https://doi.org/10.1109/RTAS.2016.7461359
[26] Symtavision. [n.d.]. SymTA/S Toolbox. http://www.symtavision.com/symtas.html
[27] K. Tindell and J. Clark. 1994. Holistic schedulability analysis for distributed hard real-time systems. Microprocessing and Microprogramming 40, 2–3 (1994), 117–134. DOI:https://doi.org/10.1016/0165-6074(94)90080-9
[28] G. von der Bruggen, J.-J. Chen, andW.-H. Huang. 2015. Schedulability and optimization analysis for non-preemptive static priority scheduling based on task utilization and blocking factors. In Euromicro Conference on Real-Time Systems,
ECRTS. 90–101. DOI:https://doi.org/10.1109/ECRTS.2015.16
[29] G. von der Brüggen, N. Ueter, J. Chen, and M. Freier. 2017. Parametric utilization bounds for implicit-deadline periodic tasks in automotive systems. In Proceedings of the 25th International Conference on Real-Time Networks and Systems, RTNS. 108–117.

## R.G.6
A Service-Oriented Real-Time Communication Scheme for AUTOSAR Adaptive Using OPC UA and Time-Sensitive Networking
Anna ArestovaMaximilian Martin, Kai-Steffen HielscherReinhard German
https://www.researchgate.net/publication/350460013_A_Service-Oriented_Real-Time_Communication_Scheme_for_AUTOSAR_Adaptive_Using_OPC_UA_and_Time-Sensitive_Networking/fulltext/60754f3a92851cb4a9d85327/A-Service-Oriented-Real-Time-Communication-Scheme-for-AUTOSAR-Adaptive-Using-OPC-UA-and-Time-Sensitive-Networking.pdf?


1. Fürst, S.; Bechter, M. AUTOSAR for Connected and Autonomous Vehicles: The AUTOSAR Adaptive Platform. In Proceedings of the 2016 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshop (DSN-W),
Toulouse, France, 28 June–1 July 2016; pp. 215–217.
2. AUTOSAR. Specification of Communication Management; Release 19–03; AUTOSAR: Munich, Germany, 2019.
3. Ixia. Automotive Ethernet: An Overview; Ixia: Calabasas, CA, USA, 2014.
4. Aust, S. Paving theWay for Connected Cars with Adaptive AUTOSAR and AGL. In Proceedings of the 2018 IEEE 43rd Conference on Local Computer Networks Workshops (LCNWorkshops), Chicago, IL, USA, 1–4 October 2018; pp. 53–58.
5. AUTOSAR. Explanation of Adaptive Platform Design; Release 19–03; AUTOSAR: Munich, Germany, 2019.
6. AUTOSAR. SOME/IP Protocol Specification; Release 19–11; AUTOSAR: Munich, Germany, 2019.
7. Object Management Group. Data Distribution Service (DDS); Version 1.4; Object Management Group: Milford, MA, USA, 2015.
8. Ioana, A.; Korodi, A. OPC UA Publish–Subscribe and VSOME/IP Notify-Subscribe Based Gateway Application in the Context of Car to Infrastructure Communication. Sensors 2020, 20, 4624. [CrossRef] [PubMed]
9. Ioana, A.; Korodi, A. VSOMEIP—OPC UA Gateway Solution for the Automotive Industry. In Proceedings of the 2019 IEEE International Conference on Engineering, Technology and Innovation (ICE/ITMC), Valbonne Sophia-Antipolis, France, 17–19, June 2019; pp. 1–6.
10. Bruckner, D.; St˘anic˘a, M.; Blair, R.; Schriegel, S.; Kehrer, S.; Seewald, M.; Sauter, T. An Introduction to OPC UA TSN for Industrial Communication Systems. Proc. IEEE 2019, 1121–1131. 
11. Zezulka, F.; Marcon, P.; Bradac, Z.; Arm, J.; Benesl, T.; Vesely, I. Communication Systems for Industry 4.0 and the IIoT. IFAC-PapersOnLine 2018, 51, 150–155. 
12. Draho˘s, P.; Ku˘cera, E.; Haffner, O.; Klimo, I. Trends in industrial communication and OPC UA. In Proceedings of the 2018 Cybernetics & Informatics (K&I), Lazy pod Makytou, Slovakia, 31 January–3 February 2018; pp. 1–5.
13. Claassen, A.; Rohjans, S.; LehnhoffMember, S. Application of the OPC UA for the Smart Grid. In Proceedings of the 2011 2nd IEEE PES International Conference and Exhibition on Innovative Smart Grid Technologies, Manchester, UK, 5–7 December 2011; pp. 1–8.
14. OPC Foundation. OPC UA for Field Level Communication—A Theory of Operations; OPC Foundation: Scottsdale, AZ, USA, 2020.
15. Panda, S.K.; Majumder, M.; Wisniewski, L.; Jasperneite, J. Real-time Industrial Communication by using OPC UA Field
Level Communication. In Proceedings of the 2020 25th IEEE International Conference on Emerging Technologies and Factory Automation (ETFA), Vienna, Austria, 8–11 September 2020; Volume 1, pp. 1143–1146.
16. Pfrommer, J.; Ebner, A.; Ravikumar, S.; Karunakaran, B. Open source OPC UA PubSub over TSN for Realtime Industrial Communication. In Proceedings of the 2018 IEEE 23rd International Conference on Emerging Technologies and Factory Automation (ETFA), Turin, Italy, 4–7 September 2018; pp. 1087–1090.
17. Eckhardt, A.; Müller, S.; Leurs, L. An Evaluation of the Applicability of OPC UA Publish Subscribe on Factory Automation use Cases. In Proceedings of the 2018 IEEE 23rd International Conference on Emerging Technologies and Factory Automation(ETFA), Turin, Italy, 4–7 September 2018; Volume 1, pp. 1071–1074.
18. Swamy, N. Evaluation of OPC-UA Technology in a Car-2x Communication towards an Industry 4.0 Driven Automotive Domain. Master’s Thesis, Technische Universität Chemnitz, Chemnitz, Germany, 2017.
19. Farzaneh, M.H.; Knoll, A. An ontology-based Plug-and-Play approach for in-vehicle Time-Sensitive Networking (TSN). In Proceedings of the 2016 IEEE 7th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), Vancouver, BC, Canada, 13–15 October 2016; pp. 1–8.
20. Waschulzik, T.; Schneider, V. Contributing to Shift2rail’s Next, Generation of High Capable and Safe TCMS: PHASE II. D1.2—Definition of New FDF Requirements and New Application Profiles; Technical Report; CONNECTA–2 (Part of Shift2Rail); Shift2Rail Joint Undertaking:
Brussels, Belgium, 2019.
21. AUTOSAR. Specification of Execution Management; Release 19–03; AUTOSAR: Munich, Germany, 2019.
22. AUTOSAR. Explanation of Sensor Interfaces; Release 19–11; AUTOSAR: Munich, Germany, 2019.
23. OPC Foundation. OPC Unified Architecture: Part 2: Security Model; Release 1.04; OPC Foundation: Scottsdale, AZ, USA, 2018.
24. OPC Foundation. OPC Unified Architecture: Part 11: Historical Access; Release 1.04; OPC Foundation: Scottsdale, AZ, USA, 2018.
25. OPC Foundation. OPC Unified Architecture: Part 15: Safety; Release 1.04; OPC Foundation: Scottsdale, AZ, USA, 2019.
26. OPC Foundation. OPC Unified Architecture: Part 14: PubSub; Release 1.04; OPC Foundation: Scottsdale, AZ, USA, 2018.
27. OPC Foundation. OPC Unified Architecture: Part 3: Address Space Model; Release 1.04; OPC Foundation: Scottsdale, AZ, USA, 2017.
28. OPC Foundation. OPC Unified Architecture: Part 5: Information Model; Release 1.04; OPC Foundation: Scottsdale, AZ, USA, 2017.
29. Arestova, A.; Hielscher, K.S.J.; German, R. Design of a Hybrid Genetic Algorithm for Time-Sensitive Networking. In Measurement,
Modelling and Evaluation of Computing Systems, Proceedings of the Saarbrücken, Germany, 16–18 March 2020; Springer International
Publishing: Berlin/Heidelberg, Germany, 2020; pp. 99–117.
30. IEEE Computer Society. IEEE Standard for Local and Metropolitan Area Networks—Bridges and Bridged Networks—
Amendment 25: Enhancements for Scheduled Traffic. In IEEE Std 802.1Qbv-2015 (Amendment to IEEE Std 802.1Q-2014 as
amended by IEEE Std 802.1Qca-2015, IEEE Std 802.1Qcd-2015, and IEEE Std 802.1Q-2014/Cor 1-2015); IEEE: New York, NY, USA, 2016. Sensors 2021, 21, 2337 29 of 29
31. Dürr, F.; Nayak, N.G. No-wait Packet Scheduling for IEEE Time-sensitive Networks (TSN). In Proceedings of the 24th International Conference on Real-Time Networks and Systems, RTNS ’16, Brest, France, 19–21 October 2016; ACM: New York, NY, USA, 2016; pp. 203–212.
32. Bruckner, D.; St˘anic˘a, M.P.; Blair, R.; Ademaj, A.; Skeffington, W.; Kutscher, D.; Schriegel, S.; Wilmes, R.; Wachswender, K.; Leurs, L.; et al. OPC UA TSN: A New Solution for Industrial Communication. Available online: https://cdn.weka-fachmedien.de/
whitepaper/files/OPC_UA_TSN_-_A_new_Solution_for_Industrial_Communication.pdf (accessed on 1 March 2021).
33. IEEE Instrumentation and Measurement Society. IEEE Standard for a Precision Clock Synchronization Protocol for Networked
Measurement and Control Systems. In IEEE Std 1588-2008 (Revision of IEEE Std 1588–2002); IEEE: New York, NY, USA, 2008.
34. IEEE Computer Society. IEEE Standard for Local and Metropolitan Area Networks–Timing and Synchronization for Time-Sensitive Applications. In IEEE Std 802.1AS-2020 (Revision of IEEE Std 802.1AS-2011); IEEE: New York, NY, USA, 2020.
35. IEEE Computer Society. IEEE Standard for Local and Metropolitan Area Networks–Bridges and Bridged Networks—Amendment
31: Stream Reservation Protocol (SRP) Enhancements and Performance Improvements. In IEEE Std 802.1Qcc-2018 (Amendment to
IEEE Std 802.1Q-2018 as amended by IEEE Std 802.1Qcp-2018); IEEE: New York, NY, USA, 2018.
36. Jesse, B.; Weber, M.; Helmling, M. The Future with SOA, POSIX, TSN. Automotive Ethernet: Trends and Challenges. Automobil-
Elektronik 2017, 11–12, 32–35. Translation of a German publication.
37. Pop, P.; Raagaard, M.L.; Gutierrez, M.; Steiner, W. Enabling Fog Computing for Industrial Automation Through Time-Sensitive
Networking (TSN). IEEE Commun. Stand. Mag. 2018, 2, 55–61. [CrossRef]
38. Gutiérrez, M.; Ademaj, A.; Steiner, W.; Dobrin, R.; Punnekkat, S. Self-configuration of IEEE 802.1 TSN networks. In Proceedings
of the 2017 22nd IEEE International Conference on Emerging Technologies and Factory Automation (ETFA), Limassol, Cyprus,
12–15 September 2017; pp. 1–8.
39. Kobzan, T.; Blöcher, I.; Hendel, M.; Althoff, S.; Gerhard, A.; Schriegel, S.; Jasperneite, J. Configuration Solution for TSN-based
Industrial Networks utilizing SDN and OPC UA. In Proceedings of the 2020 25th IEEE International Conference on Emerging
Technologies and Factory Automation (ETFA), Austria, Vienna, 8–11 September 2020; Volume 1, pp. 1629–1636.
40. Profanter, S.; Tekat, A.; Dorofeev, K.; Rickert, M.; Knoll, A. OPC UA versus ROS, DDS, and MQTT: Performance Evaluation of
Industry 4.0 Protocols. In Proceedings of the 2019 IEEE International Conference on Industrial Technology (ICIT), Melbourne,
Australia, 13–15 February 2019; pp. 955–962.
41. OPC Foundation. OPC Unified Architecture: Part 4: Services; OPC Foundation: Scottsdale, AZ, USA, 2017; Release 1.04.
42. AUTOSAR. Specification of Manifest; AUTOSAR: Munich, Germany, 2019; Release 19–03.
43. OPC Foundation. OPC Unified Architecture: Part 6: Mappings; OPC Foundation: Scottsdale, AZ, USA, 2017; Release 1.04.
44. Martin, M. Integration of OPC UA and TSN for Real-Time Communication in the AUTOSAR Adaptive Platform. Master’s Thesis,
Department of Computer Science, University of Erlangen, Erlangen, Germany, 2020.
45. OPCFoundation. OPCUnifiedArchitecture: Part 12: Discovery andGlobal Services;OPCFoundation: Scottsdale,AZ,USA, 2018; Release 1.04.
46. AUTOSAR. Explanation of ara::com API; AUTOSAR: Munich, Germany, 2019; Release 19–03.
47. Zlatanov, N. Dynamic Memory Allocation and Fragmentation; ESC: Santa Clara, CA, USA, 2015.
48. Barr,M.;Massa, A. Programming Embedded Systems: With C and GNU Development Tools; O’ReillyMedia: Sebastopol, CA, USA, 2006.
49. Kormanyos, C. Real-Time C++; Springer: Berlin/Heidelberg, Germany, 2018.
50. Masmano,M.; Ripoll, I.; Crespo, A.; Real, J. TLSF: A NewDynamicMemory Allocator for Real-Time Systems. In Proceedings of the 16th
Euromicro Conference on Real-Time Systems (ECRTS 2004), Catania, Italy, 30 June–2 July 2004.
51. IEEE Computer Society and The Open Group. Standard for Information Technology—Portable Operating System Interface
(POSIX(R)) Base Specifications, Issue 7. In IEEE Std 1003.1, 2013 Edition (incorporates IEEE Std 1003.1-2008, and IEEE Std
1003.1-2008/Cor 1-2013); IEEE: New York, NY, USA, 2013.
52. Wolf, M. Computers as Components, Third Edition: Principles of Embedded Computing System Design, 3rd ed.; Morgan Kaufmann
Publishers Inc.: San Francisco, CA, USA, 2012.
53. Reghenzani, F.;Massari, G.; Fornaciari,W. The Real-Time Linux Kernel: A Survey on PREEMPT_RT. ACMComput. Surv. 2019, 52, 1–36.
[CrossRef]
54. Pahlevan, M.; Obermaisser, R. Genetic Algorithm for Scheduling Time-Triggered Traffic in Time-Sensitive Networks. In Proceedings
of the 2018 IEEE 23rd International Conference on Emerging Technologies and Factory Automation (ETFA), Turin, Italy,
4–7 September 2018; Volume 1, pp. 337–344.
55. Rostedt, S.; Hart, D. Internals of the RT Patch. In Proceedings of the 2007 Linux Symposium, Ottawa, ON, Canada, 27–30 June 2007; Volume 2, pp. 161–172.
56. Bristot de Oliveira, D.; Oliveira, R. Timing analysis of the PREEMPT RT Linux kernel. Softw. Pract. Exp. 2015, 46, 789–819.
57. ISO/IEC. ISO/IEC 9126: Software Engineering—Product Quality; ISO: Geneva, Switzerland, 2001.
58. Shift2Rail. Shift2Rail Multi-Annual Action Plan (MAAP); Shift2Rail: Brussels, Belgium, 2015. 

## R.G.7
The TIMMO-2-USE project: Time modeling and analysis to use, February 2012, Marie-Agnès Peraldi-FratiMarie-Agnès Peraldi-FratiDaniel KarlssonDaniel KarlssonArne HamannArne HamannShow all 5 authorsJohan NordlanderJohan Nordlander
https://www.researchgate.net/profile/Stefan-Kuntz-2/publication/266524600_The_TIMMO-2-USE_project_Time_modeling_and_analysis_to_use/links/55b929d208aed621de086353/The-TIMMO-2-USE-project-Time-modeling-and-analysis-to-use.pdf?

[1] TIMMO-2-USE Project, ITEA 2, 2009, Website
http://www.timmo-2-use.org
[2] TIMMO Project,, ITEA2 2007, Website
http://www.timmo-2-use.org/timmo/index.htm
[3] H. Blom, R. Johansson, H. Lönn. Annotation with Timing Constraints in the Context of EAST-ADL2 and AUTOSAR – the Timing Description Language. ST ANDRTS'09 2009. Dublin, Ireland, June 2009 Augmented at ECRTS
[4] EAST_ADL2 – A TESST Project: EAST_ADL2 Specification, profile and Tools http://www.atesst.org
[5] AUTOSAR AUTomotive Open System Architecture.
http://www.autosar.org
[6] A TESST2 Project, FP7 STREP , ICT for Transport, EUCAR Integrated Safety Program, June 2008 to June 2010. http://www.atesst.org
[7] AUTOSAR Specification of Timing Extensions, 1.1.0, AUTOSAR Release 4.0.2, 2010-11-03, AUTOSAR Development Cooperation.
[8] OMG UML Profile for Modeling and Analysis of Real-time and Embedded Systems, MARTE V1.0. Object November 2009. OMG document number: formal/2009-11-02.
[9] OMG. Systems Modeling Language (SysML) Specification 1.1. Object Management Group, May 2008. OMG document number: ptc/08-05-17
[10] C. André. Syntax and semantics of the clock constraint specication language. Technical Report 6925, INRIA, 2009.
[11] IEEE P1850 - Standard for PSL - Property Specification Language Homepage http://www.vhdl.org/ieee-1850/, March 2011.
[12] TimeSquare Model Development Kit, http://www- sop.inria.fr/aoste/dev/timesquare/
[13] MAENADFP7Projecthttp://www.maenad.eu/

## R.G.8
UTOSAR Runtime Environment Test
Aug 2020, Ishfaque Ahmed
https://www.researchgate.net/profile/Ishfaque-Ahmed-4/publication/345942764_AUTOSAR_Runtime_Environment_Test/links/600c35fc45851553a065bfa6/AUTOSAR-Runtime-Environment-Test.pdf?


[1] AUTOSAR, G.: Autosar–technical overview v2.2.1 (2008). Accessed on 30.08.2020 16:53, Available: https://www.autosar.org/fileadmin/user_ upload/standards/classic/3-0/AUTOSAR_TechnicalOverview.pdf
[2] Jo, H.C., Piao, S., Cho, S.R., Jung, W.Y.: RTE Template Structure for AU- TOSAR based embedded Software Platform. In: 2008 IEEE/ASME Interna- tional Conference on Mechtronic and Embedded Systems and Applications. pp. 233–237 (2008)
[3] Kum, D., Park, G.M., Lee, S., Jung, W.: Autosar migration from existing au- tomotive software. In: 2008 International Conference on Control, Automation and Systems. pp. 558–562. IEEE (2008)
[4] Consortium, A., et al.: Autosar-layered software architecture. Tech. rep., AUTOSAR Consortium, Tech. Rep., 2008. Accessed on 30.08.2020 16:53, Available: https://www.autosar.org/fileadmin/user_upload/standards/ classic/4-3/AUTOSAR_EXP_LayeredSoftwareArchitecture.pdf
[5] Dafang, W., Shiqiang, L., Bo, H., Guifan, Z., Jiuyang, Z.: Communication mechanisms on the virtual functional bus of autosar. In: 2010 International Conference on Intelligent Computation Technology and Automation. vol. 1, pp. 982–985. IEEE (2010)
[6] De Bernardo, B.: Implementation of AUTOSAR Communication Stack Mod- ules. Ph.D. thesis, Politecnico di Torino (2019)
[7] Naumann, N.: Autosar runtime environment and virtual function bus. Hasso- Plattner-Institut, Tech. Rep 38 (2009)
[8] Warschofsky, R.: Autosar software architecture. Hasso-Plattner-Institute fu ̈r Softwaresystemtechnik: Potsdam, Germany (2009)
[9] ISO/IEC/IEEE: Systems and software engineering–vocabulary (2010)
[10] AUTOSAR, G.: Acceptance test specification of rte release 1.2.0 (2016). Accessed on 30.08.2020 16:53, Available: https://www.autosar.org/ fileadmin/user_upload/standards/tests/1-2/AUTOSAR_ATS_RTE.pdf
[11] Englisch, N., Hardt, W.: Entwicklungsunterstu ̈tzende analysen und tests fu ̈r autosar systeme. INFORMATIK 2017 (2017)
[12] Jacob, P.M., Prasanna, M.: A comparative analysis on black box testing strate- gies. In: 2016 International Conference on Information Science (ICIS). pp. 1–6. IEEE (2016)
[13] Nouman, M., Pervez, U., Hasan, O., Saghar, K.: Software testing: A survey and tutorial on white and black-box testing of c/c++ programs. In: 2016 ieee region 10 symposium (tensymp). pp. 225–230. IEEE (2016)
[14] Gilberg, A., Kunkel, B., Ribault, A., Robin, P., Spinner, N.: Conformance testing for the autosar standard (2010)
[15] Anderson, P.: Coding standards for high-confidence embedded systems. In: MILCOM 2008-2008 IEEE Military Communications Conference. pp. 1–7. IEEE (2008)
[16] Park, G., Ku, D., Lee, S., Won, W.J., Jung, W.: Test methods of the autosar application software components. In: 2009 ICCAS-SICE. pp. 2601–2606. IEEE (2009)
[17] Kappes, J.: Security Analysis of AUTOSAR-based Software Systems Using Symbolic Execution. Ph.D. thesis (2013)
[18] Navet, N., Simonot-Lion, F.: Automotive embedded systems handbook. CRC press (2017)
[19] Antipolis, S.: Autosar conformance testing using ttcn-3. In: TTCN- 3 User Conference 2009. June (2009). Accessed on 30.08.2020 16:53, Available: http://www.ttcn-3.org/TTCN3UC2009/PPT/Day%201/session% 201/GILBERT_AUTOSAR_CONFORMANCE_TESTING.pdf
[20] AUTOSAR, G.: Main requirements autosar release 4.2.1. Accessed on 30.08.2020 16:53, Available: https://www.autosar.org/fileadmin/user_ upload/standards/classic/4-2/AUTOSAR_RS_Main.pdf
[21] AUTOSAR, G.: Overview of acceptance tests release 1.2.0. Accessed on 30.08.2020 16:53, Available: https://www.autosar.org/fileadmin/user_ upload/standards/tests/1-2/AUTOSAR_EXP_AcceptanceTestsOverview. pdf

## R.G.9
ASFIT: AUTOSAR-Based Software Fault Injection Test for Vehicles, May 2020, Jihyun Park, Byoungju Choi
https://www.researchgate.net/publication/341560697_ASFIT_AUTOSAR-Based_Software_Fault_Injection_Test_for_Vehicles/fulltext/5ec7332192851c11a87da52a/ASFIT-AUTOSAR-Based-Software-Fault-Injection-Test-for-Vehicles.pdf?

1. Rana, R.; Staron, M.; Berger, C.; Hansson, J.; Nilsson, M.; Törner, F. Increasing Efficiency of ISO 26262 Verification and Validation by Combining Fault Injection and Mutation Testing with Model based Development. In Proceedings of the International Conference on Software Engineering and Applications, Reykjavik, Iceland, 29–31 July 2013.
2. ISO 26262–2011. Road vehicles-Functional Safety-Part 1–10. 2011. Available online: https://www.iso.org/stan dard/43464.html (accessed on 1 December 2017).
3. Hsueh, M.C.; Tsai, T.K.; Iyer, R.K. Fault injection techniques and tools. Computer 1997, 30, 75–82. [CrossRef]
4. Han, S.; Shin, K.G.; Rosenberg, H.A. Doctor: An integrated software fault injection environment for distributed real-time systems. In Proceedings of the 1995 IEEE International Computer Performance and
Dependability Symposium, Erlangen, Germany, 24–26 April 1995; pp. 204–213.
5. Fürst, S.; Mössinger, J.; Bunzel, S.; Weber, T.; Kirschke-Biller, F.; Heitkämper, P.; Kinkelin, G.; Nishikawa, K.; Lange, K. AUTOSAR—A Worldwide Standard is on the Road. In Proceedings of the 14th International VDI Congress Electronic Systems for Vehicles, Baden-Baden, Germany, 7–8 October 2009.
6. Meng, X.; Tan, Q.; Shao, Z.; Zhang, N.; Xu, J.; Zhang, H. SEInjector: A dynamic fault injection tool for soft errors on x86. In Proceedings of the 2017 International Conference on Computer Systems, Electronics and Control (ICCSEC), Dalian, China, 25–27 December 2017; pp. 1492–1495.
7. Skarin, D.; Barbosa, R.; Karlsson, J. GOOFI-2: A tool for experimental dependability assessment.
In Proceedings of the 2010 IEEE/IFIP International Conference on Dependable Systems & Networks
(DSN), Chicago, IL, USA, 28 June–1 July 2010; pp. 557–562.
8. Madeira, H.; Rela, M.; Moreira, F.; Silva, J.G. RIFLE: A general purpose pin-level fault injector. In Proceedings of the European Dependable Computing Conference, Berlin, Germany, 4–6 October 1994; pp. 197–216.
9. Jha, S.; Tsai, T.; Hari, S.; Sullivan, M.; Kalbarczyk, Z.; Keckler, S.W.; Iyer, R.K. Kayotee: A fault injection-based system to assess the safety and reliability of autonomous vehicles to faults and errors. arXiv Prepr 2019, arXiv:1907.01024.
10. Lanigan, P.E.; Narasimhan, P.; Fuhrman, T.E. Experiences with a CANoe-based fault injection framework
for AUTOSAR. In Proceedings of the 2010 IEEE/IFIP International Conference on Dependable Systems
& Networks (DSN), Chicago, IL, USA, 28 June–1 July 2010; pp. 569–574.
11. Duraes, J.; Madeira, H. Emulation of software faults: A field data study and a practical approach. IEEE Trans. Softw. Eng. 2006, 32, 849–867. 
12. Winter, S.; Piper, T.; Schwahn, O.; Natella, R.; Suri, N.; Cotroneo, D. GRINDER: On reusability of fault
injection tools. In Proceedings of the 2015 IEEE/ACM 10th International Workshop on Automation of Software Test, Florence, Italy, 23–24 May 2015; pp. 75–79.
13. Islam, M.M.; Karunakaran, N.M.; Haraldsson, J.; Bernin, F.; Karlsson, J. Binary-Level Fault Injection for AUTOSAR Systems (Short Paper). In Proceedings of the 2014 Tenth European Dependable Computing
Conference, Newcastle, UK, 13–16 May 2014; pp. 138–141.
14. Barr, M. Bookout vs. Toyota: 2005 Camry L4 Software Analysis. District Court of Oklahoma County. 2013.
Available online: http://www.safetyresearch.net/Library/BarrSlides_final_scrubbed.pdf,consultadoel,10 (accessed on 28 April 2020).
15. Agrawal, H.; DeMillo, R.A.; Hathaway, B.; Hsu, W.; Hsu, W.; Krauser, E.W.; Martin, R.J.; Mathur, A.P.;
Spaord, E. Design of Mutant Operators for C Programming Language; Technical Report SERC-TR-41-P, SERC; Purdue University: West Lafayette, IN, USA, 1989.
16. Delamaro, M.E.; Maidonado, J.C.; Mathur, A.P. Interface mutation: An approach for integration testing. IEEE Trans. Softw. Eng. 2001, 27, 228–247. [CrossRef]
17. Ghosh, S.; Mathur, A.P. Interface mutation. Softw. Test. Verif. Reliab. 2001, 11, 227–247. [CrossRef]
18. AUTOSAR. “Explanation of Error Handling on Application Level,” AUTOSAR, Munich. 2009. Available
online: https://www.autosar.org/fileadmin/user_upload/standards/classic/4-0/AUTOSAR_EXP_ApplicationLevelErrorHandling.pdf (accessed on 28 April 2020).
19. MDS Technology. Trace32 Debugger. Available online: http://www.mdstec.com/ (accessed on 28 April 2020).
Electronics 2020, 9, 0850 21 of 21
20. Green Hills Software. GreenHills Debug Probes. Available online: http://www.ghs.com/ (accessed on 28 April 2020).
21. Metrowerks. CodeWarrior IDE. Available online: http://www.nxp.com/ (accessed on 28 April 2020).

##R.G.10
 Achieving Determinism in Adaptive AUTOSAR
Mar 20202020 Design, Automation & Test in Europe Conference & Exhibition (DATE)
Christian Menard, Andrés Goens[object Object]Marten Lohstroh, Jerónimo Castrillón
https://www.researchgate.net/profile/Christian-Menard/publication/342189862_Achieving_Determinism_in_Adaptive_AUTOSAR/links/5f8d80e8a6fdccfd7b6c178d/Achieving-Determinism-in-Adaptive-AUTOSAR.pdf?

[1] E. A. Lee, “The problem with threads,” Computer, vol. 39, no. 5, pp. 33–42, May 2006.
[2] N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud, “The synchronous data flow programming language LUSTRE,” Proceedings of the IEEE, vol. 79, no. 9, pp. 1305–1320, 1991.
[3] G. Berry and G. Gonthier, “The Esterel synchronous programming language: Design, semantics, implementation,” Science of computer programming, vol. 19, no. 2, pp. 87–152, 1992.
[4] G. Berry, “SCADE: Synchronous design and validation of embedded control software,” in Next Generation Design and Verification Method- ologies for Distributed Embedded Control Systems, S. Ramesh and P. Sampath, Eds., Dordrecht: Springer Netherlands, 2007, pp. 19–33.
[5] J.-L. Boulanger, F.-X. Fornari, J.-L. Camus, and B. Dion, SCADE: Language and applications, 1st. Wiley-IEEE Press, 2015.
[6] C. M. Kirsch and A. Sokolova, “The logical execution time paradigm,” in Advances in Real-Time Systems, S. Chakraborty and J. Eberspcher, Eds. Berlin, Heidelberg: Springer Berlin Heidelberg, 2012, pp. 103–120.
[7] AUTOSAR, “Specification of timing extensions,” AUTOSAR CP Release 4.4.0, Oct. 2018.
[8] A. Biondi and M. Di Natale, “Achieving predictable multicore execution of automotive applications using the LET paradigm,” in 2018 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS), Apr. 2018, pp. 240–250.
[9] AUTOSAR, “Specification of communication management,” AUTOSAR AP Release 19-03, Mar. 2019.
[10] M. Lohstroh, M. Schoeberl, A. Goens, et al., “Actors revisited for time- critical systems,” in Proceedings of the 56th Annual Design Automation Conference 2019, ser. DAC ’19, Las Vegas, NV, USA: ACM, 2019, 152:1–152:4.
[11] AUTOSAR, “SOME/IP protocol specification,” AUTOSAR FO Release 1.5.0, Oct. 2018.
[12] ——, “SOME/IP service discovery protocol specification,” AUTOSAR FO Release 1.5.0, Oct. 2018.
[13] R. Gu, G. Jin, L. Song, L. Zhu, and S. Lu, “What change history tells us about thread synchronization,” in Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering, ser. ESEC/FSE 2015, Bergamo, Italy: ACM, 2015, pp. 426–438.
[14] AUTOSAR, “Specification of execution management,” AUTOSAR AP Release 19-03, Mar. 2019.
[15] C. Hewitt, “Viewing control structures as patterns of passing messages,” Artificial intelligence, vol. 8, no. 3, pp. 323–364, 1977.
[16] G. A. Agha, “Actors: A model of concurrent computation in distributed systems,” MIT Artificial Intelligence Lab, Tech. Rep., 1985.
[17] M. Lohstroh and E. A. Lee, “Deterministic actors,” in 2019 Forum on Specification and Design Languages (FDL), IEEE, 2019.
[18] M. Lohstroh,. ncer Romeo, A. Goens, et al., “Reactors: A deterministic model for composable reactive systems,” in Model-Based Design of Cyber Physical Systems (CyPhy’19), 2019, To appear.
[19] Y. Zhao, J. Liu, and E. A. Lee, “A programming model for time- synchronized distributed real-time systems,” in 13th IEEE Real Time and Embedded Technology and Applications Symposium (RTAS’07), Apr. 2007, pp. 259–268.
[20] P. Derler, T. H. Feng, E. A. Lee, et al., “PTIDES: A programming model for distributed real-time embedded systems,” EECS Department, University of California, Berkeley, Tech. Rep., May 2008.
[21] AUTOSAR, “Specification of time synchronization for adaptive plat- form,” AUTOSAR AP Release 19-03, Mar. 2019.
[22] R. Ernst, L. Khler, and K.-B. Gemlau, “System level LET: Mastering cause-effect chains in distributed systems,” in 44th Annual Conference of the IEEE Industrial Electronics Society (IECON), Oct. 2018.

## R.G.10
Time and memory tradeoffs in the implementation of AUTOSAR components
Apr 2009 Design, Automation and Test in Europe, DATE 2009, Nice, France, April 20-24, 2009
, Alberto Ferrari, Marco Di Natale, Giacomo Gentile, Paolo Gai
https://www.researchgate.net/profile/Paolo-Gai/publication/221339751_Time_and_memory_tradeoffs_in_the_implementation_of_AUTOSAR_components/links/0912f5108d36b185f0000000/Time-and-memory-tradeoffs-in-the-implementation-of-AUTOSAR-components.pdf?

[1] M. G. Harbour, M. Klein, and J. Lehoczky, “Timing analysis for fixed-priority scheduling of hard real-time systems,” IEEE Transactions on Software Engineering, vol. 20, no. 1, January 1994.
[2] Baleani, M., Ferrari, A., Mangeruca, L., and Vincentelli, A. S. 2005. Efficient embedded software design with synchronous models. In Proceedings of the 5th ACM EMSOFT conference.
[3]M. Di Natale, G. Wang and A. Sangiovanni-Vincentelli, Op- timizing the Implementation of Communication in Synchronous Reactive Models, In IEEE Real Time Applications Symposium, St Louis, April 2008
[4] OSEK. Osek os version 2.2.3 specification. available at http://www.osek-vdx.org, 2006.
[5] W. Nesci and S. Angellotti. AUTOSAR: A Global Standard - Magneti Marelli System and Application development with AUTOSAR. 1st AUTOSAR Open Conference, Detroit, October 23th , 2008.
[6] Mathworks. The Mathworks Simulink and StateFlow User’s Manuals. Mathworks. web page: http://www.mathworks.com.
[7] N. Scaife and P. Caspi. Integrating model-based design and pre- emptive scheduling in mixed time- and event-triggered systems. In 6th Euromicro ECRTS, July 2004.
[8] Tripakis, S., Sofronis, C., Scaife, N., and Caspi, P. 2005. Semantics-preserving and memory-efficient implementation of inter-task communication on static-priority or edf schedulers. Proceedings of the 5th ACM EMSOFT conference.
[9] Marco Di Natale and Valerio Pappalardo. Optimizing the multitask implementation of multirate Simulink modelss. ACM Transactions on Embedded Systems.
[10] S. Boyd and L. Vandenberghe. Convex optimization. Available at http://www.stanford.edu/b ̃oyd/cvxbook/, 2004.

## R.G.11
iming Simulation of Interconnected AUTOSAR Software-Components, Apr 20072007 Design, Automation and Test in Europe Conference and Exposition (DATE 2007), April 16-20, 2007, Nice, France, Matthias Krause, Oliver BringmannA. Hergenhan, Wolfgang Rosenstiel
https://www.researchgate.net/profile/Oliver-Bringmann/publication/221341720_Timing_Simulation_of_Interconnected_AUTOSAR_Software-Components/links/0a85e5342be9211a6a000000/Timing-Simulation-of-Interconnected-AUTOSAR-Software-Components.pdf?

[1] AUTOSAR: http://www.autosar.org
[2] M. Baumeister, P. Fuhrmann, F. Armbruster: Taking Concept
Models from Standardization to Silicon; In FlexRay Special
Edition, Hanser Automotive Electronics + Systems, 2005.
[3] R. Bergamaschi: Transaction-Level Models for PowerPC and CoreConnect; 11th European SystemC Users Group Meeting,
Munich, 2005.
[4] A. Donlin: Transaction Level Modeling: Flows and Use
Models; Proceedings of the 2nd IEEE/ACM/IFIP international conference on hardware/software codesign and system synthesis, Stockholm, 2004.
[5] A. Donlin, A. Braun, A. Rose: SystemC for Design and Modeling of Programmable Systems; In Proc. of International Forum on Specification and Design Languages, Lille, 2004.
[6] FlexRay: http://www.flexray.com/
[7] T. Grötker, S. Liao, G. Martin, S. Swan: System Design with
SystemC; Kluwer, 2002.
[8] H. Heinecke, et al.: AUTOSAR - Current results and
preparations for exploitation; 7th EUROFORUM conference
„Software in the vehicle“ Stuttgart, 2006.
[9] H. Heinecke, et al.: AUTomotive Open System ARchitecture -
An Industry-Wide Initiative to Manage the Complexity of Emerging Automotive E/E-Architectures; Convergence 2004, Detroit, 2004.
[10] J. N. Ip, S. Swan: A Tutorial Introduction on the New SystemC Verification Standard; OSCI SCV Working Group, 2003.
[11] M. Krause, O. Bringmann, W. Rosenstiel: A SystemC-based
Software and Communication Refinement Framework for Distributed Embedded Systems; Proceedings of the 13th Workshop on Synthesis And System Integration of Mixed Information Technologies, Nagoya, 2006.
[12] M. Krause, O. Bringmann, W. Rosenstiel: Target Software Generation: An Approach for Automatic Mapping of SystemC Specifications onto Real-Time Operating Systems; Design Automation for Embedded Systems, Volume 10, Issue 4, Springer, 2007.
[13] MATLAB/Simulink: http://www.mathworks.com/
[14] M. Pagel, M. Brörkens: Definition and Generation of Data Exchange Formats in AUTOSAR; Proceedings of the Second
European Conference ECMDA-FA 2006.
[15] P. Pop, P. Eles, Z. Peng: Analysis and Synthesis of Distributed
Real-Time Embedded Systems; Kluwer Academic Publishers,
Boston, 2004.
[16] A. Rose, S. Swan, J. Pierce, J.-M. Fernandez: Transaction
Level Modeling in SystemC; OSCI TLM Working Group, 2005. [17] T. Scharnhorst, et al.: AUTOSAR - Challenges and Achievements 2005; Electronic Systems for Vehicles 2005,
VDI Congress, Baden-Baden, 2005.
[18] A. Siebenborn, O. Bringmann, W. Rosenstiel: Communication
Analysis for System on Chip Design; Proc. of the Design
Automation and Test in Europe Conference 2004, Paris, 2004. [19] A. Siebenborn, O. Bringmann, W. Rosenstiel: Worst-Case Performance Analysis of Parallel, Communicating Software Processes; Proceedings of the Tenth International Symposium
on Hardware/Software Codesign 2002, USA, 2002.
[20] SPIRIT Schema Working Group Membership, IP-XACT Users
Guide Version 1.4, 2005.
[21] SystemC: http://www.systemc.org
[22] UML Profile for AUTOSAR Version 1.0.1; AUTOSAR, 2006. [23] A. Viehl, O. Bringmann, W. Rosenstiel, T. Schönwald: Formal
Performance Analysis and Simulation of UML/SysML Models for ESL Design; Proceedings of the Design, Automation and Test in Europe Conference, Munich, 2006.

## R.G.12
Publication Preview
Source
Power-aware Allocation of Fault-tolerant Multi-rate AUTOSAR Applications
Dec 201825th Asia-Pacific Software Engineering 2018
[object Object]Nesredin Mahmud[object Object]Guillermo Rodriguez-Navas[object Object]Hamid Reza Faragardi[...][object Object]Cristina Cerschi Seceleanu
https://www.researchgate.net/profile/Nesredin-Mahmud/publication/327601692_Power-aware_Allocation_of_Fault-tolerant_Multi-rate_AUTOSAR_Applications/links/5bd1ec1f4585150b2b87523d/Power-aware-Allocation-of-Fault-tolerant-Multi-rate-AUTOSAR-Applications.pdf?

[1] W. Wolf, “A Decade of Hardware/ Software Codesign,” Computer, vol. 36, no. 4, pp. 38–43, 4 2003.
[2] A.Sangiovanni-Vincentelli,L.Carloni,F.DeBernardinis,andM.Sgroi, “Benefits and Challenges for Platform-based Design,” in Proceedings of the 41st annual conference on Design automation - DAC ’04. New York, USA: ACM Press, 2004, p. 409.
[3] B. Kienhuis, E. F. Deprettere, P. van der Wolf, and K. Vissers, “A Methodology to Design Programmable Embedded Systems,” in Embed- ded Processor Design Challenges: Systems, Architectures, Modeling, and Simulation — SAMOS. Berlin, Heidelberg: Springer Berlin Heidelberg, 2002, pp. 18–37.
[4] D. Ferna ́ndez-Baca, “Allocating Modules to Processors in a Distributed System,” IEEE Transactions on Software Engineering, vol. 15, no. 11, pp. 1427–1436, 11 1989.
[5] S. E. Saidi, S. Cotard, K. Chaaban, and K. Marteil, “An ILP Approach for Mapping AUTOSAR Runnables on Multi-core Architectures,” in Proceedings of the 2015 Workshop on Rapid Simulation and Perfor- mance Evaluation Methods and Tools - RAPIDO ’15. New York, USA: ACM Press, 2015, pp. 1–8.
[6] H. R. faragardi, B. Lisper, K. Sandstro ̈m, and T. Nolte, “A Resource Efficient Framework to Run Automotive Embedded Software on Multi- core ECUs,” Journal of Systems and Software, vol. 139, pp. 64–83, 2018.
[7] A.Bucaioni,L.Addazi,A.Cicchetti,F.Ciccozzi,R.Eramo,S.Mubeen, and M. Sjodin, “MoVES: A Model-driven Methodology for Vehicular Embedded Systems,” IEEE Access, vol. 6, pp. 6424–6445, 2018.
[8] H. Bradley, Applied Mathematical Programming. Addison-Wesley, 1977.
[9] E. Wozniak, A. Mehiaoui, C. Mraidha, S. Tucci-Piergiovanni, and S. Gerard, “An Optimization Approach for the Synthesis of AUTOSAR Architectures,” in IEEE International Conference on Emerging Tech- nologies and Factory Automation, ETFA, 2013.
[10] J. Fernandez, C. Galindo, and I. Garc ́ıa, System Engineering and Automation An Interactive Educational Approach, 2014.
[11] H. Kopetz, A. Damm, C. Koza, M. Mulazzani, W. Schwabl, C. Senft, and R. Zainlinger, “Distributed Fault-tolerant Real-Time Systems: the Mars Approach,” IEEE Micro, vol. 9, no. 1, pp. 25–40, 2 1989.
[12] L. Vinet and A. Zhedanov, “A ”Missing” Family of Classical Orthogonal Polynomials,” Computers as Components, p. 528, 11 2010. [Online]. Available: http://arxiv.org/abs/1011.1669http://dx.doi.org/10. 1088/1751- 8113/44/8/085201
[13] S. Mubeen, J. Ma ̈ki-Turja, and M. Sjo ̈din, “Support for End-to-end Response-time and Delay Analysis in the Industrial Tool Suite: Issues, Experiences and A Case Study,” Computer Science and Information Systems, vol. 10, no. 1, pp. 453–482, 2013.
[14] S. Kramer, D. Ziegenbein, and A. Hamann, “Real World Automotive Benchmarks for Free,” in 6th International Workshop on Analysis Tools and Methodologies for Embedded and Real-time Systems (WATERS), 2015.
[15] I. Sˇvogor, I. Crnkovic, and N. Vrcek, “An Extended Model for Multi- Criteria Software Component Allocation on a Heterogeneous Embedded Platform,” Journal of computing and information technology, vol. 21, no. 4, pp. 211–222, 2014.
[16] N. Naumann, “AUTOSAR Runtime Environment and Virtual Function Bus,” Hasso-Plattner-Institut, Tech. Rep.
[17] AUTOSAR, “Specification of Timing Extensions,” AUTOSAR, Tech. Rep., 2017. [Online]. Available: https://www.autosar.org/fileadmin/user upload/standards/classic/4-3/AUTOSAR TPS TimingExtensions.pdf
[18] S. d. C. Kung-Kiu Lau, What are Software Components? World Sci- entific Publishing Company (June 29, 2017), 2017. [Online]. Available: https://www.worldscientific.com/doi/abs/10.1142/9789813221888 0002
[19] I. Crnkovic, M. Larsson, and I. Ebrary, “Building Reliable Component- based Software Systems,” pp. xxxvii, 413 p., 2002.
[20] D. Schreiner and K. M. Go ̈schka, “A Component Model for the AU- TOSAR Virtual Function Bus,” in Proceedings - International Computer Software and Applications Conference, vol. 2, 2007, pp. 635–641.
[21] AUTOSAR, “Specification of RTE Software,” AUTOSAR, Tech. Rep., 2017. [Online]. Available: https://www.autosar.org/fileadmin/ user upload/standards/classic/4-3/AUTOSAR SWS RTE.pdf
[22] E. Dubrova, Fault-Tolerant Design. New York, NY: Springer New York, 2013. [Online]. Available: http://link.springer.com/10.1007/ 978- 1- 4614- 2113- 9
[23] F. Najm, “A Survey of Power Estimation Techniques in VLSI Circuits,” IEEE Transactions on Very Large Scale Integration (VLSI) Systems, vol. 2, no. 4, pp. 446–455, 1994.
[24] F. N. Najm, “Power Estimation Techniques for Integrated Circuits,” in
Computer-Aided Design, 1995. ICCAD-95. Digest of Technical Papers.,
1995 IEEE/ACM International Conference on, 1995, pp. 492–499. [25] G. Contreras and M. Martonosi, “Power Prediction for Intel XScale Processors using Performance Monitoring Unit Events,” ISLPED ’05. Proceedings of the 2005 International Symposium on Low Power Elec-
tronics and Design, 2005., pp. 221–226, 2005.
[26] X. Fan, W.-D. Weber, and L. A. Barroso, “Power Provisioning for a
Warehouse-sized Computer,” ACM SIGARCH Computer Architecture
News, vol. 35, no. 2, p. 13, 2007.
[27] M. R. Guthaus, J. S. Ringenberg, D. Ernst, T. M. Austin, T. Mudge,
and R. B. Brown, “MiBench: A Free, Commercially Representative Embedded Bbenchmark Suite,” in 2001 IEEE International Workshop on Workload Characterization, WWC 2001, 2001, pp. 3–14.
[28] EMBC, “AutoBench 2.0 - Performance Suite for Multicore Automotive Processors,” p. 1, 2018.
[29] A. Goel, “Software Reliability Models: Assumptions, Limitations, and Applicability,” IEEE Transactions on Software Engineering, vol. SE-11, no. 12, pp. 1411–1423, 12 1985.
[30] C.LucetandJ.-F.Manouvrier,“ExactMethodstoComputeNetworkRe- liability,” in Statistical and Probabilistic Models in Reliability. Boston, MA: Birkha ̈user Boston, 1999, pp. 279–294.
[31] S. M. Shatz, J.-P. Wang, and M. Goto, “Task Allocation for Maximizing Reliability of Distributed Computer Systems,” IEEE Transactions on Computers, vol. 41, no. 9, pp. 1156–1168, 1992.
[32] S. Kartik and C. S. R. Murthy, “Task Allocation Algorithms for Max- imizing Reliability of Distributed Computing Systems,” IEEE Transac- tions on computers, vol. 46, no. 6, pp. 719–724, 1997.
[33] P.-Y. Yin, S.-S. Yu, P.-P. Wang, and Y.-T. Wang, “Task Allocation for Maximizing Reliability of a Distributed System using Hybrid Particle Swarm Optimization,” Journal of Systems and Software, vol. 80, no. 5, pp. 724–735, 2007.
[34] L. Zhang, K. Li, Y. Xu, J. Mei, F. Zhang, and K. Li, “Maximizing Reliability with Energy Conservation for Parallel Task Scheduling in a Heterogeneous Cluster,” Information Sciences, vol. 319, pp. 113–131, 2015.
[35] H. R. Faragardi, R. Shojaee, M. A. Keshtkar, and H. Tabani, “Optimal Task Allocation for Maximizing Reliability in Distributed Real-time Systems,” in Computer and Information Science (ICIS), 2013 IEEE/ACIS 12th International Conference On. IEEE, 2013, pp. 513–519.
[36] I.Assayad,A.Girault,andH.Kalla,“ABi-criteriaSchedulingHeuristic for Distributed Embedded Systems under Reliability and Real-time Constraints,” in Dependable Systems and Networks, 2004 International Conference on. IEEE, 2004, pp. 347–356.
[37] M.Bambagini,M.Marinoni,H.Aydin,andG.Buttazzo,“Energy-aware Scheduling for Real-time Systems: A survey,” ACM Transactions on Embedded Computing Systems (TECS), vol. 15, no. 1, p. 7, 2016.
[38] V. Devadas and H. Aydin, “On the Interplay of Voltage/Frequency Scaling and Device Power Management for Frame-based Real-time Embedded Applications,” IEEE Transactions on Computers, vol. 61, no. 1, pp. 31–44, 2012.
[39] X. Wang, I. Khemaissia, M. Khalgui, Z. Li, O. Mosbahi, and M. Zhou, “Dynamic Low-power Reconfiguration of Real-time Systems with Peri- odic and Probabilistic Tasks,” IEEE Transactions on Automation Science and Engineering, vol. 12, no. 1, pp. 258–271, 2015.
[40] H. R. Faragardi, A. Rajabi, R. Shojaee, and T. Nolte, “Towards Energy- aware Resource Scheduling to Maximize Reliability in Cloud Computing Systems,” in High Performance Computing and Communications & 2013 IEEE International Conference on Embedded and Ubiquitous Computing (HPCC EUC), 2013 IEEE 10th International Conference on. IEEE, 2013, pp. 1469–1479.
[41] S. Islam, R. Lindstrom, and N. Suri, “Dependability Driven Integration of Mixed Criticality SW Components,” in Object and Component- Oriented Real-Time Distributed Computing, 2006. ISORC 2006. Ninth IEEE International Symposium on. IEEE, 2006, pp. 11–pp.
[42] J. Kim, G. Bhatia, R. R. Rajkumar, and M. Jochim, “An Autosar- compliant Automotive Platform for Mmeeting Reliability and Timing Constraints,” SAE Technical Paper, Tech. Rep., 2011.
[43] S. Wang, J. R. Merrick, and K. G. Shin, “Component Allocation with Multiple Resource Constraints for Large Embedded Real-time Software Design,” in IEEE 10th Real-Time and Embedded Technology and Applications Symposium, 2004. IEEE, 2004, pp. 219–226.

## R.G.13
Publication Preview
Source
Timing Modeling with AUTOSAR - Current state and future directions, Mar 2012
[object Object]Marie-Agnès Peraldi-Frati[object Object]Hans Blom[object Object]Daniel Karlsson[object Object]Stefan Kuntz

[1] AUTOSAR Development Cooperation. http://www.autosar.org
[2] AUTOSAR Specification of Timing Extensions, 1.1.0, AUTOSAR Release 4.0.2, 2010-11-03, AUTOSAR Development Cooperation.
[3] Sorin Manolache, Petru Eles, Zebo Peng, Schedulability analysis of real- time systems with stochastic task execution times, Journal ACM Transactions on Embedded Computing Systems (TECS), Volume 3 Issue 4, November 2004, 2002
[4] Modelica, Modelica Homepage, https://www.modelica.org/, March 2011
[5] Simulink, http://www.mathworks.de/products/simulink/index.html
[6] OMG. Systems Modeling Language (SysML) Specification 1.1. Object Management Group, May 2008. OMG document number: ptc/08-05-17
[7] AADL, http://www.aadl.info/aadl/currentsite/start/index.html
[8] OMG UML Profile for Modeling and Analysis of Real-time and Embedded Systems, MARTE V1.0. Object November 2009. OMG document number: formal/2009-11-02.
[9] TimeSquare Model Development Kit, INRIA, http://www- sop.inria.fr/aoste/dev/timesquare/
[10] C.L. Liu and J.W. Layland, Scheduling Algorithms for Multiprogramming in a Hard Real-Time Environment, Journal of the ACM, Vol. 20, No. 1, pp. 46-61, January 1973
[11] Reinhard Wilhelm, Jakob Engblom, Andreas Ermedahl, Niklas Holsti, Stephan Thesing, David Whalley, Guillem Bernat, Christian Ferdinand, Reinhold Heckmann, Tulika Mitra, Frank Mueller, Isabelle Puaut, Peter Puschner, Jan Staschulat, and Per Stenström. The worst-case execution time problem - overview of methods and survey of tools. Transactions on Embedded Computing Systems, 7(3):1-53, 2008
[12] Artemis PRESTO project, http://www.presto-embedded.eu/
[13] J DeAntoni, F. Mallet, F.Thomas. G Reydet, J-P Babau, Ci Mraidha, L Gauthier, L Rioux, N Sordon. RT-Simex: Retro-Analysis of Execution Traces, 18th symposium on the Foundation of Software Engineering (FSE), Santa Fe, USA, November 2010
[14] Artop,AUTOSARToolPlatform,http://www.artop.org
[15] TOPCASED The Open-Source Toolkit for Critcal Systems, http://www.topcased.org
[16] Eclipse Automotive Industrial Working Group, http://wiki.eclipse.org/Auto_IWG

## R.G.14
Modeling and Development of AUTOSAR Software Components
Jun 2019 IEEE 23rd International Symposium on Consumer Technologies (ISCT), [object Object]Valentin T. Popovic[object Object]Marko VulićAleksandra Davidovic[object Object]Ivan Kastelan
https://www.researchgate.net/profile/Valentin-Popovic/publication/337522292_Modeling_and_Development_of_AUTOSAR_Software_Components/links/5edf8dc0299bf1d20bdb4b91/Modeling-and-Development-of-AUTOSAR-Software-Components.pdf?

[1] Shigeru Kuroyanagi, Toyota. Quote on https://www.autosar.org/. 2019.
[2] Robert Warschofsky, AUTOSAR Software Architecture, Hasso- Plattner-Institute for Softwaresystemtechnik, https://hpi.de/fileadmin/user_upload/fachgebiete/giese/Ausarbeitungen_ AUTOSAR0809/Software_Architecture_Warschofsky.pdf . 2009.
[3] AUTOSAR GbR: Software Component Template, https://www.autosar.org/fileadmin/user_upload/standards/classic/4- 3/AUTOSAR_TPS_SoftwareComponentTemplate.pdf . Release 4.3.1, 2017.
[4] Dietmar Schreiner and Karl M. Goschka: “A Component Model for the AUTOSAR Virtual Function Bus”, 31st Annual International Computer Software and Applications Conference (COMPSAC), 2007, pp. 635-641
[5] AUTOSAR GbR: Virtual Functional Bus, https://www.autosar.org/fileadmin/user_upload/standards/classic/4- 3/AUTOSAR_EXP_VFB.pdf . Release 4.3.1, 2017.
[6] AUTOSAR GbR: Technical Overview, https://www.autosar.org/fileadmin/user_upload/standards/classic/3- 2/AUTOSAR_TechnicalOverview.pdf . Release 3.2, 2011.
[7] AUTOSAR GbR: Specification of RTE, https://www.AUTOSAR.org/fileadmin/user_upload/standards/classic/4- 4/AUTOSAR_SWS_RTE.pdf . Release 4.4, 2018.
[8] AUTOSAR GbR: Methodology, https://www.autosar.org/fileadmin/user_upload/standards/classic/4- 3/AUTOSAR_TR_Methodology.pdf . Release 4.3.1, 2017.

## R.G.15
Efficient mapping of runnables to tasks for embedded AUTOSAR applications, May 2020
[object Object]Fouad Khenfri[object Object]Khaled Chaaban[object Object]Maryline Chetto
https://www.researchgate.net/profile/Khaled-Chaaban/publication/341771017_Efficient_mapping_of_runnables_to_tasks_for_embedded_AUTOSAR_applications/links/6019d5a1a6fdcc37a8fc1802/Efficient-mapping-of-runnables-to-tasks-for-embedded-AUTOSAR-applications.pdf?

[1] Autosar consortium web page. http://www.autosar.org. accessed: 03/12/2015.
[2] Specification of rte autosar release 4.2.2. http://www.autosar. org/fileadmin/files/releases/4- 2/software- architecture/rte/standard/ AUTOSAR/ SWS/ RTE.pdf. accessed: 03/12/2015.
[3] Antoine Bertout, Julien Forget, and Richard Olejnik. A heuristic to minimize the cardinality of a real-time task set by automated task clustering. In Proceedings of the 29th Annual ACM Symposium on Applied Computing, SAC ’14, pages 1431–1436, New York, NY, USA, 2014. ACM.
[4] Enrico Bini and Giorgio C Buttazzo. Measuring the performance of schedulability tests. Real-Time Systems, 30(1-2):129–154, 2005.
[5] Priyanshi Gupta, N. P. Singh, and Geetha Srinivasan. An efficient approach for mapping autosar runnables in multi-core automotive sys- tems to minimize communication cost. 2019 Innovations in Power and Advanced Computing Technologies (i-PACT), 1:1–4, 2019.
[6] Zeng Haibo, M. Di Natale, and Zhu Qi. Optimizing stack memory requirements for real-time embedded applications. In Emerging Tech- nologies and Factory Automation (ETFA), 2012 IEEE 17th Conference on, pages 1–8, 2012.
[7] F.Khenfri,K.Chaaban,andC.Maryline.Anovelheuristicalgorithmfor mapping autosar runnables to tasks. In Pervasive and Embedded Com- puting and Communication Systems (PECCS), 2015 5th International Conference on, pages 239–246, 2015.
[8] Kyung-Jung Lee, Jae-Woo Kim, H. Chang, and Hyun-Sik Ahn. Mixed harmonic runnable scheduling for automotive software on multi-core processors. International Journal of Automotive Technology, 19:323– 330, 04 2018.
[9] C. L. Liu and James W. Layland. Scheduling algorithms for multipro- gramming in a hard-real-time environment. J. ACM, 20(1):46–61, jan 1973.
[10] Zhang Ming and Gu Zonghua. Optimization issues in mapping autosar components to distributed multithreaded implementations. In Rapid System Prototyping (RSP), 2011 22nd IEEE International Symposium on, pages 23–29, 2011.
[11] A. K. Mok and D. Chen. A multiframe model for real-time tasks. IEEE Transactions on Software Engineering, 23(10):635–645, Oct 1997.
[12] A. Monot, N. Navet, B. Bavoux, and F. Simonot-Lion. Multisource
software on multicore automotive ecus combining runnable sequencing with task scheduling. Industrial Electronics, IEEE Transactions on, 59(10):3934–3942, 2012.
[13] Long Rongshen, Li Hong, Peng Wei, Zhang Yi, and Zhao Minde. An approach to optimize intra-ecu communication based on mapping of autosar runnable entities. In Embedded Software and Systems, 2009 ICESS ’09 International Conference on, pages 138–143, 2009.
[14] E. Wozniak, A. Mehiaoui, C. Mraidha, S. Tucci-Piergiovanni, and S. Gerard. An optimization approach for the synthesis of autosar ar- chitectures. In Emerging Technologies and Factory Automation (ETFA), 2013 IEEE 18th Conference on, pages 1–10, 2013.
[15] Haibo Zeng and M. Di Natale. Efficient implementation of autosar components with minimal memory usage. In Industrial Embedded Systems (SIES), 2012 7th IEEE International Symposium on, pages 130– 137, June 2012.
[16] Qingling Zhao, Zonghua Gu, and Haibo Zeng. Design optimization for autosar models with preemption thresholds and mixed-criticality scheduling. Journal of Systems Architecture, 72:61 – 68, 2017. Design Automation for Embedded Ubiquitous Computing Systems.

##R.G.16
Source Development of TCU Diagnostic System in Application Software Based on AUTOSAR, Jun 2020, Feng LuoXiaoying Fang
https://www.researchgate.net/publication/342331444_Development_of_TCU_Diagnostic_System_in_Application_Software_Based_on_AUTOSAR/fulltext/5ef323e392851cba7a46305b/Development-of-TCU-Diagnostic-System-in-Application-Software-Based-on-AUTOSAR.pdf?

[1] Oliver S. (2015) AUTOSAR Compendium Part1 Application & RTE. Createspace Independent Publishing Platform, Charleston.
[2] AUTOSAR Development Partnership, 2011. Layered Software Architecture V3.2.0. http:// www.autosar.org.
[3] AUTOSAR Development Partnership, 2011. Requirements on Diagnostic V2.4.0. http:// www.autosar.org.
[4] AUTOSAR Development Partnership, 2011. Specification of Diagnostic Event Manager V4.2.0. http://www.autosar.org.
[5] AUTOSAR Development Partnership, 2011. Specification of Function Inhibition Manager V2.2.0. http://www.autosar.org.

## R.G.TITLE
Practical Considerations for MISRA and AUTOSAR Coding Compliance
Apr 2021
Dennis Kengo OkaRalf Huuck

Model-Based Timing Analysis of Automotive Use Case Developed in UML
Feb 2021Evaluation of Novel Approaches to Software Engineering
Padma IyengharLars HuningElke Pulvermueller

Timing Modeling and Analysis for AUTOSAR Schedule Tables
Jan 20192019 IEEE 19th International Symposium on High Assurance Systems Engineering (HASE)
Rongkun YanJian Guo

AUTOSAR and MISRA Coding Standards
Chapter
Apr 2021Automotive Embedded Systems, Key Technologies, Innovations, and Applications
Y. Catherine YamiliM. Kathiresh

Consistency Analysis of AUTOSAR Timing Requirements
Conference Paper
Jan 202015th International Conference on Software Technologies
Steffen BeringerHeike Wehrheim


Dec 2006Leveraging Applications of Formal Methods, Verification and Validation, 2006. ISoLA 2006. Second International Symposium on
Kai Richter

Feb 2021Embedded Software Timing
Peter Gliwa

Verification of AUTOSAR Software Architectures with Timed Automata
Sep 2016International Workshop on Formal Methods for Industrial Critical Systems International Workshop on Automated Verification of Critical Systems, Steffen BeringerHeike Wehrheim

# citeseerx
http://citeseerx.ist.psu.edu/search?q=AUTOSAR+timing+protection&submit.x=0&submit.y=0&submit=Search&sort=rlv&t=doc

## 1 
Deadline Analysis of AUTOSAR OS Periodic Tasks in the Presence of Interrupts
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.915.5634&rep=rep1&type=pdf

1. AUTOSAR. Specification of Operating System V3.1.1 R3.1 Rev 0002. 2012. http://www.autosar.org/. [Last accessed: 1 July 2013]
16 Yanhong Huang et al.
2. OSEK/VDX. http://www.osek-vdx.org/. [Last accessed: 1 July 2013]
3. Arctic Core — the open-source AUTOSAR embedded platform.
http://www.arccore.com/. [Last accessed: 1 July 2013]
4. R. Wilhelm, J. Engblom, A. Ermedahl, N. Holsti, S. Thesing, D. Whalley, G.Bernat, C. Ferdinand, R. Heckmann, T. Mitra, F. Mueller, I. Puaut, P. Puschner, J. Staschulat and P. Stenstro ̈m. The worst-case execution-time problem—overview of methods and survey of tools. ACM Trans. Embed. Comput. Syst. Vol. 7, No. 3, 2008.
5. H. Tuch. Formal Memory Models for Verifying C Systems Code. Ph.D. Thesis. University of NSW, Australia. 2008.
6. J. Regehr, A. Reid and K. Webb. Eliminating stack overflow by abstract interpre- tation. In EMSOFT, 2003.
7. L. E. Leyva-del-Foyo, P. Mejia-Alvarez and D. de Niz. Predictable Interrupt Man- agement for Real Time Kernels over conventional PC Hardware. In RTAS, 2006.
8. Wolfram Research, Inc., Mathematica, Version 8.0, Champaign, IL (2010).
9. D. Bertrand, S. Faucou and Y. Trinquet. An analysis of the AUTOSAR OS timing protection mechanism. In ETFA, 2009.
10. P. E. Hladik, A. M. Deplanche, S. Faucou and Y. Trinquet. Adequacy between AUTOSAR OS specification and real-time scheduling theory. In SIES, 2007.
11. C. L. Liu and J. W. Layland. Scheduling Algorithms for Multiprogramming in a Hard-Real-Time Environment. Jounal of the Assocaition for Computing Macheinery, Vol.20, No.1, 1973.
12. J. P. Lehoczky. Fixed priority scheduling of periodic task sets with arbitrary deadlines. In RTSS, 1990.
13. M. G. Harbour, M. H. Klein, J. P. Lehoczky. Fixed Priority Scheduling of Periodic Tasks with Varying Execution Priority. In RTSS, 1991.
14. D. I. Katcher, H. Arakawa, J. K. Strosnider. Engineering and analysis of fixed priority schedulers. Software Engineering, IEEE Transactions, 1993.
15. T. Amnell, E. Fersman, L. Mokrushin, P. Pettersson, and Y. Wang. TIMES: a Tool for Schedulability Analysis and Code Generation of Real-Time Systems. In FORMATS, 2003.
16. E. Fersman and Y. Wang. A Generic Approach to Schedulability Analysis of Real Time Tasks, Nordic Journal of Computing, Volume 11(2), 2004.
17. P. Krcal and Y. Wang. Decidable and Undecidable Problems in Schedulability Analysis Using Timed Automata. In TACAS, 2004.
18. E. Fersman, L. Mokrushin, P. Pettersson, and Y. Wang. Schedulability Analysis of Fixed-Priority Systems Using Timed Automata. Journal of Theoretical Computer
Science, 354(2), 2006.
19. D. Brylow and J. Palsberg. Deadline Analysis of Interrupt-Driven Software, IEEE Transactions on Software Engineering, 2004.
20. M.D.Schwarz,H.Seidl,V.Vojdani,P.Lammich,M.Muller-Olm.Staticanalysisof
interrupt-driven programs synchronized via the priority ceiling protocol. In POPL, 2011.
21. X. Feng, Z. Shao, Y. Guo and Y. Dong. Certifying Low-Level Programs with Hardware Interrupts and Preemptive Threads. J. Autom. Reasoning, vol. 42(2-4), 2009.
22. Y. Zhao, Y. Huang, J. He and S. Liu. Formal Model of Interrupt Program from a Probabilistic Perspective. In ICECCS, 2011.
23. J. Shi, H. Zhu, J. He, H. Fang, Y. Huang and X. Zhang. ORIENTAIS: Formal
Verified OSEK/VDX Real-Time Operating System. In ICECCS, 2012.

## 2
How Timing Interfaces in AUTOSAR can Improve Distributed Development of Real-Time Software
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.648.2735&rep=rep1&type=pdf

[Br04] J.-Y. Brunel, M. Di Natale, A. Ferrari, P. Giusto, L. Lavagno. SoftContract: an Assertion-Based Software Development Process that Enables Design-by-Contract. In Proc. Design, Automation, and Test in Europe (DATE), Paris, France, 2004
[Da05] W. Damm, A. Votintseva, A. Metzner, B. Josko, T. Peikenkamp, E. Böde, Boosting Re-use of Embedded Automotive Applications Through Rich Components. In Proc. Foundations of Interface Technologies, Foundations of Interface Technologies, San Francisco, USA, 2005.
[He05] R. Henia, A. Hamann, M. Jersak, R. Racu, K. Richter, R. Ernst. System Level Performance Analysis - the SymTA/S Approach. In IEE Proceedings Computers and Digital Techniques, Vol. 152, Is. 2, March 2005.
[He06] H. Heinecke, J. Bielefeld, K.-P. Schnelle, N. Maldener, H. Fennel, O. Weis, T. Weber, J. Ruh, L. Lundh, T. Sandén, P. Heitkämper, R. Rimkus, J. Leflour, A. Gilberg, U. Virnich, S. Voget, K. Nishikawa, K. Kajio, T. Scharnhorst, B. Kunkel. AUTOSAR—Current results and preparations for exploitation. In Proc. 7th EUROFORUM “Software in the vehicle”. Stuttgart, Germany, May 2006
[Je07] M. Jersak et.al. Timing-Modell und Methodik für AUTOSAR. Elektronik automotive, Special issue on “AUTOSAR”, October 2007
[Ri06] K. Richter. The AUTOSAR Timing Model - Status and Challanges. ARTIST2 Workshop Innsbruck. March 2006
[Ri07] K. Richter. How OEMs can get Suppliers On Board for Designing Extensible Networks. In Proc. Embedded World Conference, Nürnberg, Germany, February 2007.
[Ru07] M. Rudorfer, T. Ochs, P. Hoser, M. Thiede, M. Mössmer, O. Scheickl and H. Heinecke. Realtime System Design Utilizing AUTOSAR Methodology. Elektronik automotive, Special issue on “AUTOSAR”, October 2007
[SR08] O. Scheickl and M. Rudorfer. Automotive Real Time Development Using a Timing-augmented AUTOSAR Specification. In Proc. Embedded Real-Time SoftwareCongress (ERTS), Toulouse, France, 2008
## 3
Timing Simulation of Interconnected AUTOSAR Software-Components
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.659.7962&rep=rep1&type=pdf

[1] AUTOSAR: http://www.autosar.org
[2] M. Baumeister, P. Fuhrmann, F. Armbruster: Taking Concept Models from Standardization to Silicon; In FlexRay Special Edition, Hanser Automotive Electronics + Systems, 2005.
[3] R. Bergamaschi: Transaction-Level Models for PowerPC and CoreConnect; 11th European SystemC Users Group Meeting, Munich, 2005.
[4] A. Donlin: Transaction Level Modeling: Flows and Use
Models; Proceedings of the 2nd IEEE/ACM/IFIP international conference on hardware/software codesign and system synthesis, Stockholm, 2004.
[5] A. Donlin, A. Braun, A. Rose: SystemC for Design and Modeling of Programmable Systems; In Proc. of International Forum on Specification and Design Languages, Lille, 2004.
[6] FlexRay: http://www.flexray.com/
[7] T. Grötker, S. Liao, G. Martin, S. Swan: System Design with SystemC; Kluwer, 2002.
[8] H. Heinecke, et al.: AUTOSAR - Current results and
preparations for exploitation; 7th EUROFORUM conference
„Software in the vehicle“ Stuttgart, 2006.
[9] H. Heinecke, et al.: AUTomotive Open System ARchitecture -
An Industry-Wide Initiative to Manage the Complexity of Emerging Automotive E/E-Architectures; Convergence 2004, Detroit, 2004.
[10] J. N. Ip, S. Swan: A Tutorial Introduction on the New SystemC Verification Standard; OSCI SCV Working Group, 2003.
[11] M. Krause, O. Bringmann, W. Rosenstiel: A SystemC-based Software and Communication Refinement Framework for Distributed Embedded Systems; Proceedings of the 13th Workshop on Synthesis And System Integration of Mixed Information Technologies, Nagoya, 2006.
[12] M. Krause, O. Bringmann, W. Rosenstiel: Target Software Generation: An Approach for Automatic Mapping of SystemC Specifications onto Real-Time Operating Systems; Design Automation for Embedded Systems, Volume 10, Issue 4, Springer, 2007.
[13] MATLAB/Simulink: http://www.mathworks.com/
[14] M. Pagel, M. Brörkens: Definition and Generation of Data Exchange Formats in AUTOSAR; Proceedings of the Second European Conference ECMDA-FA 2006.
[15] P. Pop, P. Eles, Z. Peng: Analysis and Synthesis of Distributed
Real-Time Embedded Systems; Kluwer Academic Publishers,
Boston, 2004.
[16] A. Rose, S. Swan, J. Pierce, J.-M. Fernandez: Transaction Level Modeling in SystemC; OSCI TLM Working Group, 2005. [17] T. Scharnhorst, et al.: AUTOSAR - Challenges and Achievements 2005; Electronic Systems for Vehicles 2005,
VDI Congress, Baden-Baden, 2005.
[18] A. Siebenborn, O. Bringmann, W. Rosenstiel: Communication
Analysis for System on Chip Design; Proc. of the Design
Automation and Test in Europe Conference 2004, Paris, 2004. [19] A. Siebenborn, O. Bringmann, W. Rosenstiel: Worst-Case Performance Analysis of Parallel, Communicating Software Processes; Proceedings of the Tenth International Symposium
on Hardware/Software Codesign 2002, USA, 2002.
[20] SPIRIT Schema Working Group Membership, IP-XACT Users
Guide Version 1.4, 2005.
[21] SystemC: http://www.systemc.org
[22] UML Profile for AUTOSAR Version 1.0.1; AUTOSAR, 2006. [23] A. Viehl, O. Bringmann, W. Rosenstiel, T. Schönwald: Formal
Performance Analysis and Simulation of UML/SysML Models for ESL Design; Proceedings of the Design, Automation and Test in Europe Conference, Munich, 2006.

## 4
Timing modeling and analysis for AUTOSAR-based software development-a case study (2010)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.655.5136&rep=rep1&type=pdf

[1] AUTOSAR - AUTomotive Open System ARchitecture. [Online]. Available: http://www.autosar.org/
[2] TIMMO (TIMing MOdel). ITEA2 IST. [Online]. Available: https://www.timmo.org/
[3] A. Ferrari, M. Di Natale, G. Gentile, G. Reggiani, and P. Gai, “Time and memory tradeoffs in the implementation of autosar components,” in Design, Automation & Test in Europe Conference & Exhibition, 2009. DATE ’09., April 2009, pp. 864–869.
[4] ATESST2 - Advanced Traffic Efficiency and Safety through Software Technology. ITEA2 IST. [Online]. Available: http://www.atesst.org
[5] O. Scheickl and M. Rudorfer, “Automotive real time development using
a timing-augmented autosar specification,” in Proceedings of ERTS2008,
2008.
[6] N. Feiertag and K. Richter, “A compositional framework for end-to-
end path delay calculation of automotive systems under different path semantics,” in Proceedings of the IEEE Real-Time System Symposium (RTSS), Barcelona, Spain, 2008.
[7] M. Krause, O. Bringmann, A. Hergenhan, G. Tabanoglu, and W. Rosentiel, “Timing simulation of interconnected autosar software- components,” in Design, Automation & Test in Europe Conference & Exhibition, 2007. DATE ’07, April 2007, pp. 1–6.
[8] S. Reichelt, O. Scheickl, and G. Tabanoglu, “The influence of real- time constraints on the design of flexray-based systems,” in Design, Automation & Test in Europe Conference & Exhibition, 2009. DATE ’09., April 2009, pp. 858–863.
[9] K. Richter, N. Feiertag, M. Rudorfer, O. Scheickl, and C. Ainhauser, “How timing interfaces in autosar can improve distributed development of real-time software,” in GI Jahrestagung (2), 2008, pp. 662–667.
[10] K. Klobedanz, C. Kuznik, A. Elfeky, and W. Mu ̈ller, “Development of automotive communication based real-time systems - a steer-by- wire case study,” in IFIP Advances in Information and Communication Technology, vol. 310, 2009, pp. 218–225.
[11] A. Hamann, R. Henia, R. Racu, M. Jersak, K. Richter, and R. Ernst, “Symta/s - symbolic timing analysis for systems,” 2004.

## 101(not timing protection)
Beyond AUTOSAR – Optimized AUTOSAR Compliant Basic Software Modules
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.506.234&rep=rep1&type=pdf

[1] AUTOSAR Consortium. AUTOSAR – Layered Software Architecture. Technical Report Version 2.2.1, Release 3.0, Rev 0001, AUTOSAR Consortium, February 2008.
[2] LIN Consortium. LIN Specification Package. Technical Report Version 2.1, LIN Consortium, Novem- ber 2006.
[3] H.Fennel,S.Bunzel,H.Heinecke,J.Bielefeld,S.Fu ̈rst,K.-P.Schnelle,W.Grote,N.Maldener,T.We- ber, F. Wohlgemuth, J. Ruh, L. Lundh, T. Sande ́n, P. Heitka ̈mper, R. Rimkus, J. Leflour, A. Gilberg, U. Virnich, S. Voget, K. Nishikawa, K. Kajio, K. Lange, T. Scharnhorst, and B. Kunkel. Achievements and Exploitation of the AUTOSAR Development Partnership. In Proceedings of the Convergence 2006, Detroit, MI, USA, October 2006.
[4] T. Fu ̈hrer, F. Hartwich, R. Hugel, and H. Weiler. FlexRay – The Communication System for Future Control Systems in Vehicles. In Proceedings of the SAE 2003 World Congress & Exhibition, Detroit, MI, USA, March 2003. Society of Automotive Engineers.
[5] P. Hansen. AUTOSAR Standard Software Architecture Partnership Takes Shape. The Hansen Report on Automotive Electronics, 17(8):1–3, October 2004.
[6] P. Hansen. New S-Class Mercedes: Pioneering Electronics. The Hansen Report on Automotive Elec- tronics, 18(8):1–2, October 2005.
[7] ISO. Road Vehicles – Diagnostic Systems – Keyword Protocol 2000 – Part 3: Application Layer. Technical Report ISO/DIS 14230-3, ISO (International Organization for Standardization), 1, rue de Varembe, Case postale 56, CH-1211 Geneva 20, Switzerland, 1999.
Memory Consumption [Bytes]
[8] ISO. Road Vehicles – Controller Area Network (CAN) – Part 1: Data Link Layer and Physical Signalling. Technical Report ISO/DIS 11898-1, ISO (International Organization for Standardization), 1, rue de Varembe, Case postale 56, CH-1211 Geneva 20, Switzerland, 2003.
[9] ISO. Road Vehicles – Controller Area Network (CAN) – Part 2: High-Speed Medium Access Unit. Technical Report ISO/DIS 11898-2, ISO (International Organization for Standardization), 1, rue de Varembe, Case postale 56, CH-1211 Geneva 20, Switzerland, 2003.
[10] ISO. Road Vehicles – Diagnostics on Controller Area Networks (CAN) – Part 2: Network Layer Services. Technical Report ISO/DIS 15765-2.2, ISO (International Organization for Standardization), 1, rue de Varembe, Case postale 56, CH-1211 Geneva 20, Switzerland, April 2003.
[11] ISO. Road Vehicles – Unified Diagnostic Services (UDS) – Part 1: Specification and Requirements. Technical Report ISO/DIS 14229-1, ISO (International Organization for Standardization), 1, rue de Varembe, Case postale 56, CH-1211 Geneva 20, Switzerland, 2004.
[12] R.Mores,G.Hay,R.Belschner,J.Berwanger,C.Ebner,S.Fluhrer,E.Fuchs,B.Hedenetz,W.Kuffner, A. Kru ̈ger, P. Lohrmann, D. Millinger, M. Peller, J. Ruh, A. Schedl, and M. Sprachmann. FlexRay – The Communication System for Advanced Automotive Control Systems. In Proceedings of the SAE 2001 World Congress, Detroit, MI, USA, March 2001. Society of Automotive Engineers.

## 102
An AUTOSAR ECU Mapping Algorithm
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.880.68&rep=rep1&type=pdf

[1] AUTOSAR Development Partnership. AUTOSAR – Current results and preparations for exploitation. 7th EUROFORUM conference 'Software in the vehicle',Stuttgart 2006
[2] H.Heinecke. Automotive system design - challenges and potential. Design, Automation and Test in Europe. 2005:656~657
[3] K Klobedanz, C Kuznik, A Thuy, et al. Timing modeling and analysis for AUTOSAR-based software development: a case study[C]. 2010: 642-645.
[4] K Lakshmanan, G Bhatia, R Rajkumar. Integrated end-to-end timing analysis of networked autosar-compliant systems[C]. 2010: 331-334.
[5] Senthilkumar K, Ramadoss R. Designing multicore ECU architecture in vehicle networks using AUTOSAR[C]. 2011, (270-275).Advanced Computing (ICoAC), 2011 Third International Conference on.
[6] Caliebe P, Lauer C, German R. Flexible integration testing of automotive ECUs by combining AUTOSAR and XCP[C]. 0004-07- 20, 2011, (67-72).Computer Applications and Industrial Electronics (ICCAIE), 2011 IEEE International Conference on.
[7] Vanholme B, Lusetti B, Gruyer D, et al. Highly automated driving on highways: System implementation on PC and automotive ECUs[C]. 0005-07-20, 2011, (1465-1470).Intelligent Transportation Systems (ITSC), 2011 14th International IEEE Conference on.
[8] S Furst. AUTOSAR Newsletter Q2/2010[Z]. AUTOSAR, 2010.
[9] A E Hergenhan, G Heiser. Operating systems technology for converged ECUs[C]. 2008
[10] P Hladik, A Deplanche, S E B Faucou, et al. Adequacy between AUTOSAR OS specification and real-time scheduling theory[C]. 2007: 225-233.
[11] Chen Wei-dong, Yang Jian-jun. Two mathematical models andalgorithm s of internet communications chinese [ J ]. Joural Computers 1999, 22 (1) : 51-55.
[12] T Scharnhorst, H Heinecke, K Schnelle, et al. Application to engine control at Renault AUTOSAR-Challenges and Achievements 2005[J]. VDI BERICHTE, 2005, 1907: 395.

## 103
Achievements and exploitation of the AUTOSAR development partnership. Technical report, Society of Automotive Engineers (2006)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.461.5164&rep=rep1&type=pdf

[1] www.autosar.org Official website of the AUTOSAR partnership
[2] Fennel, Helmut et al.: Qualität und Markenidentität durch die AUTOSAR Standard Architektur. VDA Jahrestagung 2004, Rüsselsheim, March 2004
[3] Heinecke, Harald et al.: AUTOSAR – Current results and preparations for exploitation. Euroforum conference May 3rd 2006
[4] Heinecke, Harald et al.: AUTomotive Open System ARchitecture – An industry-wide initiative to manage the complexity of emerging Automotive E/E-Architectures. Convergence 2004, International Congress on Transportation Electronics, Detroit, 2004
[5] Scharnhorst, Thomas: AUTOSAR – ein wichtiger Beitrag für die Automobilarchitekturen der Zukunft. Vision Automobil, Handelsblatt Jahrestagung Automobiltechnologien 2005, Munich, 2005
[6] Scharnhorst, Thomas et al.: AUTOSAR – Challenges and Achievements 2005. Electronic Systems for Vehicles 2005, VDI Congress, Baden-Baden, 2005
[7] Per Johannessen: AUTOSAR Safety Approach.
Convergence 2006, Transportation Conference, Detroit, 2006 (this volume)

## 104
The Use of Java in the Context of AUTOSAR 4.0 Expectations and Possibilities
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.636.5321&rep=rep1&type=pdf

[1] AJACS: Applying Java to automotive control systems concluding paper V2.0, July 2002. http://www.ajacs.org/.
[2] AUTOSAR. Requirements on operating system (version 2.0.1). Technical report, Automotive Open
System Architecture GbR, June 2006.
[3] AUTOSAR homepage. http://www.autosar.org/,
visited 2009-03-26.
[4] M. Golm, M. Felser, C. Wawersich, and J. Kleino ̈der.
The JX operating system. In Proceedings of the 2002 USENIX Annual Technical Conference, pages 45–58, Berkeley, CA, USA, June 2002. USENIX Association.
[5] T. Harbaum. NanoVM - Java for the AVR, July 2006. http://www.harbaum.org/till/nanovm.
[6] Guidelines for the Use of the C Language in Critical Systems (MISRA-C:2004). Oct. 2004.
[7] F. Pizlo, L. Ziarek, and J. Vitek. Real time java on resource-constrained platforms with fiji vm. In JTRES
’09: Proceedings of the 7th International Workshop on Java Technologies for Real-Time and Embedded Systems, pages 110–119, New York, NY, USA, 2009. ACM.
[8] D. Simon, C. Cifuentes, D. Cleal, J. Daniels, and
D. White. JavaTM on the bare metal of wireless sensor devices: the Squawk Java virtual machine. In Proceedings of the 2nd USENIX International Conf. on Virtual Execution Environments (VEE ’06), pages 78–88, New York, NY, USA, 2006. ACM Press.
[9] J. H. Solorzano. TinyVM - Java VM for Lego Mindstorms RCX. http://tinyvm.sourceforge.net/, 2000.
[10] I. Thomm, M. Stilkerich, C. Wawersich, and
W. Schro ̈der-Preikschat. KESO: An open-source Multi-JVM for deeply embedded systems. In JTRES
’10: Proceedings of the 8th International Workshop on Java Technologies for Real-Time and Embedded Systems, pages 109–119, New York, NY, USA, 2010. ACM.
[11] P. Ulbrich, R. Kapitza, C. Harkort, R. Schmid, and W. Schro ̈der-Preikschat. I4Copter: An adaptable and modular quadrotor platform. In Proceedings of the 26th ACM Symposium on Applied Computing (SAC ’11), pages 380–396, New York, NY, USA, 2011. ACM Press.
[12] C. Wawersich, M. Stilkerich, R. Ellner, and
W. Schro ̈der-Preikschat. A distributed middleware for automotive applications. In Proceedings of the 1st Workshop on Models and Analysis for Automotive Systems, volume 1, pages 25–28, 2006.
[13] C. Wawersich, M. Stilkerich, and
W. Schro ̈der-Preikschat. An OSEK/VDX-based multi-JVM for automotive appliances. In Embedded System Design: Topics, Techniques and Trends, IFIP International Federation for Information Processing, pages 85–96, Boston, 2007. Springer-Verlag.

## 104
AUTOBEST: A United AUTOSAR-OS and ARINC 653 Kernel∗
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.696.7973&rep=rep1&type=pdf

[1] “ISO 26262: Road vehicles – Functional safety,” ISO Norm, 2011. [2] “DO-178B: Software Considerations in Airborne Systems and Equipment
Certification,” Radio Technical Commission for Aeronautics, 1992. [3] “Specification of Operating System,” AUTOSAR, March 2014.
[4] “ARINC Specification 653: Avionics Application Software Standard
Interface,” AEEC, November 2010.
[5] A. Wieder and B. B. Brandenburg, “On Spin Locks in AUTOSAR:
Blocking Analysis of FIFO, Unordered, and Priority-Ordered Spin Locks,”
in RTSS, 2013, pp. 45–56.
[6] “OSEK OS Extensions for Protected Applications,” DaimlerChrysler
AG, July 2003.
[7] A. Lackorzynski and A. Warg, “Virtual Processors as Kernel Interface,”
in Twelfth Real-Time Linux Workshop, 2010.
[8] W. Hofer, D. Lohmann, F. Scheler, and W. Schröder-Preikschat, “Sloth: Threads as interrupts,” in RTSS, 2009, pp. 204–213.
[9] A. Zuepke, M. Bommert, and R. Kaiser, “Fast User Space Priority Switching,” in OSPERT Workshop, July 2014.
[10] H. Franke, R. Russell, and M. Kirkwood, “Fuss, Futexes and Furwocks: Fast Userlevel Locking in Linux,” in Proceedings of the Ottawa Linux Symposium, 2002, pp. 479–495.
[11] U. Drepper, “Futexes Are Tricky,” White Paper, Nov. 2011. [Online]. Available: http://people.redhat.com/drepper/futex.pdf
[12] M. Beckert, M. Neukirchner, R. Ernst, and S. M. Petters, “Sufficient Temporal Independence and Improved Interrupt Latencies in a Real-Time Hypervisor,” in DAC, 2014, pp. 86:1–86:6.
[13] C. Herber, A. Richter, T. Wild, and A. Herkersdorf, “A Network Virtualization Approach for Performance Isolation in Controller Area Network (CAN),” in RTAS, 2014.
[14] D. Haworth, “An AUTOSAR-compatible microkernel for systems with safety-relevant components,” in Herausforderungen durch Echtzeitbetrieb
- Echtzeit 2011. Springer, 2012, pp. 11–20.
[15] C. Aussagues, D. Chabrol, V. David, D. Roux, N. Willey, A. Tournadre,
and M. Graniou, “PharOS, a multicore OS ready for safety-related
automotive systems: results and future prospects,” in ERTS, 2010.
[16] D. Reinhardt and G. Morgan, “An embedded hypervisor for safety-
relevant automotive E/E-systems,” in SIES, June 2014, pp. 189–198.
[17] J. Delange, L. Pautet, A. Plantec, M. Kerboeuf, F. Singhoff, and F. Kordon, “Validate, Simulate, and Implement ARINC653 Systems
Using the AADL,” Ada Lett., vol. 29, no. 3, pp. 31–44, Nov. 2009.
[18] M. Masmano, I. Ripoll, A. Crespo, and J. Metge, “XtratuM: a Hypervisor for Safety Critical Embedded Systems,” in Eleventh Real-Time Linux
Workshop, September 2009.
[19] R. Kaiser and S. Wagner, “Evolution of the PikeOS Microkernel,” in
MIKES Workshop, January 2007.
[20] P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neuge-
bauer, I. Pratt, and A. Warfield, “Xen and the Art of Virtualization,”
SIGOPS Oper. Syst. Rev., vol. 37, no. 5, pp. 164–177, Oct. 2003.
[21] U. Steinberg and B. Kauer, “NOVA: A Microhypervisor-based Secure
Virtualization Architecture,” in EuroSys, 2010, pp. 209–222.
[22] K. Elphinstone and G. Heiser, “From L3 to seL4 What Have We Learnt
in 20 Years of L4 Microkernels?” in SOSP, 2013, pp. 133–150.
[23] “LynxOS RTOS,” LynuxWorks. [Online]. Available: http://www.
lynuxworks.com/
[24] V. Uhlig, J. LeVasseur, E. Skoglund, and U. Dannowski, “Towards
scalable multiprocessor virtual machines,” in Proc. of the 3rd Virtual
Machine Research and Technology Symposium, May 2004, pp. 43–56. [25] “vDSO - overview of the virtual ELF dynamic shared object.” [Online].
Available: http://man7.org/linux/man- pages/man7/vdso.7.html
[26] J. Liedtke and H. Wenske, “Lazy process switching,” in HOTOS, 2001. [27] D. Hart and D. Guniguntalay, “Requeue-PI: Making Glibc Condvars
PI-Aware,” in Eleventh Real-Time Linux Workshop, 2009, pp. 215–227. [28] R. Spliet, M. Vanga, B. Brandenburg, and S. Dziadek, “Fast on Average, Predictable in the Worst Case: Exploring Real-Time Futexes
in LITMUSRT,” in RTSS, 2014.
[29] A. Zuepke, “Deterministic Fast User Space Synchronisation,” in OSPERT
Workshop, July 2013.

## 105
Towards Transactional Self-Adaptation for AUTOSAR on the Example of a Collision Detection System
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.648.7644&rep=rep1&type=pdf

[BCG+09] AlbertoBroggi,PietroCerri,StefanoGhidoni, PaoloGrisleri, and HoGiJung. A New Approach to Urban Pedestrian Detection for Automatic Braking. IEEE Transactions on Intelligent Transportation Systems, 10(4):594–605, December 2009.
[BGN+09] BasilBecker, HolgerGiese, StefanNeumann,MartinSchenck, and ArianTreffer. Model- Based Extension of AUTOSAR for Architectural Online Reconfiguration. In Sudipto Ghosh, editor, MoDELS Workshops, volume 6002 of Lecture Notes in Computer Science, pages 83–97. Springer, 2009.
 [BGT05] Sven Burmester, Holger Giese, and Matthias Tichy. Model-Driven Development of Reconfigurable Mechatronic Systems with Mechatronic UML. In Uwe Aßmann, Arend Rensink, and Mehmet Aksit, editors, Model Driven Architecture: Foundations and Applications, volume 3599 of Lecture Notes in Computer Science (LNCS), pages 47–61. Springer Verlag, August 2005.
[BLL+95] Johan Bengtsson, Kim Larsen, Fredrik Larsson, Paul Pettersson, and Wang Yi. UPPAAL - a Tool Suite for Automatic Verification of Real-Time Systems. In Proceedings of Workshop on Verification and Control of Hybrid Systems III, pages 232–243, New Brunswick, NJ, USA, October 1995.
[BY03] Johan Bengtsson and Wang Yi. Timed Automata: Semantics, Algorithms and Tools. In Jo ̈rg Desel, Wolfgang Reisig, and Grzegorz Rozenberg, editors, Lectures on Concurrency and Petri Nets, volume 3098 of Lecture Notes in Computer Science, pages 87–124. Springer, 2003.
[C+09] Betty H. C. Cheng et al. Software Engineering for Self-Adaptive Systems: A Research Roadmap. In Betty H. C. Cheng, Roge ́rio de Lemos, Holger Giese, Paola Inverardi, and Jeff Magee, editors, Software Engineering for Self-Adaptive Systems, volume 5525 of Lecture Notes in Computer Science, pages 1–26. Springer, 2009.
[FMB+09] Simon Fu ̈rst, Ju ̈rgen Mo ̈ssinger, Stefan Bunzel, Thomas Weber, Frank Kirschke-Biller, Peter Heitka ̈mper, Gerulf Kinkelin, Kenji Nishikawa, and Klaus Lange. AUTOSAR - A Worldwide Standard is on the Road. In Proc. of the 14th International VDI Congress Electronic Systems for Vehicles 2009, Baden-Baden, 2009.
[HOG04] Thorsten Hestermeyer, Oliver Oberschelp, and Holger Giese. Structured Information Processing for Self-Optimizing Mechatronic Systems. In Helder Arau ́jo, Alves Vieira, Jose ́ Braz, Bruno Encarnac ̧a ̃o, and Marina Carvalho, editors, ICINCO (3), pages 230–237. INSTICC Press, 2004.
[HPB12] Christian Heinzemann, Claudia Priesterjahn, and Steffen Becker. Towards Modeling Reconfiguration in Hierarchical Component Architectures. In 15th ACM SigSoft Interna- tional Symposium on Component-Based Software Engineering (CBSE 2012), 2012.
[HRR+11]Arne Haber,Holger Rendel, Bernhard Rumpe, Ina chaefer, and Frankvander Linden. Hierarchical Variability Modeling for Software Architectures. In Proceedings of the Software Product Line Conference 2011, pages 150–159, Munich, Germany, 2011. IEEE.
[KC03] J. O. Kephart and D. M. Chess. The vision of autonomic computing. Computer, 36(1):41 – 50, jan 2003.
[KM07] Jeff Kramer and Jeff Magee. Self-Managed Systems: an Architectural Challenge. In FOSE ’07: 2007 Future of Software Engineering, pages 259–268, Washington, DC, USA, 2007. IEEE Computer Society.
[OMT98] Peyman Oreizy, Nenad Medvidovic, and Richard N. Taylor. Architecture-Based Runtime Software Evolution. In ICSE, pages 177–186, 1998.
[SHGB11] Sebastian Siegl, Kai-Steffen Hielscher, Reinhard German, and Christian Berger. Formal Specification and Systematic Model-Driven Testing of Embedded Automotive Systems. In Proceedings of the Conference on Design, Automation, and Test in Europe, pages 1530–1591, Grenoble, France, 2011. European Design and Automation Association.
[THHO08] Matthias Tichy, Stefan Henkler, Jo ̈rg Holtmann, and Simon Oberthu ̈r. Component Story Diagrams: A Transformation Language for Component Structures in Mechatronic Systems. In Postproc. of the 4th Workshop on Object-oriented Modeling of Embedded Real-Time Systems (OMER 4). HNI Verlagsschriftenreihe, 2008.
[THP+ 07] Wolfgang Trumler, Markus Helbig, Andreas Pietzowski, Benjamin Satzger, and Theo Ungerer. Self-configuration and Self-healing in AUTOSAR. In Proceedings of the 14th Asia Pacific Automotive Engineering Conference, Hollywood, CA, USA, August 2007.
[WZEK09] Gereon Weiss, Marc Zeller, Dirk Eilers, and Rudi Knorr. Towards Self-organization in Automotive Embedded Systems. In Juan Gonzalez Nieto, Wolfgang Reif, Guojun Wang, and Jadwiga Indulska, editors, Autonomic and Trusted Computing, volume 5586 of Lecture Notes in Computer Science, pages 32–46. Springer Berlin / Heidelberg, 2009.
[ZPW+11] Marc Zeller, Christian Prehofer, Gereon Weiss, Dirk Eilers, and Rudi Knorr. Towards Self-Adaptation in Real-Time, Networked Systems: Efficient Solving of System Con- straints for Automotive Embedded Systems. In Proceedings of the Fifth IEEE Interna- tional Conference on Self-Adaptive and Self-Organizing Systems, pages 79–88. IEEE, October 2011.

## 106
On Spin Locks in AUTOSAR: Blocking Analysis of FIFO, Unordered, and Priority-Ordered Spin Locks
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.385.4961&rep=rep1&type=pdf

[1] “AUTOSAR Release 4.1, Specification of Operating System,” http://www.autosar.org, 2013.
[2] “SchedCAT: Schedulability test collection and toolkit,” web site, http://www.mpi-sws.org/ bbb/projects/schedcat.
[3] J.Anderson,R.Jain,andK.Jeffay,“Efficientobjectsharinginquantum- based real-time systems,” in RTSS’98, 1998, pp. 346–355.
[4] J. H. Anderson, Y.-J. Kim, and T. Herman, “Shared-memory mutual exclusion: major research trends since 1986,” Distributed Computing, vol. 16, no. 2-3, pp. 75–110, 2003.
[5] N.Audsley,A.Burns,M.Richardson,K.Tindell,andA.Wellings,“Ap- plying new scheduling theory to static priority pre-emptive scheduling,” Software Eng. J., vol. 8, no. 5, pp. 284–292, 1993.
[6] T. Baker, “Stack-based scheduling for realtime processes,” Real-Time Systems, vol. 3, no. 1, pp. 67–99, 1991.
[7] A. Block, H. Leontyev, B. Brandenburg, and J. Anderson, “A flexible real-time locking protocol for multiprocessors,” in RTCSA’07, 2007.
[8] B. Brandenburg, “Scheduling and locking in multiprocessor real-time operating systems,” Ph.D. dissertation, The University of North Car- olina at Chapel Hill, 2011.
[9] ——,“Improvedanalysisandevaluationofreal-timesemaphoreproto- cols for P-FP scheduling,” in RTAS’13, 2013.
[10] B. Brandenburg and J. Anderson, “Optimality results for multiprocessor real-time locking,” in RTSS’10, 2010, pp. 49–60.
[11] D.Buttle,“Real-timeintheprime-time,”KeynoteatECRTS’12.
[12] T. Craig, “Queuing spin lock algorithms to support timing predictabil-
ity,” in RTSS’93, 1993, pp. 148–157.
[13] U. Devi, H. Leontyev, and J. Anderson, “Efficient synchronization
under global EDF scheduling on multiprocessors,” in ECRTS’06, 2006,
pp. 75–84.
[14] P. Emberson, R. Stafford, and R. Davis, “Techniques for the synthesis
of multiprocessor tasksets,” in WATERS’10, 2010.
[15] D. Faggioli, G. Lipari, and T. Cucinotta, “The multiprocessor bandwidth
inheritance protocol,” in ECRTS’10, 2010, pp. 90–99.
[16] P.Gai,G.Lipari,andM.DiNatale,“Minimizingmemoryutilizationof real-time task sets in single and multi-processor systems-on-a-chip,” in
RTSS’01. IEEE, 2001, pp. 73–83.
[17] T. Johnson and K. Harathi, “Interruptible critical sections,” Dept. of
Computer Science, University of Florida, Tech. Rep., 1994.
[18] ——, “A prioritized multiprocessor spin lock,” IEEE Transactions on
Parallel and Distributed Systems, vol. 8, no. 9, pp. 926–933, 1997.
[19] L. I. Kontothanassis, R. W. Wisniewski, and M. L. Scott, “Scheduler- conscious synchronization,” ACM Transactions on Computer Systems,
vol. 15, no. 1, pp. 3–40, 1997.
[20] K. Lakshmanan, D. Niz, and R. Rajkumar, “Coordinated task schedul-
ing, allocation and synchronization on multiprocessors,” in RTSS’09,
2009, pp. 469–478.
[21] E. P. Markatos and T. J. LeBlanc, “Multiprocessor synchronization
primitives with priorities,” in Eighth IEEE Workshop on Real-Time
Operating Systems and Software, 1991, pp. 1–7.
[22] J. Mellor-Crummey and M. Scott, “Algorithms for scalable synchro-
nization on shared-memory multiprocessors,” ACM Transactions on
Computer Systems, vol. 9, no. 1, pp. 21–65, 1991.
[23] L. D. Molesky, C. Shen, and G. Zlokapa, “Predictable synchronization
mechanisms for multiprocessor real-time systems,” Real-Time Systems,
vol. 2, no. 3, pp. 163–180, 1990.
[24] M. Raynal, Algorithms for mutual exclusion. MIT Press, 1986.
[25] S. Schliecker, M. Negrean, and R. Ernst, “Response Time Analysis on
Multicore ECUs With Shared Resources,” IEEE Trans. Ind. Informat.,
vol. 5, no. 4, pp. 402–413, 2009.
[26] L. Sha, R. Rajkumar, and J. Lehoczky, “Priority inheritance proto-
cols: an approach to real-time synchronization,” IEEE Trans. Comput.,
vol. 39, no. 9, pp. 1175–1185, 1990.
[27] H. Takada and K. Sakamura, “Predictable spin lock algorithms with
preemption,” in RTOSS ’94, 1994, pp. 2–6.
[28] ——, “A novel approach to multiprogrammed multiprocessor synchro-
nization for real-time kernels,” in RTSS’97, 1997, pp. 134–143.
[29] B.WardandJ.Anderson,“Supportingnestedlockinginmultiprocessor
real-time systems,” in ECRTS’12, 2012, pp. 223–232.
[30] A.WiederandB.Brandenburg,“OnSpinLocksinAUTOSAR:Blocking Analysis of FIFO, Unordered, and Priority-Ordered Spin Locks - Online
Appendix,” www.mpi-sws.org/ bbb/papers, 2013

## 107
Research and Implementation of AUTOSAR NM Mechanism in FlexRay Network on Electronic Vehicle Motor Drive Control System
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.385.4961&rep=rep1&type=pdf

[1]. Road vehicles-controller Area Network (CAN) - Part 4: Time –Triggered communication, International Organization for Standardization, ISO/DIS 11898-4, 2002.
[2]. H. Kopetz, G, Bauer, The time-triggered architecture, in Proceedings of the IEEE, 91, 1, 2003, pp. 112-116.
[3]. Rajeev Ranjan and Shirshu Varma, Collision-Free Time Synchronization for Multi-Hop Wireless Sensor Networks, Journal of Computational Intelligence and Electronic Systems, Vol. 1, No. 2, December 2012,
pp. 200-206.
[4]. Irfan Ullah, Furqan Ullah, Qurban Ullah, and
Seoyong Shin, Sensor-Based Robotic Model for Vehicle Accident Avoidance, Journal of Computational Intelligence and Electronic Systems, Vol. 1, No. 1, June 2012, pp. 57-62.
[5]. FlexRay Consortium FlxeRay Communications System Protocol Specification, Ver. 2.12005.
[6]. Klaus S, Ece G S., Message scheduling for the FlexRay protocol: the static segment, IEEE Trans Actions on Vehicular Technology, 58, 5, 2009, pp. 2170-2179.
[7]. Ece Guran Schmidt and Klaus Schmidt, Message Scheduling for the FlexRayProtocol: The Dynamic Segment, IEEE Trans. Veh. Technol., 58, 5, 2009, pp. 2160–2169.
[8]. Zhang Jianjun, Tian Xiao, Zhang Benhong, GuJianwei Research and implementation of OSEK NM mechanism in FlexRay network, Journal of Electronic Measurement and Instrument, 12, 2012, pp. 1037-1042.
[9]. OSEK/VDX Network Management Concept and Application Programming Interface Version 2.5.3, http://www.vector.com.
[10]. AUTOSAR Consortium, Specification of FlexRay Network Management, V4.0.0.2008.
[11]. Yao, J. Y, Kong, F., Wu, F. Y., FlexRay vehicle network management control research. Automationinstrument, 12, 32, 2012, pp. 43-46.

## 108
On Spin Locks in AUTOSAR: Blocking Analysis of FIFO, Unordered, and Priority-Ordered Spin Locks (2013)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.712.5842&rep=rep1&type=pdf

REFERENCES
“AUTOSAR Release 4.1, Specification of Operating System,” http://www.autosar.org, 2013. “SchedCAT:Schedulabilitytestcollectionandtoolkit,”website, http://www.mpi-sws.org/∼bbb/projects/schedcat.
J. Anderson, R. Jain, and K. Jeffay, “Efficient object sharing in quantum-based real-time systems,” in RTSS’98, 1998, pp. 346– 355.
J. H. Anderson, Y.-J. Kim, and T. Herman, “Shared-memory mutual exclusion: major research trends since 1986,” Distributed Computing, vol. 16, no. 2-3, pp. 75–110, 2003.
N. Audsley, A. Burns, M. Richardson, K. Tindell, and A. Wellings, “Applying new scheduling theory to static priority pre-emptive scheduling,” Software Eng. J., vol. 8, no. 5, pp. 284–292, 1993.
T.Baker,“Stack-basedschedulingforrealtimeprocesses,”Real- Time Systems, vol. 3, no. 1, pp. 67–99, 1991.
A. Block, H. Leontyev, B. Brandenburg, and J. Anderson, “A flex- ible real-time locking protocol for multiprocessors,” in RTCSA’07, 2007. B.Brandenburg,“Schedulingandlockinginmultiprocessorreal- time operating systems,” Ph.D. dissertation, The University of North Carolina at Chapel Hill, 2011. ——,“Improvedanalysisandevaluationofreal-timesemaphore protocols for P-FP scheduling,” in RTAS’13, 2013.
B. Brandenburg and J. Anderson, “Optimality results for multi- processor real-time locking,” in RTSS’10, 2010, pp. 49–60.
D. Buttle, “Real-time in the prime-time,” Keynote at ECRTS’12. T. Craig, “Queuing spin lock algorithms to support timing predictability,” in RTSS’93, 1993, pp. 148–157.
U. Devi, H. Leontyev, and J. Anderson, “Efficient synchronization under global EDF scheduling on multiprocessors,” in ECRTS’06, 2006, pp. 75–84.
P. Emberson, R. Stafford, and R. Davis, “Techniques for the synthesis of multiprocessor tasksets,” in WATERS’10, 2010.
D. Faggioli, G. Lipari, and T. Cucinotta, “The multiprocessor bandwidth inheritance protocol,” in ECRTS’10, 2010, pp. 90–99. P. Gai, G. Lipari, and M. Di Natale, “Minimizing memory utilization of real-time task sets in single and multi-processor systems-on-a-chip,” in RTSS’01. IEEE, 2001, pp. 73–83.
T. Johnson and K. Harathi, “Interruptible critical sections,” Dept. of Computer Science, University of Florida, Tech. Rep., 1994. ——, “A prioritized multiprocessor spin lock,” IEEE Transactions on Parallel and Distributed Systems, vol. 8, no. 9, pp. 926–933, 1997.
L. I. Kontothanassis, R. W. Wisniewski, and M. L. Scott, “Scheduler-conscious synchronization,” ACM Transactions on Computer Systems, vol. 15, no. 1, pp. 3–40, 1997.
K. Lakshmanan, D. Niz, and R. Rajkumar, “Coordinated task scheduling,allocationandsynchronizationonmultiprocessors,” in RTSS’09, 2009, pp. 469–478.
E. P. Markatos and T. J. LeBlanc, “Multiprocessor synchronization primitives with priorities,” in Eighth IEEE Workshop on Real-Time Operating Systems and Software, 1991, pp. 1–7.
J. Mellor-Crummey and M. Scott, “Algorithms for scalable
synchronization on shared-memory multiprocessors,” ACM Trans-
actions on Computer Systems, vol. 9, no. 1, pp. 21–65, 1991. [23] L. D. Molesky, C. Shen, and G. Zlokapa, “Predictable synchro- nization mechanisms for multiprocessor real-time systems,” Real-
Time Systems, vol. 2, no. 3, pp. 163–180, 1990.
[24] M. Raynal, Algorithms for mutual exclusion. MIT Press, 1986. [25] S. Schliecker, M. Negrean, and R. Ernst, “Response Time
Analysis on Multicore ECUs With Shared Resources,” IEEE
Trans. Ind. Informat., vol. 5, no. 4, pp. 402–413, 2009.
[26] L. Sha, R. Rajkumar, and J. Lehoczky, “Priority inheritance protocols: an approach to real-time synchronization,” IEEE Trans.
Comput., vol. 39, no. 9, pp. 1175–1185, 1990.
[27] H. Takada and K. Sakamura, “Predictable spin lock algorithms
with preemption,” in RTOSS ’94, 1994, pp. 2–6.
[28] ——, “A novel approach to multiprogrammed multiprocessor synchronization for real-time kernels,” in RTSS’97, 1997, pp. 134–
143.
[29] B.WardandJ.Anderson,“Supportingnestedlockinginmultipro-
cessor real-time systems,” in ECRTS’12, 2012, pp. 223–232.

## 110
Network (CAN) Device Driver for a 32-Bit RISC Architecture based RENESAS Micro-Processor Series with AUTOSAR Software Conformance
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.681.8077&rep=rep1&type=pdf

## 201(not autosar) 
A Hierarchical CPU Scheduler for Multimedia Operating Systems (1996)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.100.4332&rep=rep1&type=pdf

[1] Di Natale, Marco, Haibo Zeng, Paolo Giusto, and Arkadeb Ghosal. Understanding and using the controller area network communication protocol: theory and practice. Springer, 2012.
[2] Navet, Nicolas, and Hervé Perrault. "CAN in Automotive Applications: a look forward." 13th International CAN Conference, Hambach Castle. 2012.
[3] Bo, Huang, et al. "Basic concepts on AUTOSAR development." International Conference on Intelligent Computation Technology and Automation (ICICTA), Vol. 1. IEEE, 2010.
[4] AUTOSAR Consortium. AUTOSAR-Layered Software Architecture. AUTOSAR Consortium, Tech. Rep., 2008, Available: http://-www. autosar. org/download/specs_aktuell/AUTOSAR_LayeredSoftwa reArchitecture.pdf, 2008.
[5] Bunzel, Stefan. "Autosar – the standardized software architecture." Informatik-Spektrum (2011): 79-83.
[6] AUTOSAR, "Specification of CAN Driver." http://www.autosar.org/download (2007).
[7] AUTOSAR, "Specification of CAN Interface." 2009-03- 09). http://www.autosar.org/download
[8] An-juna, W. A. N. G., Jian-chuna JIANG, and C. H. E. N. Pei-ranb. "Device Driver Software Development According with AUTOSAR Specification." International Conference on Computational Engineering (2011).
[9] Robert.S, Dr. Jayasudha J.S, Anurag “TCP/IP Stack Implementation for Communication over IP with AUTOSAR Ethernet Specification” International Journal of Engineering and Innovative Technology (IJEIT) Volume 3, Issue 1, July 2013.
[10] Fürst, Simon, et al. "AUTOSAR–A Worldwide Standard is on the Road." 14th International VDI Congress Electronic Systems for Vehicles, Baden-Baden. 2009.
[11] CAN in automation. [Online]. Available http://www.can-cia.org, June 2008

## 202
D. P. Anderson. Metascheduling for Continuous Media􏰜 ACM Transact i ons on Computer Systems 11(3):266-252August 1993
J. Davin and A. Heybey A Simulation Study of Fair Queueing and Policy Enforcement Computer Communication Review October,1990
A. Demers. S. Keshav, and S. Shenker􏰜 Analysis
and Simulation of a Fair Queueing In Proceedings of ACM SIGCOMM􏰄 Septemb er 
Algorithm
S.J. Golestani. A Self Clocked Scheme for High Speed Applications􏰜 In Pro- ceedings of INFOCOM’94
R Govindan and D P Anderson Scheduling and IPC Mechanisms for Continuous Media In Proceedings of the 13th ACM Symposium on Operating System Principles pages October
P Goyal H M Vin and H Cheng Start time Fair Queuing􏰖 A Scheduling Algorithm for Integrated Services Packet Switching Networks􏰜 In Proceedings of ACM SIGCOMM’96 pages  August 
A Greenb erg and N􏰜 Queuing􏰜 The Journal of ACM􏰄 􏰏􏰡􏰌􏰏􏰍􏰖􏰑􏰞􏰠􏰋􏰑􏰡􏰠􏰄 July 􏰈􏰡􏰡􏰊􏰜
K Jeay D L Stone􏰄 and F􏰜 D􏰜 Smith􏰜 Kernel Supp ort for Live Digital Audio and Video􏰜 Computer Communications􏰄 􏰈􏰑􏰖􏰏􏰠􏰠􏰋􏰏􏰡􏰑􏰄 July 􏰝August 􏰈􏰡􏰡􏰊􏰜
K Je􏰓ay and D􏰜L􏰜 Stone􏰜 Accounting for Inter􏰛 rupt Handling Costs in Dynamic Priority Task Systems􏰜 In Proceedings of 14th IEEE Real-Time Systems Symposium Raleigh-Durham, NC􏰄 pages 􏰊􏰈􏰊􏰋􏰊􏰊􏰈􏰄 December 􏰈􏰡􏰡􏰏􏰜
MB Jones􏰄 P􏰜 Leach􏰄 R􏰜 Draves􏰄 and I I I J􏰜 Bar􏰛 rera􏰜 Support for User􏰛Centric Modular Real􏰛 Time Resource Management in Rialto Oper􏰛􏰈􏰋􏰈􏰊ating System􏰜 In Proceedings of NOSSDAV’95, Durham, New Hampshire􏰄 April 

## 203
Fair Queueing
Madras􏰜 How Fair is Fair
K Lee􏰜 Performance Bounds in Communica􏰛 tion Networks With Variable􏰛Rate Links􏰜 In Proceedings of ACM SIGCOMM’95􏰄 pages 􏰈􏰊􏰞􏰋 􏰈􏰏􏰞􏰄 􏰈􏰡􏰡􏰑􏰜
C􏰜L􏰜 Liu and J􏰜W􏰜 Layland􏰜 Scheduling Algo􏰛 rithms for Multipro cessing in a Hard􏰛Real Time Environment􏰜 JACM􏰄 􏰊􏰎􏰖􏰐􏰞􏰋􏰞􏰈􏰄 January 􏰈􏰡􏰟􏰏􏰜
􏰢􏰈􏰏􏰣 C􏰜 W􏰜 Mercer􏰄 S􏰜 Savage􏰄 and H􏰜 Tokuda􏰜 Pro􏰛 cessor Capacity Reserves􏰖 Op erating System Supp ort for Multimedia Applications􏰜 In Pro- ceedings of the IEEE ICMCS’94􏰄 May 􏰈􏰡􏰡􏰐􏰜
T􏰜 Naka jima􏰄 T􏰜 Kitayama􏰄 H􏰜 Arakawa􏰄 and H􏰜 Tokuda􏰜 Integrated Management of Priority Inversion in Real􏰛Time Mach􏰜 In Proceedings of the 14th IEEE Real-Time Systems Symp.􏰄 pages 􏰈􏰊􏰎􏰋􏰈􏰏􏰎􏰄 Decemb er 􏰈􏰡􏰡􏰏􏰜
J􏰜 Nieh􏰄 J􏰜 Hanko􏰄 J􏰜 Northcutt􏰄 and G􏰜 Wall􏰜 SVR􏰐UNIX Scheduler Unacceptable for Multi􏰛 media Applications􏰜 In Proceedings of 4th In- ternational Workshop on Network and Operating System Support for Digital Audio and Video􏰄 pages November 
D Stiliadis and A􏰜 Varma􏰜 Design and Analysis of Frame􏰛based Fair Queueing􏰖 A New Tra􏰕c Scheduling Algorithm for Packet Switched Net􏰛 works􏰜 In Proceedings of SIGMETRICS’96􏰄 May 􏰈􏰡􏰡􏰞􏰜
I􏰜 Stoica􏰄 H􏰜 Ab del􏰛Wahab􏰄 and K􏰜 Je􏰓ay􏰜 A Prop ortional Share Resource Allo cation Algo􏰛 rithm for Real􏰛Time􏰄 Time􏰛Shared Systems􏰜 In Proceedings of Real Time Systems Symposium (to appear)􏰄 Decemb er 􏰈􏰡􏰡􏰞􏰜
C􏰜 Waldspurger and W􏰜 Weihl􏰜 Stride Schedul􏰛
ing􏰖 Deterministic Prop ortional􏰛share Resource Management􏰜 Technical Rep ort TM MIT􏰄 Lab oratory for Computer Science􏰄 June 􏰈􏰡􏰡􏰑􏰜
C􏰜 A􏰜 Waldspurger and W􏰜 E􏰜 Weihl􏰜 Lot􏰛 tery Scheduling􏰖 Flexible Prop ortional􏰛share Resource Management􏰜 In Proceedings of symposim on Operating System Design and Implementation􏰄 November 􏰈􏰡􏰡􏰐􏰜


## 204
Cello: a disk scheduling framework for next generation operating systems. (1998)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.1086.6468&rep=rep1&type=pdf

[1] R K. Abbott and H. Garcia-Molina. Scheduling I/O Requests with Deadlines: A Performance Evaluation. In Proceedings of RTSS, pages 113–124, December 1990.
[2] D. Anderson, Y. Osawa, and R. Govindan. A File System for Continuous Media. ACM Transactions on Computer Systems, 10(4):311– 337, November 1992.
[3] P. Barham. A Fresh Approach to File System Quality of Service. In Proceedings of NOSSDAV’97, St. Louis, Missouri, pages 119–128, May 1997.
[4] J.C.R. Bennett and H. Zhang. Hierarchical Packet Fair Queuing Algorithms. In Proceedings of SIGCOMM’96, pages 143–156, August 1996.
[5] J. Bruno, E. Gabber, B. Ozden, and A. Silberschatz. Disk Scheduling with Quality of Service Guarantees. In Proceedings of the IEEE Conference on Multimedia Computing Systems (ICMCS’99), June 1999.
[6] M. Buddhikot, X. Chen, D. Wu, and G. Parulkar. Enhancements to 4.4 BSD UNIX for Efficient Networked Multimedia in Project MARS. In Proceedings of the IEEE International Conference on Multimedia Computing and Systems (ICMCS’98), Austin, TX, pages 326–337, July 1998.
[7] M J. Carey, R. Jauhari, and M. Linvy. Priority in DBMS Resource Scheduling. In Proceedings of the 15th VLDB Conference, 1989.
[8] S.Chen, J.A.Stankovic,J.F.Kurose,andD.Towsley. Performance Evaluation of Two New Disk Scheduling Algorithms forReal-Time Systems. Journal of Real-Time Systems, 3:307–336, 1991.
[9] E G. Coffman and M. Hofri. On the Expected Performance of Scanning Disks. SIAM Journal of Computing, 10(1):60–70, February
1982.
[10] E G. Coffman, L A. Klimko, and B. Ryan. Analysis of Scanning Policies for Reducing Disk Seek Times. SIAM Journal of Computing, 1(3):269–279, September 1972.
[11] P J. Denning. Effects of Scheduling on File Memory Operations. In Proceedings of AFIPS SJCC, pages 9–21, 1967.
[12] R. Geist and S. Daniel. A Continuum of Disk Scheduling Algorithms. ACM Transactions on Computer Systems, 5(1):77–92, February
1987.
[13] P. Goyal, H. M. Vin, and H. Cheng. Start-time Fair Queuing: A Scheduling Algorithm for Integrated Services Packet Switching
Networks. In Proceedings of ACM SIGCOMM’96, pages 157–168, August 1996.
[14] M. Hofri. Disk Scheduling: FCFS vs. SSTF Revisited. Communications of the ACM, 23(11):645–653, November 1980.
[15] D M. Jacobson and J. Wilkes. Disk Scheduling Algorithms Based on Rotational Position. Technical report, Hewlett Packard Labs, February 1991.
[16] M.B. Jones, P. Leach, R. Draves, and J. Barrera. Support for User-Centric Modular Real-Time Resource Management in Rialto Oper- ating System. In Proceedings of NOSSDAV’95, Durham, New Hampshire, April 1995.
[17] J. P. Lehoczky and S. Ramos-Thuel. An optimal algorithm for scheduling soft-aperiodic tasks in fixed-priority preemptive systems. In Proceedings of Real Time Systems Symposium, pages 110–123, December 1992.
[18] C L. Liu and J W. Layland. Scheduling Algorithms for Multiprogramming in a Hard-Real-Time Environment. Journal of the ACM, 30:47–61, 1973.
[19] A. Molano, K. Juvva, and R. Rajkumar. Real-time File Systems: Guaranteeing Timing Constraints for Disk Accesses in RT-Mach. In Proceedings of IEEE Real-time Systems Symposium, December 1997.
[20] J. Nieh and M S. Lam. The Design, Implementation and Evaluation of SMART: A Scheduler for Multimedia Applications. In Pro- ceedings of the sixteenth ACM symposium on Operating systems principles (SOSP’97), Saint-Malo, France, pages 184–197, December 1997.
[21] A.L. Narasimha Reddy and J. Wyllie. Disk Scheduling in Multimedia I/O System. In Proceedings of ACM Multimedia’93, Anaheim, CA, pages 225–234, August 1993.
[22] M.Seltzer,P.Chen,andJ.Ousterhout.Disk Scheduling Revisited. In Proceedings of the1 990 Winter USENIX Conference,Washington, D.C., pages 313–323, Jan 1990.
[23] P. Shenoy. Symphony: An Integrated Multimedia File System. PhD thesis, The University of Texas at Austin, Austin, TX, August 1998.
[24] P J. Shenoy, P. Goyal, S S. Rao, and H M. Vin. Symphony: An Integrated Multimedia File System. In Proceedings of the SPIE/ACM
Conference on Multimedia Computing and Networking (MMCN’98), San Jose, CA, pages 124–138, January 1998.
[25] T. Teorey and T. B. Pinkerton. A Comparative Analysis of Disk Scheduling Policies. Communications of the ACM, 15(3):177–184,
March 1972.
[26] R. Wijayaratne and A. L. N. Reddy. Providing QoS Guarantees for Disk I/O. Technical Report TAMU-ECE97-02, Department of Electrical Engineering, Texas A&M University, 1997.
[27] N. C. Wilhelm. An Anomaly in Disk Scheduling: A Comparison of FCFS and SSTF Seek Scheduling using and Empirical Model for Disk Access. Communications of the ACM, 19(1):13–17, January 1976.
[28] B L. Worthington, G R. Ganger, and Y N. Patt. Scheduling Algorithms for Modern Disk Drives. In Proceedings of ACM SIGMET- RICS’94, pages 241–251, May 1994.

## 205
Efficient Techniques for Comprehensive Protection from Memory Error Exploits (2005)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.144.6892&rep=rep1&type=pdf

[1] T. M. Austin, S. E. Breach, and G. S. Sohi. Efficient de- tection of all pointer and array access errors. In ACM SIGPLAN Conference on Programming Language Design and Implementation, pages 290–301, Orlando, Florida, 20–24 June 1994.
[2] A. Baratloo, N. Singh, and T. Tsai. Transparent run- time defense against stack smashing attacks. In USENIX Annual Technical Conference, pages 251–262, Berkeley, CA, June 2000.
[3] E. G. Barrantes, D. H. Ackley, S. Forrest, T. S. Palmer, D. Stefanovic ́, and D. D. Zovi. Randomized instruction set emulation to disrupt binary code injection attacks. In ACM conference on Computer and Communications Se- curity (CCS), Washington, DC, October 2003.
[4] S. Bhatkar, D. C. DuVarney, and R. Sekar. Address obfus- cation: An efficient approach to combat a broad range of memory error exploits. In USENIX Security Symposium,
Washington, DC, August 2003.
[5] CERT advisories. Published on World-Wide Web at URL http://www.cert.org/advisories, May 2005.
[6] M. Chew and D. Song. Mitigating buffer overflows by operating system randomization. Technical Report CMU- CS-02-197, Carnegie Mellon University, December 2002.
[7] T. Chiueh and F.-H. Hsu. RAD: A compile-time solution to buffer overflow attacks. In IEEE International Con- ference on Distributed Computing Systems, Phoenix, Ari- zona, April 2001.
[8] C. Cowan, M. Barringer, S. Beattie, and G. Kroah- Hartman. FormatGuard: Automatic protection from printf format string vulnerabilities. In USENIX Secu- rity Symposium, Washington, DC, 2001.
[9] C. Cowan, S. Beattie, J. Johansen, and P. Wagle. Point- Guard: Protecting pointers from buffer overflow vulner- abilities. In USENIX Security Symposium, Washington, DC, August 2003.
[10] C. Cowan, C. Pu, D. Maier, J. Walpole, P. Bakke, S. Beat- tie, A. Grier, P. Wagle, Q. Zhang, and H. Hinton. Stack- Guard: Automatic adaptive detection and prevention of buffer-overflow attacks. In USENIX Security Symposium, pages 63–78, San Antonio, Texas, January 1998.
[11] N. Dor, M. Rodeh, and M. Sagiv. Cleanness checking of string manipulations in C programs via integer analy- sis. In Static Analysis Symposium, volume 2126 of Lec- ture Notes in Computer Science, pages 194–212. Springer Verlag, June 2001.
[12] H. Etoh and K. Yoda. Protecting from stack-smashing attacks. Published on World-Wide Web at URL http://www.trl.ibm.com/projects/security/ssp/main.html, June 2000.
[13] S. Forrest, A. Somayaji, and D. H. Ackley. Building di- verse computer systems. In 6th Workshop on Hot Topics in Operating Systems, pages 67–72, Los Alamitos, CA, 1997. IEEE Computer Society Press.
[14] J. S. Foster, M. Fa ̈hndrich, and A. Aiken. A theory of type qualifiers. In ACM SIGPLAN Conference on Program- ming Language Design and Implementation, Atlanta, GA, May 1999.
[15] R. Hastings and B. Joyce. Purify: A tool for detecting memory leaks and access errors in C and C++ programs. In USENIX Winter Conference, pages 125–138, Berkeley, CA, USA, January 1992.
[16] T. Jim, G. Morrisett, D. Grossman, M. Hicks, J. Cheney, and Y. Wang. Cyclone: a safe dialect of C. In USENIX Annual Technical Conference, Monterey, CA, June 2002.
[17] R. W. M. Jones and P. H. J. Kelly. Backwards-compatible bounds checking for arrays and pointers in C programs. In Third International Workshop on Automated Debugging. Linkoping University Electronic Press, 1997.
[18] S. Kaufer, R. Lopez, and S. Pratap. Saber-C: An interpreter-based programming environment for the C language. In USENIX Summer Conference, pages 161– 171, San Francisco, CA, June 1988.
[19] G. S. Kc, A. D. Keromytis, and V. Prevelakis. Counter- ing code-injection attacks with instruction-set randomiza- tion. In ACM conference on Computer and Communica- tions Security (CCS), pages 272–280, Washington, DC, October 2003.
[20] S. C. Kendall. Bcc: run–time checking for C programs. In USENIX Summer Conference, El. Cerrito, CA, 1983.
[21] D. Larochelle and D. Evans. Statically detecting likely buffer overflow vulnerabilities. In USENIX Security Sym- posium, Washington, DC, August 2001.
[22] S. McPeak, G. C. Necula, S. P. Rahul, and W. Weimer. CIL: Intermediate language and tools for C program anal- ysis and transformation. In Conference on Compiler Con- struction, 2002.
[23] G. C. Necula, S. McPeak, and W. Weimer. CCured: type-safe retrofitting of legacy code. In ACM Symposium on Principles of Programming Languages (POPL), pages 128–139, Portland, OR, January 2002.
[24] PaX. Published on World-Wide Web at URL http://pax.grsecurity.net, 2001.
[25] R. Rugina and M. Rinard. Symbolic bounds analysis of pointers, array indices, and accessed memory regions. In ACM SIGPLAN Conference on Programming Language Design and Implementation, pages 182–195, Vancouver, British Columbia, Canada, 2000.
[26] O. Ruwase and M. S. Lam. A practical dynamic buffer overflow detector. In Network and Distributed System Security Symposium, pages 159–169, San Diego, CA, February 2004.
[27] H. Shacham, M. Page, B. Pfaff, E.-J. Goh, N. Modadugu, and D. Boneh. On the effectiveness of address-space ran- domization. In ACM conference on Computer and Com- munications Security (CCS), pages 298 – 307, Washing- ton, DC, October 2004.
[28] J. L. Steffen. Adding run-time checking to the portable C compiler. Software-Practice and Experience, 22:305– 316, April 1992.
[29] D. Wagner, J. S. Foster, E. A. Brewer, and A. Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In Network and Distributed System Secu- rity Symposium, San Diego, CA, 2000.
[30] Webstone, the benchmark for web servers. http://www.mindcraft.com/webstone.
[31] J. Xu, Z. Kalbarczyk, and R. K. Iyer. Transparent run- time randomization for security. In Symposium on Reli- able and Distributed Systems (SRDS), Florence, Italy, Oc- tober 2003.
[32] W. Xu, D. C. Duvarney, and R. Sekar. An efficient and backwards-compatible transformation to ensure memory safety of C programs. In ACM SIGSOFT International Symposium on the Foundations of Software Engineering, Newport Beach, CA, November 2004.
[33] L. Xun. A linux executable editing li- brary. Masters Thesis, 1999. available at http://www.geocities.com/fasterlu/leel.htm.

## 206
Mondrian Memory Protection (2002)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.19.4473&rep=rep1&type=pdf

[1] Adobe Systems Incorporated. Adobe PDF Plugin, 2002. http://www.adobe.com/.
[2] Apache Software Foundation. mod perl, 2002. http://perl.apache.org/.
[3] A. W. Appel and K. Li. Virtual memory primitives for user programs. In Proceedings of ASPLOS-IV, April 1991.
[4] ARM Ltd. ARM940T Technical Reference Manual (Rev 2),
ARM DDI 0144B 2000.
[5] Burroughs Corporation. The Descriptor—a Definition of the
B5000 Information Processing System., 1961. http:// www.cs.virginia.edu/brochure/images/ manuals/b5000/descrip/descrip.html.
[6] M. Carlisle. Olden: Parallelizing Programs with Dynamic Data Structures on Distributed-Memory Machines. PhD thesis, Princeton University, 1996.
[7] N. P. Carter, S. W. Keckler, and W. J. Dally. Hardware support for fast capability-based addressing. In Proceedings of ASPLOS-VI, pages 319–327, San Jose, California, 1994.
[8] J. Chase. An Operating System Structure for Wide-Address Architectures. PhD thesis, University of Washington, 1995.
[9] H. K. J. Chu. Zero-copy TCP in Solaris. In USENIX Annual Technical Conference, pages 253–264, 1996.
[10] J. B. Dennis and E. C. V. Horn. Programming semantics for multiprogrammed computations. CACM, 9(3):143–155, March 1966.
[11] D. Grunwald and R. Neves. Whole-program optimization for time and space efficient threads. In Proceedings of ASPLOS-VII, Oct 1996.
[12] G. Heiser, K. Elphinstone, J. Vochteloo, S. Russell, and
J. Liedtke. The Mungi single-address-space operating system. Software—Practice and Experience, 28(9):901–928, 1998.
[13] M. E. Houdek, F. G. Soltis, and R. L. Hoffman. IBM System/38 support for capability-based addressing. In ISCA, pages 341–348, 1981.
[14] Intel Corporation. Volume 1: Basic architecture. Intel Architecture Software Developer’s Manual, Volume 1: Basic Architecture, 1997.
[15] G. Kane and J. Heinrich. MIPS RISC Architecture (R2000/R3000). Prentice Hall, 1992.
[16] E. J. Koldinger, J. S. Chase, and S. J. Eggers. Architectural support for single address space operating systems. In ASPLOS-V, pages 175–186, 1992.
[17] B. Lampson. Protection. In Proc. 5th Princeton Conf. on Information Sciences and Systems, 1971.
[18] H. M. Levy. Capability-Based Computer Systems. Digital Press, Bedford, Massachusetts, 1984.
[19] H. Lieberman and C. Hewitt. A real-time garbage collector based on the lifetimes of objects. In Communications of the ACM 23(6):419–429, 1983.
[20] K. Mackenzie, J. Kubiatowicz, M. Frank, W. Lee, V. Lee,
A. Agarwal, and M. F. Kaashoek. Exploiting two-case delivery for fast protected messaging. In HPCA, pages 231–242, 1998.
[21] G. C. Necula. Proof-carrying code. In POPL ’97, pages 106–119, Paris, Jan. 1997.
[22] NS Notes and Documentation. http://www.isi.edu/vint/nsnam/, 2000.
[23] V. S. Pai, P. Druschel, and W. Zwaenepoel. IO-Lite: a unified I/O buffering and caching system. ACM Transactions on Computer Systems, 18(1):37–66, 2000.
[24] Rational Software Corporation. Purify, 2002. http://www.rational.com/media/products/ pqc/D610 PurifyPlus unix.pdf.
[25] M. Rinard and et al. The FLEX compiler infrastructure. 1999–2001.
http://www.flex-compiler.lcs.mit.edu.
[26] J. Saltzer. Protection and the control of information sharing in Multics. Comm. ACM 17, 7 (July 1974), 388–402, 1974.
[27] D. Scales, K. Gharachorloo, and C. Thekkath. Shasta: A low overhead, software-only approach for supporting finegrain shared memory. In Proceedings of ASPLOS-VII, Oct 1996.
[28] I. Schoinas, B. Falsafi, A. R. Lebeck, S. K. Reinhardt, J. R. Larus, and D. A. Wood. Fine-grain access control for distributed shared memory. In ASPLOS-VI, 1994.
[29] J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: a fast capability system. In SOSP, pages 170–185, 1999.
[30] T. von Eicken, A. Basu, V. Buch, and W. Vogels. U-net: A user-level network interface for parallel and distributed computing. In Symposium on Operating Systems Principles, pages 303–316, 1995.
[31] T. von Eicken, C.-C. Chang, G. Czajkowski, C. Hawblitzel, D. Hu, and D. Spoonhower. J-kernel: A capability-based operating system for Java. In Secure Internet Programming, pages 369–393, 1999.
[32] D. Wagner, J. S. Foster, E. A. Brewer, and A. Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In Network and Distributed System Security Symposium, pages 3–17, San Diego, CA, February 2000.
[33] R. Wahbe. Efficient data breakpoints. In Proceedings of ASPLOS-V, Oct 1992.
[34] R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham. Efficient software-based fault isolation. ACM SIGOPS Operating Systems Review, 27(5):203–216, December 1993.
[35] C. Yarvin, R. Bukowski, and T. Anderson. Anonymous RPC: Low-latency protection in a 64-bit address space. In USENIX Summer, pages 175–186, 1993.
[36] C. B. Zilles. Benchmark health considered harmful. Computer Architecture News, 29(3), 2001.

## 207
Remus: High Availability via Asynchronous Virtual Machine Replication,” (2008)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.1054.5209&rep=rep1&type=pdf

[1] BARAK, A., AND WHEELER, R. Mosix: an integrated multipro- cessor unix. 41–53.
[2] BARHAM, P., DRAGOVIC, B., FRASER, K., HAND, S., HARRIS, T., HO, A., NEUGEBAUER, R., PRATT, I., AND WARFIELD, A. Xen and the art of virtualization. In SOSP ’03: Proceedings of the nineteenth ACM symposium on Operat- ing systems principles (New York, NY, USA, 2003), ACM Press, pp. 164–177.
[3] BRADFORD, R., KOTSOVINOS, E., FELDMANN, A., AND SCHIO ̈BERG, H. Live wide-area migration of virtual machines including local persistent state. In VEE ’07: Proceedings of the 3rd international conference on Virtual execution environments (New York, NY, USA, 2007), ACM Press, pp. 169–179.
[4] BRESSOUD, T. C., AND SCHNEIDER, F. B. Hypervisor-based fault-tolerance. In Proceedings of the Fifteenth ACM Symposium on Operating System Principles (December 1995), pp. 1–11.
[5] CHANDRA, S., AND CHEN, P. M. The impact of recovery mechanisms on the likelihood of saving corrupted state. In IS- SRE ’02: Proceedings of the 13th International Symposium on Software Reliability Engineering (ISSRE’ 02) (Washington, DC, USA, 2002), IEEE Computer Society, p. 91.
[6] CLARK, C., FRASER, K., HAND, S., HANSEN, J. G., JUL, E., LIMPACH, C., PRATT, I., AND WARFIELD, A. Live migration of virtual machines. In Proceedings of the 2nd conference on Sym- posium on Networked Systems Design & Implementation (Berke- ley, CA, USA, 2005), USENIX Association.
[7] CULLY, B., AND WARFIELD, A. Secondsite: disaster protection for the common server. In HOTDEP’06: Proceedings of the 2nd conference on Hot Topics in System Dependability (Berkeley, CA, USA, 2006), USENIX Association.
[8] D U N L A P, G . Execution Replay for Intrusion Analysis. PhD the- sis, University of Michigan, 2006.
[9] DUNLAP, G. W., KING, S. T., CINAR, S., BASRAI, M. A., AND CHEN, P. M. Revirt: Enabling intrusion analysis through virtual- machine logging and replay. In Proceedings of the 5th Sym- posium on Operating Systems Design & Implementation (OSDI 2002) (2002).
[10] GUPTA, D., YOCUM, K., MCNETT, M., SNOEREN, A. C., VAHDAT, A., AND VOELKER, G. M. To infinity and beyond: time warped network emulation. In SOSP ’05: Proceedings of the twentieth ACM symposium on Operating systems principles (2005).
[11] HOWARD, J. H., KAZAR, M. L., MENEES, S. G., NICHOLS, D. A., SATYANARAYANAN, M., SIDEBOTHAM, R. N., AND WEST, M. J. Scale and performance in a distributed file system. ACM Transactions on Computer Systems 6, 1 (1988), 51–81.
[12] H P . NonStop Computing. http://h20223.www2.hp.com/non- stopcomputing/cache/76385-0-0-0-121.aspx.
[13] KING, S. T., DUNLAP, G. W., AND CHEN, P. M. Debug- ging operating systems with time-traveling virtual machines. In ATEC’05: Proceedings of the USENIX Annual Technical Confer- ence 2005 on USENIX Annual Technical Conference (Berkeley, CA, USA, 2005), USENIX Association.
[14] Lvm2. http://sources.redhat.com/lvm2/.
[15] MARQUES, D., BRONEVETSKY, G., FERNANDES, R., PIN- GALI, K., AND STODGHILL, P. Optimizing checkpoint sizes in the c3 system. In 19th International Parallel and Distributed Processing Symposium (IPDPS 2005) (April 2005).
[16] MCHARDY, P. Linux imq. http://www.linuximq.net/.
[17] MEYER, D., AGGARWAL, G., CULLY, B., LEFEBVRE, G., HUTCHINSON, N., FEELEY, M., AND WARFIELD, A. Parallax: Virtual disks for virtual machines. In EuroSys ’08: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2008 (New York, NY, USA, 2008), ACM.
[18] MULLENDER, S. J., VAN ROSSUM, G., TANENBAUM, A. S., VAN RENESSE, R., AND VAN STAVEREN, H. Amoeba: A dis- tributed operating system for the 1990s. Computer 23, 5 (1990), 44–53.
[19] netem. http://linux-net.osdl.org/index.php/Netem.
[20] NIGHTINGALE, E. B., CHEN, P. M., AND FLINN, J. Specu- lative execution in a distributed file system. In SOSP ’05: Pro- ceedings of the twentieth ACM symposium on Operating systems principles (New York, NY, USA, 2005), ACM Press, pp. 191– 205.
[21] NIGHTINGALE, E. B., VEERARAGHAVAN, K., CHEN, P. M., AND FLINN, J. Rethink the sync. In USENIX’06: Proceed- ings of the 7th conference on USENIX Symposium on Operating Systems Design and Implementation (Berkeley, CA, USA, 2006), USENIX Association.
[22] OSMAN, S., SUBHRAVETI, D., SU, G., AND NIEH, J. The design and implementation of zap: a system for migrating com- puting environments. SIGOPS Oper. Syst. Rev. 36, SI (2002), 361–376.
[23] OUSTERHOUT, J. K., CHERENSON, A. R., DOUGLIS, F., NEL- SON, M. N., AND WELCH, B. B. The sprite network operating system. Computer 21, 2 (1988), 23–36.
[24] P E N G , G . Distributed checkpointing. Master’s thesis, University of British Columbia, 2007.
[25] RASHID, R. F., AND ROBERTSON, G. G. Accent: A communi- cation oriented network operating system kernel. In SOSP ’81: Proceedings of the eighth ACM symposium on Operating systems principles (New York, NY, USA, 1981), ACM Press, pp. 64–75.
[26] REISNER, P., AND ELLENBERG, L. Drbd v8 – replicated storage with shared disk semantics. In Proceedings of the 12th Interna- tional Linux System Technology Conference (October 2005).
[27] RUSSELL, R. Netfilter. http://www.netfilter.org/.
[28] SCHINDLER, J., AND GANGER, G. Automated disk drive char- acterization. Tech. Rep. CMU SCS Technical Report CMU-CS- 99-176, Carnegie Mellon University, December 1999.
[29] STELLNER, G. CoCheck: Checkpointing and Process Migration for MPI. In Proceedings of the 10th International Parallel Pro- cessing Symposium (IPPS ’96) (Honolulu, Hawaii, 1996).
[30] SYMANTEC CORPORATION. Veritas Cluster Server for VMware ESX. http://eval.symantec.com/mktginfo/products/Datasheets /High Availability/vcs22vmware datasheet.pdf, 2006.
[31] VMWARE, INC. Vmware high availability (ha). http://www.vmware.com/products/vi/vc/ha.html, 2007.
[32] WARFIELD, A. Virtual Devices for Virtual Machines. PhD thesis, University of Cambridge, 2006.
[33] WARFIELD, A., ROSS, R., FRASER, K., LIMPACH, C., AND H A N D , S . Parallax: managing storage for a million machines. In HOTOS’05: Proceedings of the 10th conference on Hot Top- ics in Operating Systems (Berkeley, CA, USA, 2005), USENIX Association.
[34] XU, M., BODIK, R., AND HILL, M. D. A ”flight data recorder” for enabling full-system multiprocessor deterministic replay. In ISCA ’03: Proceedings of the 30th annual international sym- posium on Computer architecture (New York, NY, USA, 2003), ACM Press, pp. 122–135.
[35] YANG, Q., XIAO, W., AND REN, J. Trap-array: A disk array architecture providing timely recovery to any point-in-time. In ISCA ’06: Proceedings of the 33rd annual international sympo- sium on Computer Architecture (Washington, DC, USA, 2006), IEEE Computer Society, pp. 289–301.

## 208
Channel Access Algorithms with Active Link Protection for Wireless Communication Networks with Power Control (2000)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.24.3701&rep=rep1&type=pdf

[1] J. M. Aein, “Power balancing in systems employing frequency reuse,” COMSAT Tech. Rev., pp. 277–299, 1973.
[2] H. Alavi and R. W. Nettleton, “Downstream power control for a spread spectrum cellular mobile radio system,” in Proc. IEEE GLOBECOMM’82, pp. 84–88.
[3] J. Zander, “Distributed cochannel interference control in cellular radio systems,” IEEE Tran. Veh. Tech., vol. 41, pp. 305–311, Mar. 1992.
[4] S. Grandhi, R. Vijayan, and D. J. Goodman, “A distributed algorithm for
power control in cellular radio systems,” in Proc. 30th Allerton Conf.,
Monticello, IL, 1992.
[5] S. C. Chen, N. Bambos, and G. J. Pottie, “Admission control schemes for
wireless communication networks with adjustable transmitter powers,”
in Proc. IEEE INFOCOM’94, Toronto, Canada.
[6] , “On distributed power control for radio networks,” in Proc.
ICC’94, New Orleans, LA.
[7] G. J. Foschini and Z. Miljanic, “A simple distributed autonomous power
control algorithm and its convergence,” IEEE Trans. Veh. Tech., vol. 42,
pp. 641–646, Apr. 1993.
[8] , “Distributed autonomous wireless channel assignment with power
control,” Preprint.
[9] S. C. Chen, N. Bambos, and G. J. Pottie, “On power control with active
link quality protection in wireless communication networks,” presented at the Princeton Conf. Inform. Syst., Princeton Univ., Princeton, NJ, Mar. 1994.
[10] N. Bambos, S. C. Chen, and G. J. Pottie, “Radio link admission algo- rithms for wireless networks with power control and active link quality protection,” in Proc. IEEE INFOCOM’95, Boston, MA, 1995.
[11] D. Mitra, “An asynchronous distributed algorithm for power control in cellular radio systems,” in Proc. 4th WINLAB Workshop, Rutgers Uni- versity, New Brunswick, NJ, 1993.
[12] D. Mitra and A. Morrison, “A distributed power control algorithm for bursty transmissions in cellular, spread spectrum wireless networks,” in Proc. 5th WINLAB Workshop, Rutgers University, New Brunswick, NJ, 1995.
[13] , “A novel distributed power control algorithm for classes of service in cellular CDMA networks,” Preprint.
[14] N. Bambos and G. J. Pottie, “On power control in high capacity cellular radio networks,” in Proc. IEEE GLOBECOMM’92, vol. 2, pp. 863–867. [15] M. Andersin, Z. Rosberg, and J. Zander, “Gradual removals in cellular PCS with constrained power control and noise,” Wireless Networks, vol.
2, no. 1, pp. 27–43, 1996.
[16] , “Distributed discrete power control in cellular PCS,” Royal Insti-
tute of Technology, Sweden, Tech. Rep. TRITA-IT R 94-23, 1994. [17] , “Soft and safe admission control in cellular networks,” IEEE/ACM
Trans. Networking, vol. 5, pp. 255–265, Apr. 1997.
[18] M.Andersin,“Powercontrolandadmissioncontrolincellularradiosys-
tems,” Ph.D. dissertation, Royal Institute of Technology, Sweden, 1996. [19] E. Seneta, Non-Negative Matrices. London, U.K.: G. Allen, 1973. [20] M.B.Pursley,“Theroleofspreadspectruminpacketradionetworks,”
Proc. IEEE, vol. 75, Jan. 1987.
[21] N. Bambos, “Toward power-sensitive network architectures in wireless
communications: Concepts, issues and design aspects,” IEEE Personal Commun. Mag., vol. 5, pp. 50–59, Mar. 1998.
Average admission delay versus the maximum transmitter power
[22] F. R. Gantmacher, The Theory of Matrices. 1971.New York, NY: Chelsea,
[23] S. Hanly, “Capacity and power control in a spread spectrum macro di- versity radio networks,” IEEE Trans. Commun., vol. 44, pp. 247–256, Feb. 1996.
[24] , “An algorithm for combined cell-site selection and power control to maximize cellular spread spectrum capacity,” IEEE J. Select. Areas Commun., vol. 13, pp. 1332–1340, July 1995.
[25] R.YatesandC.Y.Huang,“Integratedpowercontrolandbasestationas- signment,” IEEE Trans. Veh. Technol., vol. 44, pp. 638–644, Mar. 1995. [26] , “Constrained power control and base station assignment in cellular
radio systems,” Preprint
[27] R. Yates, “A framework for uplink power control in cellular radio sys- tems,” IEEE J. Select. Areas Commun., vol. 13, pp. 1341–1347, July 1995.
[28] S. Grandhi, R. Yates, and J. Zander, “Constrained Power Control,” Wire- less Commun., vol. 2, no. 3, Aug. 1995.
[29] N. Bambos, S. Chen, and D. Mitra, “Channel probing for distributed access control in wireless communication networks,” in Proc. IEEE GLOBECOM’95, Singapore, Nov. 1995, pp. 322–326.
[30] N. Bambos, S. C. Chen, and G. J. Pottie, “Radio link admission algo- rithms for wireless networks with power control and active link quality protection,” School of Engineering and Applied Science, Univ. Cali- fornia, Los Angeles, CA, Tech. Rep. UCLA-ENG-94-25, Mar. 1994.

## 209
A linear time algorithm for deciding subject security (1977)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.149.4807&rep=rep1&type=pdf

l COHEN, E Problems, mechanisms and solutions Ph D Th (in progress), Carnegle-MeUon U , Pitts- burgh, Pa , 1976
2 DENmNG,P J , AND GRAHAM, G S Protection-principles and practice Proc AFIPS 1972 SJCC, Vol 40, AFIPS Press, Montvale, N J , pp 417-429
3 HARRISON, m A , Ruzzo, W L , AND ULLMAN, J D On protection in operating systems Operating Syst Rev (ACM S1GOPS Newsletter), 9, 5 (1975), 14-24
4 JONES, A K Protection In programmed systems Ph D Th , Carnegie-Mellon U., Pittsburgh, Pa , 1973. 5 JONES,AK, LIerON,RJ, ANDSNeDER,L AhneartimealgorithmfordecidingsubJect-objectsecurity
Proc 17th Annual FOCS Conf, Houston, 1976, pp 33-41.
6 LI~ON, R J , ANDSN~CDER,L Synchronization and security In preparation, 1976

## 210
The Rio File Cache: Surviving Operating System Crashes (1996)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.142.4371&rep=rep1&type=pdf

[Abbott94] M.Abbott, D.Har, L.Herger, M.Kauffmann, K.Mak, J.Murdock, C.Schulz, T.B. Smith, B. Tremaine, D. Yeh, and L. Wong. Durable Memory RS/6000 System Design. In Proceedings of the
 The Rio File Cache: Surviving Operating System Crashes 9, 1994 International Symposium on Fault-Tolerant Computing, pages 414–423, 1994.
[Akyurek95] Sedat Akyurek and Kenneth Salem. Management of partially safe buffers. IEEE Transactions on
Computers, 44(3):394–407, March 1995.
[APC96]The Power Protection Handbook. American Power Conversion, 1996.
[Baker91]Mary G. Baker, John H. Hartman, Michael D. Kupfer, Ken W. Shirriff, and John K. Ousterhout. Mea- surements of a Distributed File System. In Proceedings of the 13th ACM Symposium on Operating Systems Principles, pages 198–212, October 1991.
[Baker92a] Mary Baker, Satoshi Asami, Etienne Deprit, John Ousterhout, and Margo Seltzer. Non-Volatile Mem- ory for Fast Reliable File Systems. In Fifth International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS-V), pages 10–22, October 1992.
[Baker92b] Mary Baker and Mark Sullivan. The Recovery Box: Using Fast Recovery to Provide High Availability in the UNIX Environment. In Proceedings USENIX Summer Conference, June 1992.
[Banatre91] Michel Banatre, Gilles Muller, Bruno Rochat, and Patrick Sanchez. Design decisions for the FTM: a general purpose fault tolerant machine. In Proceedings of the 1991 International Symposium on Fault- Tolerant Computing, pages 71–78, June 1991.
[Barton90] James H. Barton, Edward W. Czeck, Zary Z. Segall, and Daniel P. Siewiorek. Fault injection experi- ments using FIAT. IEEE Transactions on Computers, 39(4):575–582, April 1990.
[Biswas93] Prabuddha Biswas, K. K. Ramakrishnan, Don Towsley, and C. M. Krishna. Performance Analysis of Distributed File Systems with Non-Volatile Caches. In Proceedings of the 1993 International Sympo- sium on High Performance Distributed Computing (HPDC-2), pages 252–262, July 1993.
[Chapin95] John Chapin, Mendel Rosenblum, Scott Devine, Tirthankar Lahiri, Dan Teodosiu, and Anoop Gupta. Hive: Fault Containment for Shared-Memory Multiprocessors. In Proceedings of the 1995 Sympo- sium on Operating Systems Principles, December 1995.
[Chutani92] Sailesh Chutani, Owen T. Anderson, Michael L. Kazar, Bruce W. Leverett, W. Anthony Mason, and Robert N. Sidebotham. The Episode File System. In Proceedings of the 1992 Summer USENIX Con- ference, pages 43–60, January 1992.
[Copeland89] George Copeland, Tom Keller, Ravi Krishnamurthy, and Marc Smith. The Case for Safe RAM. In Proceedings of the Fifteenth International Conference on Very Large Data Bases, pages 327–335, August 1989.
[DEC94]  DEC 3000 300/400/500/600/700/800/900 AXP Models System Programmer’s Manual. Technical re- port, Digital Equipment Corporation, July 1994.
[DEC95] August 1995. Digital Unix development team, Personal Communication.
[DeWitt84] D. J. DeWitt, R. H. Katz, F. Olken, L. D. Shapiro, M. R. Stonebraker, and D. Wood. Implementation Techniques for Main Memory Database Systems. In Proceedings of the 1984 ACM SIGMOD Inter- national Conference on Management of Data, pages 1–8, June 1984.
[Gait90] Jason Gait. Phoenix: A Safe In-Memory File System. Communications of the ACM, 33(1):81–86, Jan- uary 1990.
[Ganger94] Gregory R. Ganger and Yale N. Patt. Metadata Update Performance in File Systems. 1994 Operating Systems Design and Implementation (OSDI), November 1994.
Gray90] Jim Gray. A Census of Tandem System Availability between 1985 and 1990. IEEE Transactions on Reliability, 39(4), October 1990.
[[Hartman93]John H. Hartman and John K. Ousterhout. Letter to the Editor. Operating Systems Review, 27(1):7–9, January 1993.
[Howard88]John H. Howard, MichaelL. Kazar, SherriG. Menees, DavidA. Nichols, M.Satyanarayanan, Robert N. Sidebotham, and Michael J. West. Scale and Performance in a Distributed File System. ACM Transactions on Computer Systems, 6(1):51–81, February 1988.
[Iyer95] Ravishankar K. Iyer. Experimental Evaluation. In Proceedings of the 1995 International Symposium on Fault-Tolerant Computing, pages 115–132, July 1995.
[Johnson82] Mark Scott Johnson. Some Requirements for Architectural Support of Software Debugging. In Pro- ceedings of the 1982 International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 140–148, April 1982.
[Kanawati95] Ghani A. Kanawati, Nasser A. Kanawati, and Jacob A. Abraham. FERRARI: A Flexible Software- Based Fault and Error Injection System. IEEE Transactions on Computers, 44(2):248–260, February
 The Rio File Cache: Surviving Operating System Crashes 10
[Kane92] [Kao93]
[Kessler90] [Lee93]
[Leffler89]
[Liskov91]
[McKusick90] [Moran90] [Needham83] [Ohta90] [Ousterhout85]
Gerry Kane and Joe Heinrich. MIPS RISC Architecture. Prentice Hall, 1992.
Wei-Lun Kao, Ravishankar K. Iyer, and Dong Tang. FINE: A Fault Injection and Monitoring Envi- ronment for Tracing the UNIX System Behavior under Faults. IEEE Transactions on Software Engi- neering, 19(11):1105–1118, November 1993.
Peter B. Kessler. Fast breakpoints: Design and implementation. In Proceedings of the 1990 Confer- ence on Programming Language Design and Implementation (PLDI), pages 78–84, June 1990.
Inhwan Lee and Ravishankar K. Iyer. Faults, Symptoms, and Software Fault Tolerance in the Tandem GUARDIAN Operating System. In International Symposium on Fault-Tolerant Computing (FTCS), pages 20–29, 1993.
Samuel J. Leffler, Marshall Kirk McKusick, Michael J. Karels, and John S. Quarterman. The Design and Implementation of the 4.3BSD Unix Operating System. Addison-Wesley Publishing Company, 1989.
Barbara Liskov, Sanjay Ghemawat, Robert Gruber, Paul Johnson, Liuba Shrira, and Michael Will- iams. Replication in the Harp File System. In Proceedings of the 1991 Symposium on Operating Sys- tem Principles, pages 226–238, October 1991.
Marshall Kirk McKusick, Michael J. Karels, and Keith Bostic. A Pageable Memory Based Filesys- tem. In Proceedings USENIX Summer Conference, June 1990.
J. Moran, Russel Sandberg, D. Coleman, J. Kepecs, and Bob Lyon. Breaking Through the NFS Per- formance Barrier. In Proceedings of EUUG Spring 1990, April 1990.
R. M. Needham, A. J. Herbert, and J. G. Mitchell. How to Connect Stable Memory to a Computer. Operating System Review, 17(1):16, January 1983.
Masataka Ohta and Hiroshi Tezuka. A Fast /tmp File System by Delay Mount Option. In Proceedings USENIX Summer Conference, pages 145–150, June 1990.
John K. Ousterhout, Herve Da Costa, et al. A Trace-Driven Analysis of the UNIX 4.2 BSD File Sys- tem. In Proceedings of the 1985 Symposium on Operating System Principles, pages 15–24, December 1985.
John K. Ousterhout. Why aren’t operating systems getting faster as fast as hardware? In Proceedings USENIX Summer Conference, pages 247–256, June 1990.
1995.
[Ousterhout90]
[Rosenblum92] Mendel Rosenblum and John K. Ousterhout. The Design and Implementation of a Log-Structured File
System. ACM Transactions on Computer Systems, 10(1):26–52, February 1992.
[Silberschatz94] Abraham Silberschatz and Peter B. Galvin. Operating System Concepts. Addison-Wesley, 1994.
Richard L. Sites, editor. Alpha Architecture Reference Manual. Digital Press, 1992.
Amitabh Srivastava and Alan Eustace. ATOM: A System for Building Customized Program Analysis Tools. In Proceedings of the 1994 Conference on Programming Language Design and Implementa- tion (PLDI), pages 196–205, June 1994.
Mark Sullivan and R. Chillarege. Software Defects and Their Impact on System Availability–A Study of Field Failures in Operating Systems. In Proceedings of the 1991 International Symposium on Fault- Tolerant Computing, June 1991.
[Sullivan95]
[Tanenbaum95] Andrew S. Tanenbaum. Distributed Operating Systems. Prentice-Hall, 1995.
[Sites92] [Srivastava94]
[Sullivan91]
[Wahbe92] [Wahbe93]
[Wu94]
Robert Wahbe. Efficient Data Breakpoints. In Proceedings of the 1992 International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), October 1992.
Robert Wahbe, Steven Lucco, Thomas E. Anderson, and Susan L. Graham. Efficient Software-Based Fault Isolation. In Proceedings of the 14th ACM Symposium on Operating Systems Principles, pages 203–216, December 1993.
Michael Wu and Willy Zwaenepoel. eNVy: A Non-Volatile, Main Memory Storage System. In Pro- ceedings of the 1994 International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), October 1994.
Mark Sullivan, December 1995. personal communication.
 The Rio File Cache: Surviving Operating System Crashes 11

## 211
Detection and Localization of Sybil Nodes in VANETs ∗
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.111.4836&rep=rep1&type=pdf

[1] 5.9GHzDSRC. http://grouper.ieee.org/groups/scc32/dsrc/index.html.
[2] J.J.Blum,A.Eskandarian,andL.J.Hoffman.Challengesof intervehicle ad hoc networks. IEEE Transactions on Intelligent Transportation Systems, Volume 5, Issue 4, Dec. 2004, pp. 347 - 351.
[3] B.ParnoandA.Perrig.ChallengesinSecuringVehicularNetworks. In Proc. of the Fourth Workshop on Hot Topics in Networks (HotNets-IV), 2005.
[4] M.RayaandJ.-P.Hubaux.TheSecurityofVehicularNetworks.In Proc. of the 3rd ACM workshop on Security of ad hoc and sensor networks (SASN 2005), pp. 11-21, 2005.
[5] J.P. Hubaux, S. Capkun, and J. Luo. The Security and Privacy of Smart Vehicles. IEEE Security and Privacy Magazine, 2(3):49-55, May-June 2004.
[6] Y.ZhangandW.Lee.IntrusionDetectioninWirelessAd-Hoc Networks. In Proc. ACM MobiCom, 2000.
[7] J.Newsome,E.Shi,D.Song,andA.Perrig.TheSybilAttackin Sensor Networks: Analysis & Defenses. In Proc. of the Third International Symposium on Information Processing in Sensor Networks (IPSN 2004), pp. 259-268, 2004.
[8] S. Brands and D. Chaum. Distance-Bounding Protocols. In Proc. of Workshop on the theory and application of cryptographic techniques on Advances in cryptology. Springer-Verlag, Inc., pp. 344-359, 1994.
[9] P.BahlandV.N.Padmanabhan.RADAR:AnInbuildingRF-based User Location and Tracking System. In Proc. of IEEE INFOCOM 2000, pp. 775-784, 2000.
[10] N.Sastry,U.Shankar,andD.Wagner.SecureVerificationof Location Claims. In Proc. of the 2003 ACM workshop on Wireless Security (WiSe 2003), pp. 1-10, 2003.
[11] P. Golle, D. Greene, and J. Staddon. Detecting and Correcting Malicious Data in VANETs. In Proc. of the 1st ACM international workshop on Vehicular ad hoc networks (VANET 2004), pp. 29-37, 2004.
[12] G.Zhou,T.He,S.Krishnamurthy,J.A.Stankovic.ImpactofRadio Irregularity on Wireless Sensor Networks. In Proc. of the 2nd international conference on Mobile systems, applications, and services (MobiSys 2004), pp. 125-138, 2004.
[13] S. Capkun and J.-P. Hubaux. Secure Positioning of Wireless Devices with Application to Sensor Networks. In Proc. of Infocom 2005, pp. 1917-1928, 2005.
[14] T.S.Rappaport.Wirelesscommunications,principlesandpractice. Prentice Hall, 1996.
[15] R.M.Yadumurthy,A.Chimalakonda,M.Sadashivaiah,andR. Makanaboyina. Reliable MAC Broadcast Protocol in Directional and Omni-directional Transmissions for Vehicular Ad hoc Networks. In Proc. of the 2nd ACM international workshop on Vehicular ad hoc networks (VANET 2005), pp. 10-19 , 2005.
[16] H. Wu, R. Fujimoto, R. Guensler, and M. Hunter. MDDV: A Mobility-Centric Data Dissemination Algorithm for Vehicular Networks. In Proc. of the 1st ACM international workshop on Vehicular ad hoc networks (VANET 2004), pp. 47-56, 2004.
[17] M.Torrent-Moreno,H.Hartenstein,P.Santi.FairSharingof Bandwidth in VANETs. In Proc. of ACM Workshop on Vehicular Ad Hoc Networks (VANET 2005), pp. 49-58, 2005.
[18] G.KorkmazandE.Ekici.UrbanMulti-hopBroadcastProtocolfor Inter-Vehicle Communication Systems. In Proc. of the 1st ACM international workshop on Vehicular ad hoc networks (VANET 2004), pp. 76-85, 2004.

## 212
A time-scale decomposition approach to adaptive ECN marking,” presented at the INFOCOM 2001 (2001)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.659.7962&rep=rep1&type=pdf


[1] R. J. Gibbens and F. P. Kelly, “Resource pricing and the evolution of congestion control,” Automatica, 1999.
[2] F. P. Kelly, P. Key, and S. Zachary, “Distributed admission control,” IEEE J. Select. Areas Commun., vol. 18, pp. 2617–2628, Dec. 2000.
[3] K. K. Ramakrishnan and S. Floyd, “A proposal to add explicit conges- tion notification (ECN) to IP,”, Jan. 1999. RFC 2481.
[4] F. P. Kelly, A. Maulloo, and D. Tan, “Rate control in communication networks: shadow prices, proportional fairness and stability,” J. Oper. Res. Soc., vol. 49, pp. 237–252, 1998.
[5] S. H. Low and D. E. Lapsley, “Optimization flow control I: Basic al- gorithm and convergence,” IEEE/ACM Trans. Networking, vol. 7, pp. 861–875, Dec. 1999.
[6] S. Kunniyur and R. Srikant, “End-to-end congestion control: Utility functions, random losses and ECN marks,” presented at the INFOCOM 2000, Tel Aviv, Israel, Mar. 2000.
[7] S. Athuraliya, D. E. Lapsley, and S. H. Low, “Random early marking for Internet congestion control,” Proc. IEEE GLOBECOM, 1999.
[8] D. D. Botvich and N. G. Duffield, “Large deviations, economies of scale, and the shape of the loss curve in large multiplexers,” Queueing Syst., vol. 20, pp. 293–320, 1995.

[9] D. Bertsekas, Nonlinear Programming. tific, 1999.
[10] H. Khalil, Nonlinear Systems, 2nd ed.
Belmont, MA: Athena Scientific, 1999 Upper Saddle River, NJ: Prentice-Hall, 1996.
[11] S. Kunniyur and R. Srikant, “A time-scale decomposition approach to adaptive ECN marking,” presented at the INFOCOM 2001, Anchorage, Alaska, Apr. 2001.
[12] F. P. Kelly, “Charging and rate control for elastic traffic,” Euro. Trans. Telecommun., vol. 8, pp. 33–37, 1997.
[13] S. Kunniyur and R. Srikant, “Analysis and design of an adaptive virtual queue (AVQ) algorithm for active queue management,” presented at the Proc. SIGCOMM 2001, San Deigo, CA, Aug. 2001.
[14] A. Saberi and H. Khalil, “Quadratic-type Lyapunov functions for singu- larly perturbed systems,” IEEE Trans. Automat. Contr., vol. AC-29, pp. 542–550, June 1984.
[15] N. N. Krasovski ̆i, Stability of Motion. Press, 1963.

## 213
Implementing an Untrusted Operating System on Trusted Hardware (2003)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.11.2554&rep=rep1&type=pdf

[1] M. J. Accetta, R. V. Baron, W. Bolosky, D. B. Golub, R. F. Rashid, A. Tevanian, and M. W. Young. Mach: A new kernel foundation for UNIX development. In Proceedings of Sum- mer Usenix, July 1986.
[2] W. Arbaugh, D. Farber, and J. Smith. A secure and reliable bootstrap architecture. In Proceedings of the 1997 IEEE Sym- posium on Security and Privacy, pages 65–71, May 1997.
[3] B.Barak,O.Goldreich,R.Impagliazzo,S.Rudich,A.Sahai, S. Vadhan, and K. Yang. On the (im)possibility of obfus- cating programs. Lecture Notes in Computer Science, 2139, 2001.
[4] Business Software Alliance, 2003. http://www.bsa.org.
[5] P. England, J. DeTreville, and B. Lampson. Digital rights management operating system. U.S. Patent 6,330,670, Dec. 2001.
[6] P. England, J. DeTreville, and B. Lampson. Loading and identifying a digital rights management operating system. U.S. Patent 6,327,652. Dec. 2001.
[7] D. R. Engler, M. F. Kaashoek, and J. O’Toole. Exokernel: An operating system architecture for application-level resource management. In Proceedings of the 15th ACM Symposium on Operating Systems Principles, pages 251–266, 1995.
[8] B. Gassend, E. Suh, D. Clarke, M. van Dijk, and S. Devadas. Caches and Merkle trees for efficient memory authentica- tion. In Ninth International Symposium on High Performance Computer Architecture, pages 295–306, 2003.
[9] T. Gilmont, J. Legat, and J. Quisquater. An architecture of security management unit for safe hosting of multiple agents. In Proceedings of the International Workshop on Intelligent Communications and Multimedia Terminals, pages 79–82, Nov. 1998.
[10] T.Gilmont,J.Legat,andJ.Quisquater.Hardwaresecurityfor software privacy support. Electronics Letters, 35(24):2096– 2097, Nov. 1999.
[11] J. Heinrich. MIPS R10000 Microprocessor User’s Manual, 2.0 edition, 1996.
[12] S. A. Herrod. Using Complete Machine Simulation to Un- derstand Computer System Behavior. PhD thesis, Stanford University, Feb. 1998.
[13] B. Kaliski Jr. and M. Robshaw. Message authentication with MD5. CryptoBytes, 1(1):5–8, 1995.
[14] H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-hashing for message authentication. http://www.ietf.org/rfc/rfc2104.txt, Febru- ary 1997.
[15] M. Kuhn. The TrustNo1 cryptoprocessor concept. Technical Report CS555, Purdue University, Apr. 1997.
[16] B. Lampson, M. Abadi, M. Burrows, and E. Wobber. Au- thentication in distributed systems: Theory and practice. Pro- ceedings of the 13th ACM Symposium on Operating Systems Principles, 10(4):265–310, 1992.
[17] D. Lie, J. Mitchell, C. Thekkath, and M. Horowitz. Specify- ing and verifying hardware for tamper-resistant software. In Proceedings of the 2003 IEEE Symposium on Security and Privacy, May 2003.
[18] D. Lie, C. Thekkath, M. Mitchell, P. Lincoln, D. Boneh, J. Mitchell, and M. Horowitz. Architectural support for copy and tamper resistant software. In Proceedings of the 9th In- ternational Conference Architectural Support for Program- ming Languages and Operating Systems, pages 168–177, Nov. 2000.
[19] U. Maheshwari, R. Vingralek, and W. Shapiro. How to build a trusted database system on untrusted storage. Technical Report STAR-TR-00-03, InterTrust, 2000.
[20] R. Rivest, A. Shamir, and L. Adleman. A method for obtain- ing digital signatures and public key cryptosystems. Commu- nications of the ACM, 21(18):120–126, 1978.
[21] J.Rushby.Designandverificationofsecuresystems.InPro- ceedings of the 8th ACM Symposium on Operating Systems Principles, volume 15, pages 12–21, 1981.
[22] J.SaltzerandM.Schroeder.Theprotectionofinformationin computer systems. IEEE, 63(9):1278–1308, Sept. 1975.
[23] SGI IRIX 6.5: Home Page, May 2003.
http://www.sgi.com/software/irix6.5.
[24] J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: a fast ca- pability system. In Proceedings of the 17th ACM Symposium
[25] S. W. Smith, E. R. Palmer, and S. Weingart. Using a high- performance, programmable secure coprocessor. In Financial Cryptography, pages 73–89, Feb. 1998.
[26] The Trusted Computing Platform Alliance, 2003. http://www.trustedpc.com.
[27] J. Tygar and B. Yee. Dyad: A system for using physically secure coprocessors. Technical Report CMU–CS–91–140R, Carnegie Mellon University, May 1991.
on Operating Systems Principles, pages 170–185, 1999.

## 214
Temporal Protection in Real-Time Operating Systems (1994)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.469.3825&rep=rep1&type=pdf

1. Agrawal, G., Chen, B., Zhao, W., Davari, S. "Guaranteeing Synchronous Message Deadlines in High Speed Token Ring Networks with Timed Token Protocol". Proceedings of IEEE International Conference on Distributed Computing Systems (1992).
2. T. E. Anderson, B. N. Bershad, E. D. Lazowska and H. M. Levy. "Scheduler Activations: Effective Kernel Support for the User-Level Management of Parallelism". ACM Transactions on Computer Systems 10, 1 (Feb 1992), 53-79.
3. M. J. Bach. The Design of the UNIX Operating System. Prentice-Hall, 1986.
4. Baker, T. "Stack-Based Scheduling of Realtime Processes". Journal of Real-Time Systems 3,
1 (March 1991), 67--100.
5. Burns, A. "Scheduling Hard Real-Time Systems: A Review". Software Engineering Journal (May 1991), 116-128.
6. K. Jeffay, D. L. Stone and F. D. Smith. "Kernel Support for Live Digital Audio and Video". Computer Communications (UK) 15, 6 (July-August 1992), 388-395.
7. Leffler, S. J., McKusick, M. K., Karels, M. J. and Quarterman, J. S. The Design and Implementation of the 4.3BSD UNIX Operating System. Addison-Wesley, 1989.
8. Lehoczky, J. P. "Fixed Priority Scheduling of Periodic Task Sets with Arbitrary Deadlines". IEEE Real-Time Systems Symposium (Dec. 1990).
9. Liu, C. L. and Layland J. W. "Scheduling Algorithms for Multiprogramming in a Hard Real Time Environment". JACM 20 (1) (1973), 46 - 61.
10. C. W. Mercer and S. Savage and H. Tokuda. Processor Capacity Reserves for Multimedia Operating Systems. Tech. Rept. CMU-CS-93-157, School of Computer Science, Carnegie Mellon University, May, 1993.
11. C. W. Mercer and S. Savage and H. Tokuda. Processor Capacity Reserves: An Abstraction for Managing Processor Usage. Proceedings of the Fourth Workshop on Workstation Operating Systems (WWOS-IV), Oct, 1993.
12. C. W. Mercer, J. Zelenka and R. Rajkumar. "Resource Reserves for Operating System Protocol Processing". Submitted for publication (January 1994).
13. S. E. Minzer. "Broadband ISDN and Asynchronous Transfer Mode (ATM)". IEEE Communications Magazine 27, 9 (Sep 1989), 17-24.
14. IEEE Standard P1003.4 (Real-time extensions to POSIX). IEEE, 345 East 47th St., New York, NY 10017, 1991.
15. Sha, L., Rajkumar, R. and Lehoczky, J. P. "Priority Inheritance Protocols: An Approach to Real-Time Synchronization". IEEE Transactions on Computers (September 1990), 1175-1185.
16. Sha, L., Rajkumar, R. and Lehoczky, J. P. "Real-Time Scheduling Support in Futurebus+". IEEE Real-Time Systems Symposium (Dec. 1990).
17. Sha, L., Rajkumar, R. and Sathaye, S. "Generalized Rate-Monotonic Scheduling Theory: A Framework for Developing Real-Time Systems". IEEE Proceedings Journal (January 1994).
18. Stankovic, J. A. and Ramamritham, K. The Design of the Spring Kernel. Proceedings of the Real-Time Systems Symposium, Dec, 1987.
19. H. Tokuda and T. Nakajima and P. Rao. Real-Time Mach: Towards a Predictable Real-Time System. Proceedings of USENIX Mach Workshop, Oct, 1990.
20. H. Tokuda and T. Kitayama. Dynamic QOS Control Based on Real-Time Threads. ART Project Technical Memo, School of Computer Science, Carnegie Mellon University.

## 215
SAFER SLOTH: Efficient, Hardware-Tailored Memory Protection∗
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.640.3262&rep=rep1&type=pdf

[1] AUTOSAR. Specification of operating system (version 5.0.0). Technical report, Automotive Open System Architecture GbR, November 2011.
[2] BernhardBlackhamandGernothHeiser.Sequoll:Aframeworkformodel checking binaries. In 19th IEEE Int. Symp. on Real-Time and Embedded Technology and Applications (RTAS ’13), pages 97–106, Washington, DC, USA, 2013. IEEE.
[3] Jeffrey S. Chase, Henry M. Levy, Michael J. Freeley, and Edward D. Lazowska. Sharing and protection in a single-address-space operating system. ACM Trans. Comp. Syst., 12(4):271–307, November 1994.
[4] Jeremy Condit, Matthew Harren, Zachary R. Anderson, David Gay, and George C. Necula. Dependent types for low-level programming. In Rocco De Nicola, editor, ESOP, volume 4421 of LNCS, pages 520–535, Heidelberg, Germany, 2007. Springer.
[5] Nathan Cooprider, Will Archer, Eric Eide, David Gay, and John Regehr. Efficient memory safety for TinyOS. In 5th Int. Conf. on Embedded Networked Sensor Systems, pages 205–218, New York, NY, USA, 2007. ACM.
[6] Robert C. Daley and Jack Bonnell Dennis. Virtual memory, processes, and sharing in MULTICS. CACM, 11(5):306–312, May 1968.
[7] Luis E. Leyva del Foyo, Pedro Mejia-Alvarez, and Dionisio de Niz. Predictable interrupt management for real time kernels over conventional PC hardware. In 12th IEEE Int. Symp. on Real-Time and Embedded Technology and Applications (RTAS ’06), pages 14–23, Los Alamitos, CA, USA, 2006. IEEE.
[8] Dinakar Dhurjati, Sumant Kowshik, Vikram Adve, and Chris Lattner. Memory safety without garbage collection for embedded applications. Transactions on Embedded Computing Systems, 4(4):73–111, February 2005.
[9] Úlfar Erlingsson, Martín Abadi, Michael Vrable, Mihai Budiu, and George C. Necula. XFI: Software guards for system address spaces. In 7th Symp. on OS Design and Implementation (OSDI ’06), pages 75–88, Berkeley, CA, USA, 2006. USENIX.
[10] Lin Gu and John A. Stankovic. t-kernel: Providing reliable os support to wireless sensor networks. In 4th Int. Conf. on Embedded Networked Sensor Systems, New York, NY, USA, 2006. ACM.
[11] Chih-Chieh Han, Ram Kumar, Roy Shea, Eddie Kohler, and Mani Srivastava. A dynamic operating system for sensor networks. In 3rd Int. Conf. on Mobile Systems, Applications, and Services (MobiSys ’05), pages 163–176, New York, NY, USA, June 2005. ACM.
[12] Gernot Heiser, Kevin Elphinstone, Jerry Vochteloo, Stephen Russel, and Jochen Liedtke. The Mungi single-address-space operating system. Softw. Pract. Exper., 18(9), July 1998.
[13] Wanja Hofer, Daniel Lohmann, Fabian Scheler, and Wolfgang Schröder- Preikschat. Sloth: Threads as interrupts. In 30th IEEE Int. Symp. on Real-Time Systems (RTSS ’09), pages 204–213. IEEE, December 2009.
[14] Wanja Hofer, Daniel Lohmann, and Wolfgang Schröder-Preikschat. Sleepy Sloth: Threads as interrupts as threads. In 32nd IEEE Int. Symp. on Real-Time Systems (RTSS ’11), pages 67–77. IEEE, December 2011.
[15] Intel Corporation, Santa Clara, California, USA. Intel Architecture Software Developer’s Manual, 1999.
[16] Ram Kumar, Eddie Kohler, and Mani Srivastava. Harbor: Software-based memory protection for sensor nodes. In IPSN ’07: 6th Int. Conf. on Information Processing in Sensor Networks, pages 340–349, New York, NY, USA, 2007. ACM.
[17] Ram Kumar, Akhilesh Singhania, Andrew Castner, Eddie Kohler, and Mani Srivastava. A system for coarse grained memory protection in tiny embedded processors. In Proceedings of the 44th annual Design Automation Conference, pages 218–223, New York, NY, USA, 2007. ACM.
[18] Daniel Lohmann, Jochen Streicher, Wanja Hofer, Olaf Spinczyk, and Wolfgang Schröder-Preikschat. Configurable memory protection by aspects. In 4th W’shop on Progr. Lang. and OSes (PLOS ’07), pages 1–5, New York, NY, USA, October 2007. ACM.
[19] George C. Necula, Scott McPeak, and Westley Weimer. CCured: Type- safe retrofitting of legacy code. In POPL ’02: 29th ACM SIGPLAN- SIGACT Symp. on Principles of Programming Languages, pages 128–139, New York, NY, USA, 2002. ACM.
[20] OSEK/VDX Group. Operating system specification 2.2.3. Technical report, OSEK/VDX Group, February 2005. http://portal.osek-vdx.org/ files/pdf/specs/os223.pdf, visited 2011-08-17.
[21] RobertWahbe,StevenLucco,ThomasE.Anderson,andSusanL.Graham. Efficient software-based fault isolation. In 14th ACM Symp. on OS Principles (SOSP ’93), pages 203–216, New York, NY, USA, 1993. ACM.

## 216
Resource reservation in dynamic real-time systems (2004)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.379.9335&rep=rep1&type=pdf

Abeni,L.1997.Progettoerealizzazionedimeccanismidisistemaperapplicazionireal-timemultimediali, (Aprile), UniversitaÁ degli studi di Pisa.
Abeni,L.1998.Servermechanismsformultimediaapplications.ScuolaSuperioreS.Anna,(RETISTR98-01).
RESOURCE RESERVATION IN DYNAMIC REAL-TIME SYSTEMS 163
Abeni, L., and Buttazzo, G. 1998. Integrating multimedia applications in hard real-time systems. In Proceedings oftheIEEEReal-TimeSystemsSymposium(December).Madrid,Spain.
Abeni, L., and Buttazzo, G. 1999. Adaptive bandwidth reservation for multimedia computing. In Proceedings of theIEEERealTimeComputingSystemsandApplications(December).HongKong.
Abeni, L., and Buttazzo, G. 1999. Constant bandwidth vs proportional share resource allocation. In Proceedings oftheIEEEInternationalConferenceonMutimediaComputingandSystems(June).Florence,Italy.
Abeni, L., and Buttazzo, G. 1999. QoS guarantee using probabilistic dealines. In Proceedings of the IEEE EuromicroConferenceonReal-TimeSystems(June).York,England.
Abeni, L., and Buttazzo, G. 2001. Hierarchical QoS management for time sensitive applications. In Proceedings oftheIEEEReal-TimeTechnologyandApplicationsSymposium(RTAS2001)(May).Taipei,Taiwan.
Aparah,D.1998.Adaptiveresourcemanagementinamultimediaoperatingsystem.InProceedingsofthe8th International Workshop on Network and Operating System Support for Digital Audio and Video (July). Cambridge, UK.
Atlas,A.K.,andBestavros,A.1998.Statisticalratemonotonicscheduling.InProceedingsoftheIEEEReal- TimeSystemsSymposium(December).Madrid,Spain.
Baker,T.P.1990.Astack-basedallocationpolicyforrealtimeprocesses.InProceedingsofthe11thIEEEReal- TimeSystemsSymposium(December).LakeBuenaVista,Florida,USA,pp.191±200.
Baker,T.P.1991.Stack-basedschedulingofreal-timeprocesses.Real-TimeSystems3(1):67±100.
Baruah, S. K., Cohen, N. K., Plaxton, C. G., and Varvel, D. A. 1996. Proportionate progress: A notion of fairness
in resource allocation. Algorithmica 6.
Baruah, S. K., Mok, A. K., and Rosier, L. E. 1993. Preemptively scheduling hard-real-time sporadic tasks on one
processor,pp.182±190. Buttazzo,G.C.1993.HARTIK:Areal-timekernelforroboticsapplications.InProceedingsofthe14thIEEE
Real-TimeSystemsSymposium(December).Raleigh-Durham,NC,USA,pp.201±205. Buttazzo,G.C.,andStankovic,J.1993.RED:Robustearliestdeadlinescheduling.InThirdInternational
WorkshoponResponsiveComputingSystems.Austin,OPT.
Buttazzo, G., Abeni, L., and Lipari, G. 1998. Elastic task model for adaptive rate control. In Proceedings of the
IEEERealTimeSystemsSymposium(December).Madrid,Spain.
Caccamo, M., Buttazzo, G., and Sha, L. 2000. Capacity sharing for overrun control. In Proceedings of the IEEE
Real-TimeSystemsSymposium(December).Orlando,Florida.
Casile, A., Buttazzo, G., Lamastra, G., and Lipari, G. 1998. Simulation and tracing of hybrid task sets on
distributedsystems.InProceedingsoftheIEEEInternationalConferenceonReal-TimeComputingSystems
andApplications(October).Hiroshima,Japan,pp.249±256.
Chu, H.-H., and Nahrstedt, K. 1997. A soft real time scheduling server in UNIX operating system. In European
Workshop on Interactive Distributed Multimedia Systems and Telecommunication Services (September).
Darmstadt, Germany.
Chu, H.-H., and Nahrstedt, K. 1998. CPU. Service classes for multimedia applications (August). Urbana
Champaign, University of Illinois, (UIUCDCS-R-98-2068,UILU-ENG-98-1730).
Chu, H.-H., and Nahrstedt, K. 1999. CPU. Service classes for multimedia applications. In Proceedings of the
IEEEInternationalConferenceonMutimediaComputingandSystems(June).Florence,Italy. Compton,C.L.,andTennenhouse,D.L.1994.Collaborativeloadsheddingformedia-basedapplications.In
Proceedings of the International Conference on Multimedia Computing and Systems.
Coulson, G., Blair, G. S., Robin, P., and others. 1993. Extending CHORUS micro-kernel to support continuous mediaapplications.In4thInternationalWorkshoponNetworkandOperatingSystemSupportforDigital
AudioandVideo.Lancaster,UK.
Demers, A., Keshav, S., and Shenker, S. 1989. Analysis and simulation of a fair queueing alorithm. In ACM
SIGCOMM(September),pp.1±12.
Deng, Z., and Liu, J. W. S. 1997. Scheduling real-time applications in open envirovment. In Proceedings of the
18thIEEEReal-TimeSystemsSymposium(December).SanFrancisco,CA,USA,pp.308±319.
Deng, Z., Liu, J. W. S., and Sun, J. 1997. A scheme for scheduling hard real-time applications in open system environment.InProceedingsoftheNinthEuromicroWorkshoponReal-TimeSystems(June).Toledo,Spain,
pp.191±199.
Diot, C., Huitema, C., and Turletti, T. Mutlimedia applications should be adaptive.

164 ABENI AND BUTTAZZO
Ford, B., Back, G., Benson, G., Lepreau, J., Lin, A., and Shivers, O. 1997. The  ̄ux OSKit: A substrate for OS andlanguageresearch.In16ACMSymposiumonOperatingSystemsPrinciples(October).Saint-Malo, France.
Fujita, H., Nakajima, T., and Tezuka, H. 1995. A processor reservation system supporting dynamic QoS control. In 2nd International Workshop on Real-Time Computing Systems and Applications (October).
Gergeleit, M., and Streich, H. TaskPair-scheduling with optimistic case execution times - An example for an adaptivereal-timesystem.ResearchDivisionofResponsiveSystemsNationalCenterforComputerScience. Ghazalie,T.M.,andBaker,T.P.1995.Aperiodicserversinadeadlineschedulingenvironment.Real-Time
Systems 9(1): 31±68.
Govindan, R., and Anderson, D. P. 1991. Scheduling and IPC mechanisms for continuous media. In Proceedings
ofthe13thACMSymposiumonOperatingSystemsPrinciples(October).Asilomar,Paci®cGrove,CA,
pp.68±80.
Goyal, P., Guo, X., and Vin, H. M. 1996. A hierarchical CPU scheduler for multimedia operating systems. In
Proceedingsofthe2ndSymposiumonOperatingSystemsDesignandImplementation(October).Seattle,WA,
pp.107±121.
Huang, T.-Y., and Liu, J. W. S. 1995. Predicting the worst-case execution time of concurren execution of
instructionsandcycle-stealingDMAI/Ooperations.InACMSIGPLANWorkshoponLanguage,Compilers
andToolsforReal-TimeSystems.LaJolla,California.
Huang, T.-Y., Liu, J. W. S., and Chung, J.-Y. 1996. Allowing cycle-stealing direct memory access I/O concurrent
withhard-real-timeprograms.InInt.Conf.onParallelandDistributedSystems.Tokyo. Hyden,E.A.1994.Operatingsystemsupportforqualityofservice(February).ComputerLaboratory,University
of Cambridge. Jansen,P.G.,andWijgerink,E.1996.Flexibleschedulingbydeadlineinheritanceinsoftreal-timekernels. Jeffay,K.1992.Schedulingsporadictaskswithsharedresourcesinhard-real-timesystems.InProceedingsof
theIEEEReal-TimeSystemsSymposium(December).Phoenix,AZ.
Jeffay, K., and Bennet, D. 1995. A rate-based execution abstraction for multimedia computing. In Proceedings
of the Fifth International Workshop on Network and Operating System Support for Digital Audio and Video.
(April).Durham,NH.
Jeffay, K., and Goddard, S. M. 1999. A theory of rate-based execution. In Proceedings of the IEEE Real-Time
SystemsSymposium(December).Phoenix,AZ.
Jeffay, K., and Stone, D. L. 1993. Accounting for interrupt handling costs in dynamic priority task systems. In
IEEERealTimeSystemSymposium,pp.212±221.
Jeffay, K., Smith, F. D., Moorthy, A., and Anderson, J. H. 1998. Proportional share scheduling of operating
systemservicesforreal-timeapplications.InIEEERealTimeSystemSymposium(December).Madrid,Spain. Jeffay, K., Stanat, D. F., and Martel, C. U. 1991. On non-preemptive scheduling of periodic and sporadic tasks.
RealTimeSystemSymposium(December).SanAntonio.
Jeffay, K., Stone, D. L., and Smith, F. D. 1992. Kernel support for live digital audio and video. Computer
Communications 15(6): 388±395.
Jeffay, K., Stone, D. L., Talley, T., and Smith, F. D. 1993. Adaptive, best-effort delivery of digital audio and
videoacrosspacketswitchednetworks.InNetworkandOperatingSystemSupportforDigitalAudioand
Video. Jones,M.B.1993.Adaptivereal-timeresourcemanagementsupportingcompositionofindependentlyauthored
time-critical services.
Kaneko, H., Stankovic, J. A., Sen, S., and Ramamritham, K. 1996. Integrated scheduling of multimedia and hard
real-timetasks.InProceedingsoftheIEEEReal-TimeSystemsSymposium(December).Washington,DC,
USA,pp.206±215.
Kang, D.-I., Gerber, R., and Golubchik, L. 1998. Automated techniques for designing embedded signal
processorsondistributedplatforms(October).UniversityofMariland,(UMIACS-TR-98-57).
Kang, D.-I., Gerber, R., and Sakena, M. 1997. Performance-based design of distributed real-time system. In Proceedings of the 3rd IEEE Real-Time Technology and Applications Symposium (RTAS '97) (June).
Montreal,Canada,pp.2±13.
Kang, D.-I., Gerber, R., and Sakena, M. 1998. Parametric design syntesis of distributed embedded systems
(March).UniversityofMariland,(UMIACS-TR-98-18).

RESOURCE RESERVATION IN DYNAMIC REAL-TIME SYSTEMS 165
Kleinrock,L.1975.QueuingSystems.Wiley-Interscience.
Koren, G., and Shasha, D. 1995. Skip-over: Algorithms and complexity for overloaded systems that allow skips.
InIEEERealTimeSystemSymposium.Pisa.
Lamastra, G., Lipari, G., Buttazzo, G., Casile, A., and Conticelli, F. 1997. HARTIK 3.0: A portable system for
developingreal-timeapplications.InProceedingsofthe4thIEEEInternationalConferenceonReal-Time
ComputingSystemsandApplications(RTCSA'97)(October).Taipei,Taiwan,pp.43±50.
Lee, C., Rajkumar, R., Lehoczky, J., and Siewiorek, D. 1998. Pratical solutions for QoS-based resource
allocation.InProceedingsoftheIEEERealTimeSystemsSymposium(December).Madrid,Spain. Lehoczky,J.P.1996.Real-timequeueingtheory.InProceedingsofthe17thIEEEReal-TimeSystems
Symposium(December).Washington,DC,USA,pp.186±195.
Li, B., and Nahrstedt, K. 1998. A control theoretical model for quality of service adaptations. In Proceedings of
Sixth International Workshop on Quality of Service. Lipari,G.1997.Resourceconstraintsamongperiodicandaperiodictasks(November).RETISLabÐScuola
SuperiorediStudiUniversitariePerfezionamentoS.Anna,(9702).
Lipari, G., and Baruah, S. K. 2000. Greedy reclaimation of unused bandwidth in constant bandwidth servers. In
IEEEProceedingsofthe12thEuromicroConferenceonReal-TimeSystems(June).Stokholm,Sweden. Lipari, G., Buttazzo, G., and Abeni, L. 1998. A bandwidth reservation algorithm for multi-application systems.
InIEEERealTimeComputingSystemsandApplications(October).Hiroshima,Japan. Liu,C.L.,andLayland,J.W.1973.Schedulingalghorithmsformultiprogramminginahardreal-time
environment. Journal of the ACM 20(1): 46±61.
Liu, J. W. S., Lin, K. J., and Natarjan, S. 1987. Scheduling real-time, periodic jobs using imprecise results. In
IEEERealTimeSystemSymposium(December).SanJose,California. Massalin,H.1992.Synthesis:Anef®cientimplementationoffundamentaloperatingsystemservices.Columbia
University.
Mercer, C. W., Rajkumar, R., and Tokuda, H. 1993. Applying hard real-time technology to multimedia systems.
In Workshop on the Role of Real-Time in Multimedia/Interactive Computing System.
Mercer, C. W., Savage, S., and Tokuda, H. 1993. Processor capacity reserves for multimedia operating systems
(May).Pittsburg,CarnegieMellonUniversity,(CMU-CS-93-157). Nakajima,T.1998.ResourcereservationforadaptiveQoSmappinginreal-timemach.InSixthInternational
Workshop on Parallel and Distributed Real-Time Systems (WPDRTS) (April).
Nakajima, T., and Tezuka, H. 1994. A continuous media application supporting dynamic QoS control on real-
timemach.InACMMultimedia. Parekh,A.K.,andGallager,R.G.1993.Ageneralizedprocessorsharingapproachto ̄owcontrolinintegrated
services networks: the single-node case. IEEE/ACM Transactions on Networking 1(3): 344±357. Parekh,A.K.,andGallager,R.G.1994.Ageneralizedprocessorsharingapproachto ̄owcontrolinintergrated
servicesnetworks:themultiplenodecase.InIEEE/ACMTransanctionsonNetworking,pp.137±150. Rajkumar, R., Abeni, L., de Niz, D., Ghosh, S., Miyoshi, A., and Saewong, S. 2000. Recent developments with
Linux/RK.InProceedingsoftheSecondReal-TimeLinuxWorkshop(November).Orlando,Florida. Rajkumar, R., Juvva, K., Molano, A., and Oikawa, S. 1998. Resource kernels: A resource-centric approach to real-timeandmultimediasystems.InProceedingsoftheSPIE/ACMConferenceonMultimediaComputing
and Networking (January).
Rajkumar, R., Lee, C., Lehoczky, J., and Siewiorek, D. 1997. A resource allocation model for QoS management.
In Proceedings of the IEEE Real Time Systems Symposium (December).
Schulzrinne, H., and Kurose, J. F. Distribution of the loss period for some queues in continuous and discrete
time.
Sha, L., Rajkumar, R., and Lehoczky, J. P. 1990. Priority inheritance protocols: An approach to real-time
synchronization. IEEE Transactions on Computers 39(9).
Sprunt, B., Sha, L., and Lehoczky, J. P. 1989. Aperiodic scheduling for hard real-time systems. The Journal of
Real-Time Systems.
Spuri, M., and Buttazzo, G. 1996. Scheduling aperiodic tasks in dynamic priority systems. Real-Time Systems
10(2): 179±210.
Spuri, M., and Buttazzo, G. C. 1994. Ef®cient aperiodic service under the earliest deadline scheduling. In
Proceedings of the IEEE Real-Time Systems Symposium (December).

166 ABENI AND BUTTAZZO
Spuri, M., Buttazzo, G., and Sensini, F. 1995. Robust aperiodic scheduling under dynamic priority systems. In Proceedings of the IEEE Real-Time Systems Symposium (December).
Stankovic, J. A., Lu, C., and Son, S. H. 1998. The case for feedback control in real-time scheduling. In ProceedingsoftheIEEEEuromicroConferenceonReal-Time(June).York,England.
Stoica, I., Abdel-Wahab, H., and Jeffay, K. 1997. On the duality between resource reservation and proportional shareresourceallocation.InProceedingsoftheSPIEConferenceonMultimediaComputingandNetworking (February),3020,SanJose,CA,pp.207±214.
Stoica, I., Abdel-Wahab, H., Jeffay, K., Baruah, S. K., Gehrke, J. E., and Plaxton, C. G. 1996. A proportional shareresourceallocationalgorithmforreal-time,time-sharedsystems.InProceedingsoftheIEEEReal-Time Systems Symposium (December).
Streich,H.TaskPair-scheduling:Anapproachfordynamicreal-timesystems.ResearchDivisionofResponsive Systems National Center for Computer Science.
Talley, T., and Jeffay, K. 1996. A general framework for continuous media transmission control. In 21st IEEE ConferenceonLocalComputerNetwork(October).Minneapolis,OPT.
Tia, T.-S., Deng, Z., Shankar, M., Storch, M., Sun, J., Wu, L.-C., and Liu, J. W. S. 1995. Probabilistic performanceguaranteeforreal-timetaskswithvaryingcomputationtimes.InProceedingsoftheIEEEReal- TimeTechnologyandApplicationsSymposium(January).Chicago,Illinois,pp.164±173.
Tokuda, H., Nakajima, T., and Rao, P. 1990. Real-time mach: Toward a predictable real-time system. In USENIX MachWorkshop(October),pp.73±82.
VESA BIOS ExtensionsÐCore FunctionsÐVersion 2.0. VESA. Waldspurger,C.A.,andWeihl,W.E.1994.Lotteryscheduling:Flexibleproportional-shareresource
management.InFirstSymposiumonOperatingSystemDesignandImplementation(November).pp.1±12. Waldspurger,C.A.,andWeihl,W.E.1995.Stridescheduling:Deterministicproportional-shareresource
mangement(June).MassachusettsInstituteofTechnology,(MIT/LCS/TM-528). Wang,Y.C.,andLin,K.J.1998.Enanchingthereal-timecapabilityoftheLinuxkernel.RealTimeComputing
SystemsandApplications(October).Hiroshima,Japan. Yau,D.K.Y.,andLam,S.S.1997.Adaptiveratecontrolledschedulingformultimediaapplications.IEEE/ACM
Transactions on Networking (August). Zhang,H.1995.Servicedisciplinesforguaranteedperformanceserviceinpacket-switchingnetworks.
Proceedings of the IEEE 83(10): 1374±1396.

## 220
Bypassing Combinatorial Protections: Polynomial-Time Algorithms for Single-peaked Electorates (2010)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.172.146&rep=rep1&type=pdf

Barbera`, S. 2001. An introduction to strategy-proof social choice functions. Social Choice and Welfare 18(4):619–653.
Bartholdi, III, J., and Trick, M. 1986. Stable matching with preferences derived from a psychological model. Operations Research Letters 5(4):165–169.
Bartholdi, III, J.; Tovey, C.; and Trick, M. 1989. The compu- tational difficulty of manipulating an election. Social Choice and Welfare 6(3):227–241.
Bartholdi, III, J.; Tovey, C.; and Trick, M. 1992. How hard is it to control an election? Mathematical and Computer Modeling 16(8/9):27–40.
Black, D. 1958. The Theory of Committees and Elections. Cambridge University Press.
Brandt, F.; Brill, M.; Hemaspaandra, E.; and Hemaspaandra, L. 2010. Bypassing combinatorial protections: Polynomial- time algorithms for single-peaked electorates. Technical Report TR-955, Dept. of Comp. Sci., Univ. of Rochester, Rochester, NY.
Condorcet, J. 1785. Essai sur l’Application de L’Analyse a` la Probabilite ́ des De ́cisions Rendues a` la Pluralite ́ des Voix. Facsimile reprint of original published in Paris, 1972, by the Imprimerie Royale.
Conitzer, V.; Sandholm, T.; and Lang, J. 2007. When are elections with few candidates hard to manipulate? Journal of the ACM 54(3):Article 14.
Conitzer, V. 2009. Eliciting single-peaked preferences us- ing comparison queries. Journal of Artificial Intelligence Research 35:161–191.
Davis, O.; Hinich, M.; and Ordeshook, P. 1970. An expos- itory development of a mathematical model of the electoral process. American Political Science Review 54(2):426–448.
Doignon, J., and Falmagne, J. 1994. A polynomial time al- gorithm for unidimensional unfolding representations. Jour- nal of Algorithms 16:218–233.
Dwork, C.; Kumar, R.; Naor, M.; and Sivakumar, D. 2001. Rank aggregation methods for the web. In Proceedings of the 10th International World Wide Web Conference, 613– 622. ACM Press.
Ephrati, E., and Rosenschein, J. 1997. A heuristic tech- nique for multiagent planning. Annals of Mathematics and Artificial Intelligence 20(1):13–67.
Escoffier,B.;Lang,J.;andO ̈ztu ̈rk,M.2008.Single-peaked consistency and its complexity. In Proceedings of the 18th European Conference on Artificial Intelligence, 366–370. IOS Press.
Faliszewski, P.; Hemaspaandra, E.; Hemaspaandra, L.; and Rothe, J. 2009a. Llull and Copeland voting computationally resist bribery and constructive control. Journal of Artificial Intelligence Research 35:275–341.
Faliszewski, P.; Hemaspaandra, E.; Hemaspaandra, L.; and Rothe, J. 2009b. A richer understanding of the complex- ity of election systems. In Ravi, S., and Shukla, S., eds., Fundamental Problems in Computing: Essays in Honor of Professor Daniel J. Rosenkrantz. Springer. 375–406.
Faliszewski, P.; Hemaspaandra, E.; Hemaspaandra, L.; and Rothe, J. 2009c. The shield that never was: Societies with single-peaked preferences are more open to manipulation and control. In Proc. of the 12th Conf. on Theoretical As- pects of Rationality and Knowledge, 118–127. ACM.
Faliszewski, P.; Hemaspaandra, E.; and Hemaspaandra, L. 2009. The complexity of bribery in elections. Journal of Artificial Intelligence Research 35:485–532.
Faliszewski, P.; Hemaspaandra, E.; and Schnoor, H. 2008. Copeland voting: Ties matter. In Proceedings of the 7th International Conference on Autonomous Agents and Multi- agent Systems, 983–990. International Foundation for Au- tonomous Agents and Multiagent Systems.
Fishburn, P. 1977. Condorcet social choice functions. SIAM Journal on Applied Mathematics 33(3):469–489.
Hemaspaandra, E.; Hemaspaandra, L.; and Rothe, J. 1997. Exact analysis of Dodgson elections: Lewis Carroll’s 1876 voting system is complete for parallel access to NP. Journal of the ACM 44(6):806–825.
Hemaspaandra, E.; Spakowski, H.; and Vogel, J. 2005. The complexity of Kemeny elections. Theoretical Computer Sci- ence 349(3):382–391.
Pennock, D.; Horvitz, E.; and Giles, C. 2000. Social choice theory and recommender systems: Analysis of the axiomatic foundations of collaborative filtering. In Proceedings of the 17th National Conference on Artificial Intelligence, 729– 734. AAAI Press.
Procaccia, A., and Rosenschein, J. 2007. Junta distributions and the average-case complexity of manipulating elections. Journal of Artificial Intelligence Research 28:157–181.
Rothe, J.; Spakowski, H.; and Vogel, J. 2003. Exact com- plexity of the winner problem for Young elections. Theory of Computing Systems 36(4):375–386.
Walsh, T. 2007. Uncertainty in preference elicitation and aggregation. In Proceedings of the 22nd AAAI Conference on Artificial Intelligence, 3–8. AAAI Press.

## 221
Association Rule Hiding (2004)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101.8665&rep=rep1&type=pdf


[1] Nabil R. Adam and John C. Wortmann. Security-Control Methods for Statistical Databases: A Comparison Study. ACM Computing Surveys, 21(4):515–556, 1989.
[2] D. Agrawal and C. C. Aggarwal. On the Design and Quantification of Privacy Preserving Data Mining Algorithms. Proceedings of ACM PODS Conference, 2001.
[3] R. Agrawal and R. Srikant. Privacy Preserving Data Mining. Proceedings of ACM SIGMOD Conference, 2000.
34
[4] M. Atallah, E. Bertino, A. Elmagarmid, M. Ibrahim, and V. Verykios. Disclosure Limitation Of Sensitive Rules. Proceedings of Knowledge and Data Exchange Workshop, 1999.
[5] Chris Clifton. Protecting against Data Mining through Samples. Proceedings of the 13th IFIP WG11.3 Conference on Database Security, 1999.
[6] Chris Clifton and Donald Marks. Security and Privacy Implications of Data Mining. Proceedings of the 1996 ACM Workshop on Data Mining and Knowledge Discovery, 1996.
[7] Usama M. Fayyad, Gregory Piatetsky-Shapiro, Padhraic Smyth, and Ramasamy Uthu- rusamy. Advances in Knowledge Discovery and Data Mining. AAAI Press/The MIT Press, 1996.
[8] T. Johnsten and Vijay V. Raghavan. Impact of Decision-Region Based Classification Mining Algorithms on Database Security. Proceedings of the 13th IFIP WG11.3 Con- ference on Database Security, 1999.
[9] Donald G. Marks. Inference in MLS Database. IEEE Transactions on Knowledge and Data Engineering, 8(1):46–55, 1996.
[10] Daniel E. O’Leary. Knowledge Discovery as a Threat to Database Security. Proceedings of the 1st International Conference on Knowledge Discovery and Databases, pages 107– 516, 1991.
[11] Bhavani Thuraisingham and William Ford. Security Constraint Processing in a Multi- level Secure Distributed Database Management System. IEEE Transactions on Knowl- edge and Data Engineering, 7(2):274–293, 1995.

## 222
Configurable memory protection by aspects (2007)
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.304.6175&rep=rep1&type=pdf

[1] AUTOSAR homepage. http://www.autosar.org/.
[2] ÅBERG, R. A., LAWALL, J. L., SÜDHOLT, M., MULLER, G., AND MEUR, A.-F. L. On the automatic evolution of an OS kernel using temporal logic and AOP. In ASE ’03 (Mar. 2003), pp. 196–204.
[3] AIKEN, M., FÄHNDRICH, M., HAWBLITZEL, C., HUNT, G., AND LARUS, J. Deconstructing process isolation. In MSPC
’06: Workshop on memory system performance and correctness (2006), ACM, pp. 1–10.
[4] AUTOSAR.Specificationofoperatingsystem(version2.0.1). Tech. rep., Automotive Open System Architecture GbR, June 2006.
[5] BROY, M. Challenges in automotive software engineering. In ICSE ’06 (2006), ACM, pp. 33–42.
[6] COADY, Y., AND KICZALES, G. Back to the future: A retroactive study of aspect evolution in operating system code. In AOSD ’03 (Mar. 2003), ACM, pp. 50–59.
[7] DEVILLECHAISE, M., MENAUD, J., MULLER, G., AND LAWALL, J. Web cache prefetching as an aspect: Towards a dynamic-weaving based solution. In AOSD ’03 (Mar. 2003), ACM, pp. 110–119.
[8] ENGEL, M., AND FREISLEBEN, B. TOSKANA: a toolkit for operating system kernel aspects. In Transactions on AOSD II (2006), no. 4242, Springer, pp. 182–226.
[9] FIUCZYNSKI, M., GRIMM, R., COADY, Y., AND WALKER, D. patch (1) considered harmful. In HotOS ’05 (2005).
[10] GOLM, M., FELSER, M., WAWERSICH, C., AND KLEINÖDER, J. The JX operating system. In USENIX ’02 (Berkeley, CA, USA, June 2002), pp. 45–58.
[11] JESTY, P. H., HOBLEY, M., EVANS, R., AND KENDALL, I. Safety analysis of vehicle-based systems. In 8th Safety-Critical Systems Symposium (SCSS ’00) (2000), Springer, pp. 90–110.
[12] LOHMANN, D., SCHELER, F., TARTLER, R., SPINCZYK, O., AND SCHRÖDER-PREIKSCHAT, W. A quantitative analysis of aspects in the eCos kernel. In EuroSys ’06 (Apr. 2006), ACM, pp. 191–204.
[13] LOHMANN, D., STREICHER, J., SPINCZYK, O., AND SCHRÖDER-PREIKSCHAT, W. Interrupt synchronization in the CiAO operating system. In AOSD-ACP4IS ’07 (2007), ACM, p. 6.
[14] SPINCZYK, O., AND LOHMANN, D. Using AOP to develop architecture-neutral operating system components. In 11th SIGOPS European Workshop (Sept. 2004), ACM,
pp. 188–192.
[15] SPINCZYK, O., AND LOHMANN, D. The design and implementation of AspectC++. In Knowledge-Based Systems, Special Issue on Creative Software Design (2007), Elsevier. (to appear).
[16] STILKERICH, M., WAWERSICH, C., SCHRÖDER-PREIKSCHAT, W., GAL, A., AND FRANZ, M. OSEK/VDX API for Java. In PLOS ’06 (San Jose, California, USA, Oct. 2006), ACM, pp. 13–17.


# 参考資料


参考文献駆動執筆(references driven writing)デンソークリエイト編
https://qiita.com/kaizen_nagoya/items/b27b3f58b8bf265a5cd1
技術文献調査法　
https://qiita.com/kaizen_nagoya/items/1eed3b830b5cbbfeed72
参考文献駆動執筆(references driven writing)
https://qiita.com/kaizen_nagoya/items/b27b3f58b8bf265a5cd1

「量子アニーリングの基礎」参考文献の参考文献を調べるためにしていること
https://qiita.com/kaizen_nagoya/items/a9a412561caee3852d77


参考文献駆動執筆の分類
https://qiita.com/kaizen_nagoya/items/fc2300b3717f61d39dee

なぜ参考文献に標題、発行年、URLを入れるか
https://qiita.com/kaizen_nagoya/items/f312746485b86a2e4292

Autosar文書、参考文献、略号一覧（作成中23/237）：英語(40)
https://qiita.com/kaizen_nagoya/items/2325b0156bc7fcf5a96d

Autosar文書、参考文献、略号一覧作成手順
https://qiita.com/kaizen_nagoya/items/ad75b86e518abb82ca22

AUTOSAR文書、参考文献、略号一覧作成自動化の可能性
https://qiita.com/search?sort=&q=参考文献+kaizen_nagoya

# Reference
Ethernet 記事一覧　Ethernet(0)
https://qiita.com/kaizen_nagoya/items/88d35e99f74aefc98794

Wireshark 一覧 wireshark(0)、Ethernet(48) 
https://qiita.com/kaizen_nagoya/items/fbed841f61875c4731d0

線網（Wi-Fi）空中線(antenna)(0) 記事一覧(118/300目標)
https://qiita.com/kaizen_nagoya/items/5e5464ac2b24bd4cd001

C++ Support(0)　
https://qiita.com/kaizen_nagoya/items/8720d26f762369a80514

Coding Rules(0) C Secure , MISRA and so on
https://qiita.com/kaizen_nagoya/items/400725644a8a0e90fbb0

Autosar Guidelines C++14 example code compile list(1-169)
https://qiita.com/kaizen_nagoya/items/8ccbf6675c3494d57a76

Error一覧(C/C++, python, bash...) Error(0)
https://qiita.com/kaizen_nagoya/items/48b6cbc8d68eae2c42b8

なぜdockerで機械学習するか 書籍・ソース一覧作成中 (目標100)
https://qiita.com/kaizen_nagoya/items/ddd12477544bf5ba85e2

言語処理100本ノックをdockerで。python覚えるのに最適。:10+12
https://qiita.com/kaizen_nagoya/items/7e7eb7c543e0c18438c4

プログラムちょい替え（0）一覧:4件
https://qiita.com/kaizen_nagoya/items/296d87ef4bfd516bc394

一覧の一覧( The directory of directories of mine.) Qiita(100)
https://qiita.com/kaizen_nagoya/items/7eb0e006543886138f39

官公庁・学校・公的団体（NPOを含む）システムの課題、官（０）
https://qiita.com/kaizen_nagoya/items/04ee6eaf7ec13d3af4c3

プログラマが知っていると良い「公序良俗」
https://qiita.com/kaizen_nagoya/items/9fe7c0dfac2fbd77a945

自動制御、制御工学一覧（０）
https://qiita.com/kaizen_nagoya/items/7767a4e19a6ae1479e6b

Rust(0) 一覧　
https://qiita.com/kaizen_nagoya/items/5e8bb080ba6ca0281927

小川清最終講義、最終講義（再）計画, Ethernet(100) 英語(100) 安全(100)
https://qiita.com/kaizen_nagoya/items/e2df642e3951e35e6a53

＜この記事は個人の過去の経験に基づく個人の感想です。現在所属する組織、業務とは関係がありません。＞
### 文書履歴(document history)
ver. 0.01  20230526
### 最後までおよみいただきありがとうございました。
いいね　💚、フォローをお願いします。
####  Thank you very much for reading to the last sentence.
Please press the like icon 💚　and follow me for your happy life.