{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T00:55:28Z","timestamp":1783990528450,"version":"3.55.0"},"publisher-location":"Berlin, Heidelberg","reference-count":78,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642245404","type":"print"},{"value":"9783642245411","type":"electronic"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-24541-1_32","type":"book-chapter","created":{"date-parts":[[2012,1,20]],"date-time":"2012-01-20T12:08:56Z","timestamp":1327061336000},"page":"428-452","source":"Crossref","is-referenced-by-count":4,"title":["Tolerance of Design Faults"],"prefix":"10.1007","author":[{"given":"David","family":"Powell","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jean","family":"Arlat","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yves","family":"Deswarte","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Karama","family":"Kanoun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"32_CR1","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511624162","volume-title":"The B-Book - Assigning Programs to Meanings","author":"J. Abrial","year":"1996","unstructured":"Abrial, J.: The B-Book - Assigning Programs to Meanings. Cambridge University Press, Cambridge (1996)"},{"issue":"4","key":"32_CR2","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1177\/027836499801700402","volume":"17","author":"R. Alami","year":"1998","unstructured":"Alami, R., Chatila, R., Fleury, S., Ghallab, M., Ingrand, F.: An architecture for autonomy. International Journal of Robotic Research\u00a017(4), 315\u2013337 (1998)","journal-title":"International Journal of Robotic Research"},{"issue":"4","key":"32_CR3","doi-asserted-by":"publisher","first-page":"418","DOI":"10.1109\/12.2185","volume":"37","author":"P.E. Amman","year":"1988","unstructured":"Amman, P.E., Knight, J.C.: Data diversity: An approach to software fault tolerance. IEEE Trans. on Computers\u00a037(4), 418\u2013425 (1988)","journal-title":"IEEE Trans. on Computers"},{"issue":"12","key":"32_CR4","doi-asserted-by":"publisher","first-page":"1502","DOI":"10.1109\/TSE.1985.231894","volume":"11","author":"T. Anderson","year":"1985","unstructured":"Anderson, T., Barrett, P., Halliwell, D., Moulding, M.: Software fault tolerance: an evaluation. IEEE Trans. on Software Engineering SE\u00a011(12), 1502\u20131510 (1985)","journal-title":"IEEE Trans. on Software Engineering SE"},{"key":"32_CR5","volume-title":"Fault Tolerance - Principles and Practice","author":"T. Anderson","year":"1981","unstructured":"Anderson, T., Lee, P.: Fault Tolerance - Principles and Practice. Prentice-Hall, Englewood Cliffs (1981)"},{"key":"32_CR6","first-page":"150","volume-title":"16th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-16)","author":"J. Arlat","year":"1996","unstructured":"Arlat, J., Kanekawa, N., Amendola, A., Dufour, J.L., Hirao, Y., Profeta III, J.: Dependability of railway control systems. In: 16th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-16), pp. 150\u2013155. IEEE CS Press, Vienna (1996)"},{"issue":"4","key":"32_CR7","doi-asserted-by":"publisher","first-page":"504","DOI":"10.1109\/12.54843","volume":"39","author":"J. Arlat","year":"1990","unstructured":"Arlat, J., Kanoun, K., Laprie, J.C.: Dependability modeling and evaluation of software fault-tolerant systems. IEEE Trans. on Computers\u00a039(4), 504\u2013513 (1990)","journal-title":"IEEE Trans. on Computers"},{"issue":"12","key":"32_CR8","doi-asserted-by":"publisher","first-page":"1491","DOI":"10.1109\/TSE.1985.231893","volume":"11","author":"A. Avi\u017eienis","year":"1985","unstructured":"Avi\u017eienis, A.: The N-version approach to fault-tolerant systems. IEEE Trans. on Software Engineering\u00a011(12), 1491\u20131501 (1985)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR9","first-page":"149","volume-title":"1st IEEE-CS Int. Computer Software and Applications Conference (COMPSAC 1977)","author":"A. Avi\u017eienis","year":"1977","unstructured":"Avi\u017eienis, A., Chen, L.: On the implementation of N-version programming for software fault tolerance during execution. In: 1st IEEE-CS Int. Computer Software and Applications Conference (COMPSAC 1977), pp. 149\u2013155. IEEE CS Press, Chicago (1977)"},{"issue":"8","key":"32_CR10","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1109\/MC.1984.1659219","volume":"17","author":"A. Avi\u017eienis","year":"1984","unstructured":"Avi\u017eienis, A., Kelly, J.: Fault-tolerance by design diversity: Concepts and experiments. Computer\u00a017(8), 67\u201380 (1984)","journal-title":"Computer"},{"issue":"1","key":"32_CR11","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1109\/TDSC.2004.2","volume":"1","author":"A. Avi\u017eienis","year":"2004","unstructured":"Avi\u017eienis, A., Laprie, J.C., Randell, B., Landwehr, C.: Basic concepts and terminology of dependable and secure computing. IEEE Trans. on Dependable and Secure Computing\u00a01(1), 11\u201333 (2004)","journal-title":"IEEE Trans. on Dependable and Secure Computing"},{"key":"32_CR12","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1007\/978-3-7091-8932-0_7","volume-title":"Software Diversity in Computerized Control Systems","author":"A. Avi\u017eienis","year":"1988","unstructured":"Avi\u017eienis, A., Lyu, M., Schutz, W., Tso, K., Voges, U.: DEDIX 87 - a supervisory system for design diversity experiments at UCLA. In: Voges, U. (ed.) Software Diversity in Computerized Control Systems, pp. 129\u2013168. Springer, Wien (1988)"},{"key":"32_CR13","first-page":"164","volume-title":"19th ACM Symp. on Operating Systems Principles (SOSP)","author":"P. Barham","year":"2003","unstructured":"Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Neugebauer, R., Pratt, I., Warfield, A.: Xen and the art of virtualization. In: 19th ACM Symp. on Operating Systems Principles (SOSP), pp. 164\u2013177. ACM, New York (2003)"},{"key":"32_CR14","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1007\/978-3-7091-8871-2_3","volume-title":"The Evolution of Fault-Tolerant Systems","author":"J. Bartlett","year":"1987","unstructured":"Bartlett, J., Gray, J., Horst, B.: Fault tolerance in Tandem computer systems. In: Avi\u017eienis, A., Kopetz, H., Laprie, J.C. (eds.) The Evolution of Fault-Tolerant Systems, pp. 55\u201376. Springer, Vienna (1987)"},{"key":"32_CR15","first-page":"103","volume-title":"4th IEEE Int. Symp. on Object-Oriented Real-Time Distributed Computing","author":"D. Beder","year":"2001","unstructured":"Beder, D., Randell, B., Romanovsky, A., Rubira, C.: On applying atomic actions and dependable software architectures for developing complex systems. In: 4th IEEE Int. Symp. on Object-Oriented Real-Time Distributed Computing, pp. 103\u2013112. IEEE CS Press, Magdeburg (2001)"},{"key":"32_CR16","doi-asserted-by":"crossref","unstructured":"Bishop, P., Esp, D., Barnes, M., Humphreys, P., Dahl, G., Lahti, J., Yoshimura, S.: Project on diverse software - an experiment in software reliability. In: Safety of Computer Control Systems (SAFECOMP), pp. 153\u2013158 (1985)","DOI":"10.1016\/S1474-6670(17)60099-5"},{"key":"32_CR17","first-page":"616","volume-title":"23rd IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-23)","author":"D. Bri\u00e8re","year":"1993","unstructured":"Bri\u00e8re, D., Traverse, P.: Airbus A320\/A330\/A340 electrical flight controls - a family of fault-tolerant systems. In: 23rd IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-23), pp. 616\u2013623. IEEE CS Press, Toulouse (1993)"},{"issue":"2","key":"32_CR18","doi-asserted-by":"publisher","first-page":"311","DOI":"10.1147\/rd.452.0311","volume":"45","author":"V. Castelli","year":"2001","unstructured":"Castelli, V., Harper, R., Heidelberger, P., Hunter, S., Trivedi, K., Vaidyanathan, K., Zeggert, W.: Proactive management of software aging. IBM Journal of Research and Development\u00a045(2), 311\u2013332 (2001)","journal-title":"IBM Journal of Research and Development"},{"key":"32_CR19","volume-title":"Cutting the cost of quality; the defect prevention workbook for managers","author":"P.B. Crosby","year":"1967","unstructured":"Crosby, P.B.: Cutting the cost of quality; the defect prevention workbook for managers. Industrial Education Institute, Boston (1967)"},{"key":"32_CR20","volume-title":"Mutation 2006 - The Second Workshop on Mutation Analysis, 17th IEEE Int. Symp. on Software Reliability Engineering (ISSRE 2006)","author":"Y. Crouzet","year":"2006","unstructured":"Crouzet, Y., Waeselynck, H., Lussier, B., Powell, D.: The SESAME experience: from assembly languages to declarative models. In: Mutation 2006 - The Second Workshop on Mutation Analysis, 17th IEEE Int. Symp. on Software Reliability Engineering (ISSRE 2006). IEEE, Raleigh (2006)"},{"key":"32_CR21","doi-asserted-by":"publisher","first-page":"171","DOI":"10.1109\/CSDA.1998.798364","volume-title":"Computer Security, Dependability and Assurance: From Needs to Solutions","author":"Y. Deswarte","year":"1999","unstructured":"Deswarte, Y., Kanoun, K., Laprie, J.C.: Diversity against accidental and deliberate faults. In: Amman, P., Barnes, B., Jajodia, S., Sibley, E. (eds.) Computer Security, Dependability and Assurance: From Needs to Solutions, pp. 171\u2013182. IEEE CS Press, Los Alamitos (1999)"},{"key":"32_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1007\/978-3-642-00587-9_2","volume-title":"Trusted Computing","author":"L. Duflot","year":"2009","unstructured":"Duflot, L., Levillain, O., Morin, B.: ACPI: Design principles and concerns. In: Chen, L., Mitchell, C., Martin, A. (eds.) Trust 2009. LNCS, vol.\u00a05471, pp. 14\u201328. Springer, Heidelberg (2009)"},{"key":"32_CR23","first-page":"109","volume-title":"Software Fault Tolerance","author":"J. Dugan","year":"1995","unstructured":"Dugan, J., Lyu, M.: Dependability modeling for fault-tolerant software and systems. In: Lyu, M. (ed.) Software Fault Tolerance, pp. 109\u2013138. Wiley & Sons, Chichester (1995)"},{"issue":"7","key":"32_CR24","doi-asserted-by":"publisher","first-page":"692","DOI":"10.1109\/32.83905","volume":"17","author":"D. Eckhardt","year":"1991","unstructured":"Eckhardt, D., Caglayan, A., Knight, J., Lee, L., McAllister, D., Vouk, M., Kelly, J.: An experimental evaluation of software redundancy as a strategy for improving reliability. IEEE Trans. on Software Engineering\u00a017(7), 692\u20136702 (1991)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR25","doi-asserted-by":"publisher","first-page":"1511","DOI":"10.1109\/TSE.1985.231895","volume":"SE-11","author":"D. Eckhardt","year":"1985","unstructured":"Eckhardt, D., Lee, L.: A theoretical basis of multiversion software subject to coincident errors. IEEE Trans. on Software Engineering\u00a0SE-11, 1511\u20131517 (1985)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR26","first-page":"79","volume-title":"2nd IEEE Int. Symp. on Fault Tolerant Computing (FTCS-2)","author":"W. Elmendorf","year":"1972","unstructured":"Elmendorf, W.: Fault-tolerant programming. In: 2nd IEEE Int. Symp. on Fault Tolerant Computing (FTCS-2), pp. 79\u201383. IEEE CS Press, Newton (1972)"},{"key":"32_CR27","first-page":"61","volume-title":"2nd Int. Conf. on Artificial Intelligence Planning Systems (AIPS 1994)","author":"M. Ghallab","year":"1994","unstructured":"Ghallab, M., Laruelle, H.: Representation and control in IxTeT, a temporal planner. In: 2nd Int. Conf. on Artificial Intelligence Planning Systems (AIPS 1994), pp. 61\u201367. AIAA Press, Chicago (1994)"},{"key":"32_CR28","doi-asserted-by":"crossref","unstructured":"Goldberg, A., Havelund, K., McGann, C.: Runtime verification for autonomous spacecraft software. In: IEEE Aerospace Conference, pp. 507\u2013516 (2005)","DOI":"10.1109\/AERO.2005.1559341"},{"key":"32_CR29","first-page":"3","volume-title":"5th Symp. on Reliability in Distributed Software and Database Systems","author":"J. Gray","year":"1986","unstructured":"Gray, J.: Why do computers stop and what can be done about it? In: 5th Symp. on Reliability in Distributed Software and Database Systems, pp. 3\u201312. IEEE CS Press, Los Angeles (1986)"},{"key":"32_CR30","first-page":"251","volume-title":"10th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-10)","author":"A. Grnarov","year":"1980","unstructured":"Grnarov, A., Arlat, J., Avi\u017eienis, A.: On the performance of software fault-tolerant strategies. In: 10th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-10), pp. 251\u2013253. IEEE CS Press, Kyoto (1980)"},{"issue":"6","key":"32_CR31","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1109\/52.636672","volume":"14","author":"L. Hatton","year":"1997","unstructured":"Hatton, L.: N-version design vs. one good version. IEEE Software\u00a014(6), 71\u201376 (1997)","journal-title":"IEEE Software"},{"key":"32_CR32","first-page":"624","volume-title":"23rd IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-23)","author":"C. Hennebert","year":"1993","unstructured":"Hennebert, C., Guiho, G.: SACEM: A fault-tolerant system for train speed control. In: 23rd IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-23), pp. 624\u2013628. IEEE CS Press, Toulouse (1993)"},{"key":"32_CR33","doi-asserted-by":"crossref","unstructured":"Howey, R., Long, D., Fox, M.: VAL: Automatic plan validation, continuous effects and mixed initiative planning using PDDL. In: 16th IEEE International Conference on Tools with Artificial Intelligence, pp. 294\u2013301 (2004)","DOI":"10.1109\/ICTAI.2004.120"},{"key":"32_CR34","first-page":"381","volume-title":"25th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-25)","author":"Y. Huang","year":"1995","unstructured":"Huang, Y., Kintala, C., Kolettis, N., Fulton, N.: Software rejuvenation: Analysis, module and applications. In: 25th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-25), pp. 381\u2013390. IEEE CS Press, Pasadena (1995)"},{"key":"32_CR35","unstructured":"ISO\/IEC-15408: Common criteria for information technology security evaluation"},{"key":"32_CR36","doi-asserted-by":"crossref","unstructured":"Jaeger, E., Hardin, T.: A few remarks about formal development of secure systems. In: 11th IEEE High Assurance Systems Engineering Symposium (HASE), pp. 165\u20131174 (2008)","DOI":"10.1109\/HASE.2008.49"},{"key":"32_CR37","unstructured":"Jalote, P., Huang, Y., KIntala, C.: A framework for understanding and handling transient software failures. In: 2nd ISSAT Int. Conf. Reliability and Quality in Design, Orlando, FL, USA, pp. 231\u2013237 (1995)"},{"issue":"4","key":"32_CR38","doi-asserted-by":"publisher","first-page":"29","DOI":"10.1109\/MS.2001.936214","volume":"18","author":"K. Kanoun","year":"2001","unstructured":"Kanoun, K.: Real-world design diversity: a case study on cost. IEEE Software\u00a018(4), 29\u2013233 (2001)","journal-title":"IEEE Software"},{"key":"32_CR39","first-page":"9","volume-title":"18th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-18)","author":"J. Kelly","year":"1988","unstructured":"Kelly, J., Eckhardt Jr., D.E., Vouk, M., McAllister, D., Caglayan, A.: A large scale second generation experiment in multi-version software: description and early results. In: 18th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-18), pp. 9\u201314. IEEE CS Press, Los Alamitos (1988)"},{"key":"32_CR40","first-page":"21","volume-title":"8th Int. Symp. on Temporal Representation and Reasoning (TIME 2001)","author":"L. Khatib","year":"2001","unstructured":"Khatib, L., Muscettola, N., Havelund, K.: Mapping temporal planning constraints into timed automata. In: 8th Int. Symp. on Temporal Representation and Reasoning (TIME 2001), pp. 21\u201327. IEEE, Cividale Del Friuli (2001)"},{"issue":"5","key":"32_CR41","doi-asserted-by":"publisher","first-page":"626","DOI":"10.1109\/12.24266","volume":"38","author":"K. Kim","year":"1989","unstructured":"Kim, K., Welch, H.: Distributed execution of recovery blocks: an approach to uniform treatment of hardware and software faults in real-time applications. IEEE Trans. on Computers\u00a038(5), 626\u2013636 (1989)","journal-title":"IEEE Trans. on Computers"},{"key":"32_CR42","first-page":"207","volume-title":"22nd Symp. on Operating Systems Principles (SOSP)","author":"G. Klein","year":"2009","unstructured":"Klein, G., Elphinstone, K., Heiser, G., Andronick, J., Cock, F., Derrin, P., Elkaduwe, F., Engelhardt, K., Kolanski, R., Norrish, M., Sewell, T., Tuch, H., Winwood, S.: sel4: Formal verification of an OS kernel. In: 22nd Symp. on Operating Systems Principles (SOSP), pp. 207\u2013220. ACM, Big Sky (2009)"},{"issue":"1","key":"32_CR43","doi-asserted-by":"publisher","first-page":"96","DOI":"10.1109\/TSE.1986.6312924","volume":"SE-12","author":"J. Knight","year":"1986","unstructured":"Knight, J., Leveson, N.: An experimental evaluation of the assumption of independence in multi-version programming. IEEE Trans. on Software Engineering\u00a0SE-12(1), 96\u2013109 (1986)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR44","doi-asserted-by":"crossref","unstructured":"Laarouchi, Y., Deswarte, Y., Powell, D., Arlat, J., de Nadai, E.: Connecting commercial computers to avionics systems. In: IEEE\/AIAA 28th Digital Avionics Systems Conference (DASC 2009), Orlando, FL, USA, pp. 6.D.1\u20136.D.9 (2009)","DOI":"10.1109\/DASC.2009.5347440"},{"issue":"1","key":"32_CR45","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s11416-009-0129-1","volume":"7","author":"E. Lacombe","year":"2011","unstructured":"Lacombe, E., Nicomette, V., Deswarte, Y.: Enforcing kernel constraints by hardware-assisted virtualization. Journal in Computer Virology\u00a07(1), 1\u201321 (2011)","journal-title":"Journal in Computer Virology"},{"key":"32_CR46","unstructured":"Laprie, J.C.: Dependability: Basic concepts and associated terminology. Dependability : Basic Concepts and Terminology LAAS-CNRS, 7 Ave. Colonel Roche, 31077 Toulouse, France, p. 33 (1990)"},{"issue":"7","key":"32_CR47","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1109\/2.56851","volume":"23","author":"J.C. Laprie","year":"1990","unstructured":"Laprie, J.C., Arlat, J., B\u00e9ounes, C., Kanoun, K.: Definition and analysis of hardware-and-software fault-tolerant architectures. Computer\u00a023(7), 39\u201351 (1990)","journal-title":"Computer"},{"key":"32_CR48","first-page":"47","volume-title":"Software Fault Tolerance","author":"J.C. Laprie","year":"1995","unstructured":"Laprie, J.C., Arlat, J., B\u00e9ounes, C., Kanoun, K.: Architectural issues in software fault tolerance. In: Lyu, M. (ed.) Software Fault Tolerance, pp. 47\u201378. Wiley & Sons, Chichester (1995)"},{"key":"32_CR49","unstructured":"Lardner, D.: Babbage\u2019s calculating engine. Edinburgh Review\u00a059, 263\u2013327 (1834)"},{"issue":"4","key":"32_CR50","doi-asserted-by":"publisher","first-page":"432","DOI":"10.1109\/32.54295","volume":"16","author":"N. Leveson","year":"1990","unstructured":"Leveson, N., Cha, S., Knight, J., Shimeall, T.: The use of self checks and voting in software error detection: an empirical study. IEEE Transactions on Software Engineering\u00a016(4), 432\u20134443 (1990)","journal-title":"IEEE Transactions on Software Engineering"},{"key":"32_CR51","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"294","DOI":"10.1007\/3-540-40891-6_26","volume-title":"Computer Safety, Reliability, and Security","author":"B. Littlewood","year":"2000","unstructured":"Littlewood, B., Popov, P., Strigini, L.: Assessment of the reliability of fault-tolerant software: A bayesian approach. In: Koornneef, F., van der Meulen, M.J.P. (eds.) SAFECOMP 2000. LNCS, vol.\u00a01943, pp. 294\u2013308. Springer, Heidelberg (2000)"},{"key":"32_CR52","doi-asserted-by":"crossref","unstructured":"Lone\u00a0Sang, F., Lacombe, \u00c9., Nicomette, V., Deswarte, Y.: Exploiting an I\/OMMU vulnerability. In: 5th Int\u2019l Conf. on Malicious and Unwanted Software (MALWARE), pp. 7\u201314 (2010)","DOI":"10.1109\/MALWARE.2010.5665798"},{"key":"32_CR53","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1109\/DSN.2007.50","volume-title":"37th Annual IEEE\/IFIP Int. Conf. on Dependable Systems and Networks (DSN 2007)","author":"B. Lussier","year":"2007","unstructured":"Lussier, B., Gallien, M., Guiochet, J., Ingrand, F., Killijian, M.O., Powell, D.: Fault tolerant planning for critical robots. In: 37th Annual IEEE\/IFIP Int. Conf. on Dependable Systems and Networks (DSN 2007), pp. 144\u2013153. IEEE CS Press, Edinburgh (2007)"},{"key":"32_CR54","first-page":"216","volume-title":"17th. Int. Conf. on Automated Planning and Scheduling (ICAPS)","author":"B. Lussier","year":"2007","unstructured":"Lussier, B., Gallien, M., Guiochet, J., Ingrand, F., Killijian, M.O., Powell, D.: Planning with diversified models for fault-tolerant robots. In: 17th. Int. Conf. on Automated Planning and Scheduling (ICAPS), pp. 216\u2013223. AAAI, Providence (2007)"},{"key":"32_CR55","unstructured":"Lussier, B., Lampe, A., Chatila, R., Guiochet, J., Ingrand, F., Killijian, M.O., Powell, D.: Fault tolerance in autonomous systems: How and how much? In: 4th IARP - IEEE\/RAS - EURON Joint Workshop on Technical Challenges for Dependable Robots in Human Environments, Nagoya, Japan (2005)"},{"issue":"6","key":"32_CR56","doi-asserted-by":"publisher","first-page":"753","DOI":"10.1109\/TSE.2008.70","volume":"34","author":"M.J.P. Meulen","year":"2008","unstructured":"Meulen, M.J.P., van der Revilla, M.A.: The effectiveness of software diversity in a large population of programs. IEEE Trans. on Software Engineering\u00a034(6), 753\u2013764 (2008)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR57","unstructured":"Migneault, G.E.: The cost of software fault tolerance. In: AGARD Symposium on Software Avionics, The Hague, The Netherlands, pp. 37\/1\u201337\/8 (1992)"},{"key":"32_CR58","doi-asserted-by":"crossref","unstructured":"Mongardi, G.: Dependable computing for railway control systems. In: 3rd IFIP Working Conf. on Dependable Computing for Critical Applications (DCCA-3), Palermo, Italy, pp. 255\u2013273 (1993)","DOI":"10.1007\/978-3-7091-4009-3_11"},{"key":"32_CR59","unstructured":"Muscettola, N., Dorais, G., Fry, C., Levinson, R., Plaunt, C.: IDEA: Planning at the core of autonomous reactive agents. In: 3rd Int. NASA Workshop on Planning and Scheduling for Space, Houston, TX, USA (2002)"},{"key":"32_CR60","doi-asserted-by":"crossref","unstructured":"Nguyen-Tuong, A., Evans, D., Knight, J., Cox, B., Davidson, J.: Security through redundant data diversity. In: IEEE\/IFIP Int. Conf. on Dependable Systems and Networks, Ancorage, Alaska, USA, pp. 187\u2013196 (2008)","DOI":"10.1109\/DSN.2008.4630087"},{"issue":"3","key":"32_CR61","doi-asserted-by":"publisher","first-page":"350","DOI":"10.1109\/32.48942","volume":"16","author":"V. Nicola","year":"1990","unstructured":"Nicola, V., Goyal, A.: Modeling of correlated failures and community error recovery in multiversion software. IEEE Trans. on Software Engineering\u00a016(3), 350\u2013359 (1990)","journal-title":"IEEE Trans. on Software Engineering"},{"issue":"2","key":"32_CR62","doi-asserted-by":"publisher","first-page":"180","DOI":"10.1109\/12.980007","volume":"51","author":"N. Oh","year":"2002","unstructured":"Oh, N., Mitra, S., McCluskey, E.: ED4I: Error detection by diverse data and duplicated instructions. IEEE Trans. on Computers\u00a051(2), 180\u2013199 (2002)","journal-title":"IEEE Trans. on Computers"},{"key":"32_CR63","unstructured":"Penix, J., Pecheur, C., Havelund, K.: Using model checking to validate AI planner domain models. In: 23rd Annual Software Engineering Workshop, NASA Goddard (1998)"},{"key":"32_CR64","first-page":"41","volume-title":"21st Int. Symp. on Software Reliability Engineering (ISSRE)","author":"P. Popov","year":"2010","unstructured":"Popov, P., Strigini, L.: Assessing asymmetric fault-tolerant software. In: 21st Int. Symp. on Software Reliability Engineering (ISSRE), pp. 41\u2013450. IEEE CS Press, Los Alamitos (2010)"},{"issue":"2","key":"32_CR65","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1109\/TSE.1975.6312842","volume":"SE-1","author":"B. Randell","year":"1975","unstructured":"Randell, B.: System structure for software fault tolerance. IEEE Trans. on Software Engineering\u00a0SE-1(2), 220\u2013232 (1975)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR66","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1007\/978-3-642-79789-7_6","volume-title":"Predictably Dependable Computer Systems","author":"B. Randell","year":"1995","unstructured":"Randell, B., Romanovsky, A., Rubira, C., Stroud, R., Wu, Z., Xu, J.: From recovery blocks to coordinated atomic actions. In: Randell, B., Laprie, J.C., Kopetz, H., Littlewood, B. (eds.) Predictably Dependable Computer Systems, pp. 87\u2013101. Springer, Heidelberg (1995)"},{"issue":"5","key":"32_CR67","doi-asserted-by":"publisher","first-page":"582","DOI":"10.1109\/TSE.1987.233463","volume":"SE-13","author":"R. Scott","year":"1987","unstructured":"Scott, R., Gault, J., McAllister, D.: Fault-tolerant software reliability modeling. IEEE Trans. on Software Engineering\u00a0SE-13(5), 582\u2013592 (1987)","journal-title":"IEEE Trans. on Software Engineering"},{"key":"32_CR68","volume-title":"Virtual Machines: Versatile Platforms for Systems and Processes","author":"J. Smith","year":"2005","unstructured":"Smith, J., Nair, R.: Virtual Machines: Versatile Platforms for Systems and Processes. Morgan Kaufmann, San Francisco (2005)"},{"key":"32_CR69","first-page":"240","volume-title":"21st IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-21)","author":"G.F. Sullivan","year":"1991","unstructured":"Sullivan, G.F., Masson, G.M.: Certification trails for data structures. In: 21st IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-21), pp. 240\u2013247. IEEE CS Press, Montreal (1991)"},{"issue":"2","key":"32_CR70","doi-asserted-by":"publisher","first-page":"227","DOI":"10.1109\/24.229492","volume":"42","author":"A. Tai","year":"1993","unstructured":"Tai, A., Meyer, J., Avi\u017eienis, A.: Performability enhancement of fault-tolerant software. IEEE Trans. on Reliability\u00a042(2), 227\u20132237 (1993)","journal-title":"IEEE Trans. on Reliability"},{"key":"32_CR71","first-page":"139","volume-title":"Software Fault Tolerance","author":"L. Tomek","year":"1995","unstructured":"Tomek, L., Muppala, J., Trivedi, K.: Analyses using reward nets. In: Lyu, M. (ed.) Software Fault Tolerance, pp. 139\u2013165. Wiley & Sons, Chichester (1995)"},{"key":"32_CR72","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1007\/978-1-4020-8157-6_18","volume-title":"Building the Information Society, 18th IFIP World Computer Congress","author":"P. Traverse","year":"2004","unstructured":"Traverse, P., Lacaze, I., Souyris, J.: Airbus fly-by-wire: A total approach to dependability. In: Jacquart, J. (ed.) Building the Information Society, 18th IFIP World Computer Congress, pp. 191\u2013212. Kluwer Awademic Publishers, Dordrecht (2004)"},{"key":"32_CR73","unstructured":"Varian, M.: VM and the VM community: Past, present, and future (1997), http:\/\/web.me.com\/melinda.varian\/"},{"key":"32_CR74","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-7091-8932-0","volume-title":"Software Diversity in Computerized Control Systems","author":"U. Voges","year":"1988","unstructured":"Voges, U.: Software Diversity in Computerized Control Systems, vol.\u00a02. Springer, Heidelberg (1988)"},{"key":"32_CR75","doi-asserted-by":"crossref","unstructured":"Xia, C., Lyu, M.: An empirical study on reliability modeling for diverse software systems. In: 15th Int. Symp. on Software Reliability Engineering (ISSRE), pp. 125\u2013136 (2004)","DOI":"10.1109\/ISSRE.2004.6"},{"key":"32_CR76","unstructured":"Xia, C., Lyu, M., Vouk, M.: An experimental evaluation on reliability features of N-version programming. In: 16th Int. Symp. on Software Reliability Engineering, ISSRE, pp. 10pp.\u2013 170 (2005)"},{"key":"32_CR77","first-page":"496","volume-title":"21st IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-21)","author":"J. Xu","year":"1991","unstructured":"Xu, J.: The t\/(n\u2009\u2212\u20091)-diagnosability and its applications to fault tolerance. In: 21st IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-21), pp. 496\u2013503. IEEE CS Press, Montreal (1991)"},{"key":"32_CR78","first-page":"3","volume-title":"Dependable Computing for Critical Applications (DCCA-5)","author":"Y. Yeh","year":"1998","unstructured":"Yeh, Y.: Dependability of the 777 primary flight control system. In: Iyer, R., Morganti, M., Fuchs, W.K., Gligor, V. (eds.) Dependable Computing for Critical Applications (DCCA-5), pp. 3\u201317. IEEE CS Press, Los Alamitos (1998)"}],"container-title":["Lecture Notes in Computer Science","Dependable and Historic Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-24541-1_32","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,19]],"date-time":"2025-03-19T01:14:58Z","timestamp":1742346898000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-24541-1_32"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642245404","9783642245411"],"references-count":78,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-24541-1_32","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2011]]}}}