{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T01:22:02Z","timestamp":1780449722293,"version":"3.54.1"},"reference-count":55,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2025,7,31]],"date-time":"2025-07-31T00:00:00Z","timestamp":1753920000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,7,31]],"date-time":"2025-07-31T00:00:00Z","timestamp":1753920000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2021ZD0113502"],"award-info":[{"award-number":["2021ZD0113502"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["BX20220071"],"award-info":[{"award-number":["BX20220071"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Research on Basic and Key Technologies of Intelligent Robots","award":["KEH2310017"],"award-info":[{"award-number":["KEH2310017"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Supercomput"],"DOI":"10.1007\/s11227-025-07635-7","type":"journal-article","created":{"date-parts":[[2025,7,31]],"date-time":"2025-07-31T06:45:28Z","timestamp":1753944328000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Safety measures in automotive operating system: a comprehensive review of trends and defense frameworks"],"prefix":"10.1007","volume":"81","author":[{"given":"Zhenpeng","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jingwei","family":"Bian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lihua","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,7,31]]},"reference":[{"issue":"5","key":"7635_CR1","first-page":"1","volume":"29","author":"C Li","year":"2024","unstructured":"Li C, Jiang K, Zhang Y, Jiang L, Luo Y, Wan S (2024) Deep reinforcement learning-based mining task offloading scheme for intelligent connected vehicles in UAV-aided MEC. ACM Trans Design Autom Electron Syst 29(5):1\u201329","journal-title":"ACM Trans Design Autom Electron Syst"},{"key":"7635_CR2","unstructured":"Sales2024. https:\/\/www.gov.cn\/yaowen\/liebiao\/202501\/content_6998270.htm"},{"issue":"4","key":"7635_CR3","doi-asserted-by":"publisher","first-page":"3418","DOI":"10.1109\/LRA.2018.2852793","volume":"3","author":"Y Luo","year":"2018","unstructured":"Luo Y, Cai P, Bera A, Hsu D, Lee WS, Manocha D (2018) PORCA: modeling and planning for autonomous driving among many pedestrians. IEEE Robot Autom Lett 3(4):3418\u20133425","journal-title":"IEEE Robot Autom Lett"},{"key":"7635_CR4","unstructured":"Global Status Report on Road Safety 2023 (2023) Technical report, World Health Organization"},{"issue":"1","key":"7635_CR5","first-page":"90","volume":"9","author":"P Koopman","year":"2017","unstructured":"Koopman P, Wagner M (2017) Autonomous vehicle safety: an interdisciplinary challenge. IEEE Intell Transp Syst Mag 9(1):90\u201396","journal-title":"IEEE Intell Transp Syst Mag"},{"issue":"2","key":"7635_CR6","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1109\/JPROC.2019.2948775","volume":"108","author":"K Ren","year":"2019","unstructured":"Ren K, Wang Q, Wang C, Qin Z, Lin X (2019) The security of autonomous driving: threats, defenses, and future directions. Proc IEEE 108(2):357\u2013372","journal-title":"Proc IEEE"},{"issue":"8","key":"7635_CR7","doi-asserted-by":"publisher","first-page":"8368","DOI":"10.1007\/s11227-022-05008-y","volume":"79","author":"R Kumar","year":"2023","unstructured":"Kumar R, Agrawal N (2023) A survey on software-defined vehicular networks (SDVNS): a security perspective. J Supercomput 79(8):8368\u20138400","journal-title":"J Supercomput"},{"key":"7635_CR8","doi-asserted-by":"publisher","first-page":"221852","DOI":"10.1109\/ACCESS.2020.3043070","volume":"8","author":"M Rumez","year":"2020","unstructured":"Rumez M, Grimm D, Kriesten R, Sax E (2020) An overview of automotive service-oriented architectures and implications for security countermeasures. IEEE Access 8:221852\u2013221870","journal-title":"IEEE Access"},{"issue":"2","key":"7635_CR9","doi-asserted-by":"publisher","first-page":"1230","DOI":"10.1109\/TVT.2021.3054934","volume":"70","author":"V Bandur","year":"2021","unstructured":"Bandur V, Selim G, Pantelic V, Lawford M (2021) Making the case for centralized automotive E\/E architectures. IEEE Trans Veh Technol 70(2):1230\u20131245","journal-title":"IEEE Trans Veh Technol"},{"key":"7635_CR10","unstructured":"Average number of lines of codes per vehicle globally in 2015 and 2020, with a forecast for 2025. https:\/\/www.statista.com\/statistics\/1370978\/automotive-software-average-lines-of-codes-per-vehicle-globally\/?utm_sourcechatgpt.com"},{"issue":"4","key":"7635_CR11","doi-asserted-by":"publisher","first-page":"7301","DOI":"10.1109\/LRA.2021.3097439","volume":"6","author":"T Wu","year":"2021","unstructured":"Wu T, Wu B, Wang S, Liu L, Liu S, Bao Y, Shi W (2021) Oops! It\u2019s too late. Your autonomous driving system needs a faster middleware. IEEE Robot Autom Lett 6(4):7301\u20137308","journal-title":"IEEE Robot Autom Lett"},{"key":"7635_CR12","doi-asserted-by":"crossref","unstructured":"Suo K, Vu L, Islam MR, Dhar N, Nguyen TN, He S, Wu X (2024) A systematic investigation of hardware and software in electric vehicular platform. In: Proceedings of the 2024 ACM Southeast Conference, pp 9\u201317","DOI":"10.1145\/3603287.3651203"},{"key":"7635_CR13","unstructured":"VW.OS. https:\/\/cariad.technology\/de\/en\/news\/stories\/vw-os-software-platform-explained.html"},{"key":"7635_CR14","unstructured":"Mercedes-Benz Operating System. https:\/\/group.mercedes-benz.com\/careers\/about-us\/mercedes-benz-operating-system"},{"key":"7635_CR15","unstructured":"Arene.OS. https:\/\/woven.toyota\/en\/arene"},{"key":"7635_CR16","unstructured":"BYD launches e-platform 3.0 with the new concept car Ocean-X. https:\/\/en.byd.com\/news\/byd-launches-e-platform-3-0-with-the-new-concept-car-ocean-x"},{"key":"7635_CR17","unstructured":"HYPEROS. https:\/\/hyperos.mi.com"},{"key":"7635_CR18","unstructured":"HARMONYOS. https:\/\/www.harmonyos.com"},{"key":"7635_CR19","volume-title":"Safety of the intended functionality","author":"J Pimentel","year":"2019","unstructured":"Pimentel J (2019) Safety of the intended functionality, vol 3. SAE International, Warrendale"},{"issue":"1","key":"7635_CR20","doi-asserted-by":"publisher","first-page":"13","DOI":"10.56094\/jss.v55i1.55","volume":"55","author":"R Debouk","year":"2019","unstructured":"Debouk R (2019) Overview of the second edition of ISO 26262: functional safety-road vehicles. J Syst Saf 55(1):13\u201321","journal-title":"J Syst Saf"},{"issue":"3","key":"7635_CR21","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2491509.2491511","volume":"22","author":"G Xu","year":"2013","unstructured":"Xu G, Rountev A (2013) Precise memory leak detection for java software using container profiling. ACM Trans Softw Eng Methodol (TOSEM) 22(3):1\u201328","journal-title":"ACM Trans Softw Eng Methodol (TOSEM)"},{"issue":"9","key":"7635_CR22","doi-asserted-by":"publisher","first-page":"1556","DOI":"10.1016\/j.jss.2010.05.027","volume":"83","author":"G Carrozza","year":"2010","unstructured":"Carrozza G, Cotroneo D, Natella R, Pecchia A, Russo S (2010) Memory leak analysis of mission-critical middleware. J Syst Softw 83(9):1556\u20131567","journal-title":"J Syst Softw"},{"issue":"3","key":"7635_CR23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3635711","volume":"33","author":"J He","year":"2024","unstructured":"He J, Zhou X, Xu B, Zhang T, Kim K, Yang Z, Thung F, Irsan IC, Lo D (2024) Representation learning for stack overflow posts: how far are we? ACM Trans Softw Eng Methodol 33(3):1\u201324","journal-title":"ACM Trans Softw Eng Methodol"},{"key":"7635_CR24","doi-asserted-by":"crossref","unstructured":"Berger ED, Zorn BG, McKinley KS (2002) Reconsidering custom memory allocation. In: Proceedings of the 17th ACM SIGPLAN Conference on Object-oriented Programming, Systems, Languages, and Applications, pp 1\u201312","DOI":"10.1145\/582419.582421"},{"key":"7635_CR25","doi-asserted-by":"crossref","unstructured":"Davis B, Watson RN, Richardson A, Neumann PG, Moore SW, Baldwin J, Chisnall D, Clarke J, Filardo NW, Gudka K et al (2019) CheriABI: enforcing valid pointer provenance and minimizing pointer privilege in the POSIX C run-time environment. In: Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems, pp 379\u2013393","DOI":"10.1145\/3297858.3304042"},{"key":"7635_CR26","doi-asserted-by":"crossref","unstructured":"Kuznetzov V, Szekeres L, Payer M, Candea G, Sekar R, Song D (2018) Code-pointer integrity. In: The Continuing Arms Race: Code-Reuse Attacks and Defenses, pp 81\u2013116","DOI":"10.1145\/3129743.3129748"},{"key":"7635_CR27","doi-asserted-by":"publisher","first-page":"619","DOI":"10.1007\/s10664-012-9231-y","volume":"19","author":"A Barua","year":"2014","unstructured":"Barua A, Thomas SW, Hassan AE (2014) What are developers talking about? An analysis of topics and trends in stack overflow. Empir Softw Eng 19:619\u2013654","journal-title":"Empir Softw Eng"},{"key":"7635_CR28","doi-asserted-by":"crossref","unstructured":"Ponzanelli L, Mocci A, Bacchelli A, Lanza M, Fullerton D (2014) Improving low quality stack overflow post detection. In: 2014 IEEE International Conference on Software Maintenance and Evolution, pp 541\u2013544. IEEE","DOI":"10.1109\/ICSME.2014.90"},{"key":"7635_CR29","doi-asserted-by":"crossref","unstructured":"Cooprider N, Archer W, Eide E, Gay D, Regehr J (2007) Efficient memory safety for TinyOS. In: Proceedings of the 5th International Conference on Embedded Networked Sensor Systems, pp 205\u2013218","DOI":"10.1145\/1322263.1322283"},{"key":"7635_CR30","volume-title":"Understanding the Linux Kernel: from I\/O ports to process management","author":"DP Bovet","year":"2005","unstructured":"Bovet DP, Cesati M (2005) Understanding the Linux Kernel: from I\/O ports to process management. O\u2019Reilly Media Inc, Sebastopol"},{"key":"7635_CR31","volume-title":"Evaluating static analysis tools for detecting buffer overflows in C code","author":"KJ Kratkiewicz","year":"2005","unstructured":"Kratkiewicz KJ (2005) Evaluating static analysis tools for detecting buffer overflows in C code. Harvard University, Cambridge"},{"key":"7635_CR32","doi-asserted-by":"crossref","unstructured":"Cherem S, Princehouse L, Rugina R (2007) Practical memory leak detection using guarded value-flow analysis. In: Proceedings of the 28th ACM SIGPLAN Conference on Programming Language Design and Implementation, pp 480\u2013491","DOI":"10.1145\/1250734.1250789"},{"issue":"6","key":"7635_CR33","doi-asserted-by":"publisher","first-page":"665","DOI":"10.1016\/j.csi.2004.12.005","volume":"27","author":"G Cena","year":"2005","unstructured":"Cena G, Valenzano A, Vitturi S (2005) Advances in automotive digital communications. Comput Stand Interfaces 27(6):665\u2013678","journal-title":"Comput Stand Interfaces"},{"key":"7635_CR34","doi-asserted-by":"crossref","unstructured":"Strobel O, Rejeb R, Lubkoll J (2010) Communication in automotive systems: principles, limits and new trends for vehicles, airplanes and vessels. In: 2010 12th International Conference on Transparent Optical Networks, pp 1\u20136. IEEE","DOI":"10.1109\/ICTON.2010.5549163"},{"key":"7635_CR35","doi-asserted-by":"crossref","unstructured":"Rufino J, Verissimo P, Arroz G, Almeida C, Rodrigues L (1998) Fault-tolerant broadcasts in can. In: Digest of Papers. Twenty-Eighth Annual International Symposium on Fault-Tolerant Computing (Cat. No. 98CB36224), pp 150\u2013159. IEEE","DOI":"10.1109\/FTCS.1998.689464"},{"key":"7635_CR36","doi-asserted-by":"crossref","unstructured":"Barranco M, Rodriguez-Navas G, Proenza J, Almeida L (2004) CANcentrate: an active star topology for CAN networks. In: IEEE International Workshop on Factory Communication Systems, 2004. Proceedings, pp 219\u2013228. IEEE","DOI":"10.1109\/WFCS.2004.1377714"},{"key":"7635_CR37","doi-asserted-by":"crossref","unstructured":"Kwon A, Dhawan U, Smith JM, Knight\u00a0Jr TF, DeHon A (2013) Low-fat pointers: compact encoding and efficient gate-level implementation of fat pointers for spatial safety and capability-based security. In: Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, pp 721\u2013732","DOI":"10.1145\/2508859.2516713"},{"key":"7635_CR38","doi-asserted-by":"crossref","unstructured":"Markettos AT, Rothwell C, Gutstein BF, Pearce A, Neumann PG, Moore SW, Watson RN (2019) Thunderclap: Exploring vulnerabilities in operating system IOMMU protection via DMA from untrustworthy peripherals","DOI":"10.14722\/ndss.2019.23194"},{"key":"7635_CR39","doi-asserted-by":"crossref","unstructured":"Clause J, Orso A (2010) LEAKPOINT: pinpointing the causes of memory leaks. In: Proceedings of the 32nd ACM\/IEEE International Conference on Software Engineering-Volume 1, pp 515\u2013524","DOI":"10.1145\/1806799.1806874"},{"key":"7635_CR40","unstructured":"McKusick MK, Neville-Neil GV, Watson RN. The design and implementation of the FreeBSD operating system"},{"issue":"POPL","key":"7635_CR41","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3290380","volume":"3","author":"K Memarian","year":"2019","unstructured":"Memarian K, Gomes VB, Davis B, Kell S, Richardson A, Watson RN, Sewell P (2019) Exploring C semantics and pointer provenance. Proc ACM Program Lang 3(POPL):1\u201332","journal-title":"Proc ACM Program Lang"},{"issue":"5","key":"7635_CR42","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1145\/1168919.1168866","volume":"34","author":"MD Bond","year":"2006","unstructured":"Bond MD, McKinley KS (2006) Bell: bit-encoding online memory leak detection. ACM SIGARCH Comput Archit News 34(5):61\u201372","journal-title":"ACM SIGARCH Comput Archit News"},{"key":"7635_CR43","doi-asserted-by":"crossref","unstructured":"Nagarakatte S, Zhao J, Martin MM, Zdancewic S (2009) SoftBound: highly compatible and complete spatial memory safety for C. In: Proceedings of the 30th ACM SIGPLAN Conference on Programming Language Design and Implementation, pp 245\u2013258","DOI":"10.1145\/1542476.1542504"},{"key":"7635_CR44","doi-asserted-by":"crossref","unstructured":"Crenshaw TL, Gunter E, Robinson CL, Sha L, Kumar P (2007) The simplex reference model: limiting fault-propagation due to unreliable components in cyber-physical system architectures. In: 28th IEEE International Real-Time Systems Symposium (RTSS 2007), pp 400\u2013412. IEEE","DOI":"10.1109\/RTSS.2007.34"},{"key":"7635_CR45","doi-asserted-by":"crossref","unstructured":"Seto D, Krogh B, Sha L, Chutinan A (1998) The simplex architecture for safe online control system upgrades. In: Proceedings of the 1998 American Control Conference. ACC (IEEE Cat. No. 98CH36207), vol 6, pp 3504\u20133508. IEEE","DOI":"10.1109\/ACC.1998.703255"},{"key":"7635_CR46","doi-asserted-by":"crossref","unstructured":"Bauer G, Kopetz H, Puschner P (2001) Assumption coverage under different failure modes in the time-triggered architecture. In: ETFA 2001. 8th International Conference on Emerging Technologies and Factory Automation. Proceedings (Cat. No. 01TH8597), pp 333\u2013341. IEEE","DOI":"10.1109\/ETFA.2001.996386"},{"issue":"1","key":"7635_CR47","doi-asserted-by":"publisher","first-page":"112","DOI":"10.1109\/JPROC.2002.805821","volume":"91","author":"H Kopetz","year":"2003","unstructured":"Kopetz H, Bauer G (2003) The time-triggered architecture. Proc IEEE 91(1):112\u2013126","journal-title":"Proc IEEE"},{"key":"7635_CR48","doi-asserted-by":"crossref","unstructured":"Lundelius J, Lynch N (1984) A new fault-tolerant algorithm for clock synchronization. In: Proceedings of the Third Annual ACM Symposium on Principles of Distributed Computing, pp 75\u201388","DOI":"10.1145\/800222.806738"},{"key":"7635_CR49","doi-asserted-by":"crossref","unstructured":"Yao D, Zhang Z, Zhang G (2020) Practical control flow integrity using multi-variant execution. In: Proceedings of the 2020 International Conference on Internet Computing for Science and Engineering, pp 14\u201319","DOI":"10.1145\/3424311.3424312"},{"key":"7635_CR50","doi-asserted-by":"crossref","unstructured":"Neugschwandtner M, Mulliner C, Robertson W, Kirda E (2016) Runtime integrity checking for exploit mitigation on lightweight embedded devices. In: Trust and Trustworthy Computing: 9th International Conference, TRUST 2016, Vienna, Austria, August 29\u201330, 2016, Proceedings 9, pp 60\u201381. Springer","DOI":"10.1007\/978-3-319-45572-3_4"},{"key":"7635_CR51","doi-asserted-by":"crossref","unstructured":"Oyinloye T, Speakman L, Eze T, O\u2019Mahony L (2022) Watchdog monitoring for detecting and handling of control flow hijack on RISC-V-based binaries","DOI":"10.14569\/IJACSA.2022.0130896"},{"key":"7635_CR52","unstructured":"IIT Madras (2020) IIT Madras, Indian Institute of Technology Madras. IIT Madras 24"},{"key":"7635_CR53","unstructured":"Oyinloye T, Speakman L, Eze T (2021) Inter-process CFI for peer\/reciprocal monitoring in RISC-V-based binaries. In: European Conference on Cyber Warfare and Security, p 605. Academic Conferences International Limited"},{"key":"7635_CR54","doi-asserted-by":"crossref","unstructured":"C\u0103pri\u0163\u0103 HV, Seli\u015fteanu D (2024) Safety automotive sensors and actuators with end-to-end protection (E2E) in the context of AUTOSAR embedded applications. In: Modeling, Identification, and Control for Cyber-Physical Systems Towards Industry 4.0, pp 215\u2013242. Elsevier","DOI":"10.1016\/B978-0-32-395207-1.00021-4"},{"issue":"4","key":"7635_CR55","first-page":"127","volume":"5","author":"J Lubkoll","year":"2009","unstructured":"Lubkoll J, Seibl D, Strauss U, Strobel O, Rejeb R (2009) Optical data bus technologies for automotive applications. Mediterr J Electron Commun 5(4):127\u2013132","journal-title":"Mediterr J Electron Commun"}],"container-title":["The Journal of Supercomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-025-07635-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11227-025-07635-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-025-07635-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T08:33:19Z","timestamp":1757320399000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11227-025-07635-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,31]]},"references-count":55,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2025,8]]}},"alternative-id":["7635"],"URL":"https:\/\/doi.org\/10.1007\/s11227-025-07635-7","relation":{},"ISSN":["1573-0484"],"issn-type":[{"value":"1573-0484","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7,31]]},"assertion":[{"value":"29 June 2025","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"31 July 2025","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"All authors have approved the manuscript and consent to its submission for publication.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}}],"article-number":"1205"}}