{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,14]],"date-time":"2026-06-14T03:13:33Z","timestamp":1781406813878,"version":"3.54.1"},"reference-count":90,"publisher":"Elsevier","isbn-type":[{"value":"9780123965257","type":"print"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1016\/b978-0-12-396525-7.00004-6","type":"book-chapter","created":{"date-parts":[[2012,4,6]],"date-time":"2012-04-06T14:40:32Z","timestamp":1333723232000},"page":"93-139","source":"Crossref","is-referenced-by-count":7,"title":["System Dependability"],"prefix":"10.1016","author":[{"given":"Yves","family":"Crouzet","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Karama","family":"Kanoun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0005","series-title":"Fundamental Concepts of Dependability","author":"Avizienis","year":"2001"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0010","first-page":"42","article-title":"Dependable computing: concepts, limits, challenges","author":"Laprie","year":"1995"},{"issue":"2","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0015","first-page":"153","article-title":"Modeling the resilience of large and evolving systems","volume":"4","author":"Kaaniche","year":"2008","journal-title":"Int. J. Perform. Eng."},{"issue":"4","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0020","doi-asserted-by":"crossref","first-page":"363","DOI":"10.1109\/24.922489","article-title":"Fault-tolerant system dependability\u2014explicit modeling of hardware and software component-interactions","volume":"49","author":"Kanoun","year":"2000","journal-title":"IEEE Trans. Reliab."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0025","doi-asserted-by":"crossref","first-page":"277","DOI":"10.1016\/j.peva.2003.07.012","article-title":"Construction and stepwise refinement of dependability models","volume":"56","author":"Betous-Almeida","year":"2004","journal-title":"Perform. Eval."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0030","first-page":"161","article-title":"A notion of equivalence for stochastic Petri nets","author":"Buchholz","year":"1995"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0035","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-61363-3_8","article-title":"The PSR methodology: integrating hardware and software models","author":"Donatelli","year":"1996"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0040","first-page":"1","article-title":"Specification and construction of performability models","author":"Meyer","year":"1993"},{"issue":"5","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0045","doi-asserted-by":"crossref","first-page":"528","DOI":"10.1109\/12.769435","article-title":"Modeling the dependability of CAUTRA, a subset of the French air traffic control system","volume":"48","author":"Kanoun","year":"1999","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0050","series-title":"Statistical and Probabilistic Models in Reliability","first-page":"321","article-title":"Incremental approach for building stochastic Petri nets for dependability modeling","author":"Fota","year":"1999"},{"issue":"3\u20134","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0055","first-page":"553","article-title":"Dependability evaluation of an air traffic control computing system","volume":"35","author":"Fota","year":"1999","journal-title":"Perform. Eval."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0060","doi-asserted-by":"crossref","first-page":"457","DOI":"10.1016\/j.ssci.2003.09.011","article-title":"Dependability modeling of instrumentation and control systems: a comparison of competing architectures","volume":"42","author":"Betous-Almeida","year":"2004","journal-title":"Saf. Sci."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0065","first-page":"72","article-title":"Building Petri net scenarios for dependable automation systems","author":"Bernardi","year":"2003"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0070","series-title":"Building Stochastic Petri Net models for the Verification of Complex Software Systems","author":"Bernardi","year":"2003"},{"issue":"4","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0075","first-page":"249","article-title":"Hierarchical modeling of complex control systems: dependability analysis of a railway interlocking","volume":"16","author":"Bondavalli","year":"2001","journal-title":"J. Comput. Syst. Sci. Eng."},{"issue":"5","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0080","doi-asserted-by":"crossref","first-page":"681","DOI":"10.1109\/TC.2007.1034","article-title":"A hierarchical modeling and analysis for grid service reliability","volume":"56","author":"Dai","year":"2007","journal-title":"IEEE Trans. Comput."},{"issue":"14","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0085","doi-asserted-by":"crossref","first-page":"1323","DOI":"10.1002\/spe.550","article-title":"Multi-level modeling approach for the availability assessment of e-business applications","volume":"33","author":"Ka\u00e2niche","year":"2003","journal-title":"Softw. Pract. Exp."},{"issue":"3","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0090","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1007\/BF03192366","article-title":"A modeling methodology for hierarchical control systems and its application","volume":"10","author":"Lollini","year":"2005","journal-title":"J. Braz. Comput. Soc."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0095","first-page":"93","article-title":"Dependability modeling and analysis of complex control systems: an application to railway interlocking","author":"Nelli","year":"1996"},{"issue":"2","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0100","doi-asserted-by":"crossref","first-page":"223","DOI":"10.1109\/TC.2003.1176988","article-title":"Performability evaluation of multipurpose multiprocessor systems: the \"separation of concerns\" approach","volume":"52","author":"Rabah","year":"2003","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0105","series-title":"Decomposability\u2014Queuing and Computer System Applications","author":"Courtois","year":"1977"},{"issue":"9","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0110","doi-asserted-by":"crossref","first-page":"803","DOI":"10.1109\/TC.1986.1676840","article-title":"An aggregation technique for the transient analysis of Stiff Markov chains","volume":"C-35","author":"Bobbio","year":"1986","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0115","doi-asserted-by":"crossref","DOI":"10.1109\/MASCOT.2004.1348178","article-title":"Approximate analysis of non-Markovian stochastic systems with multiple time scale delays","author":"Haddad","year":"2004"},{"issue":"6","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0120","doi-asserted-by":"crossref","first-page":"809","DOI":"10.1109\/32.24734","article-title":"Time scale decomposition of a class of generalized stochastic Petri net models","volume":"15","author":"Ammar","year":"1989","journal-title":"IEEE Trans. Softw. Eng."},{"issue":"1","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0125","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1016\/0166-5316(93)90026-Q","article-title":"Decomposition approach to stochastic reward Net models","volume":"18","author":"Ciardo","year":"1993","journal-title":"Perform. Eval."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0130","first-page":"258","article-title":"A connection formalism for the solution of large and stiff models","author":"Daly","year":"2001"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0135","series-title":"Fault Injection Techniques and Tools for Embedded Systems Reliability Evaluation","author":"Benso","year":"2003"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0140","doi-asserted-by":"crossref","first-page":"75","DOI":"10.1109\/2.585157","article-title":"Fault injection techniques and tools","volume":"30","author":"Hsueh","year":"1997","journal-title":"Computer"},{"issue":"2","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0145","first-page":"171","article-title":"A survey on fault injection techniques","volume":"1","author":"Ziade","year":"2004","journal-title":"Int. Arab J. Inform. Technol."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0150","series-title":"State of the Art, Deliverable no. D2.2 of the Project AMBER (Assessing, Measuring, and Benchmarking Resilience), FP7-216295","author":"van Moorsel","year":"2009"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0155","doi-asserted-by":"crossref","first-page":"166","DOI":"10.1109\/32.44380","article-title":"Fault injection for dependability validation\u2014a methodology and some applications","volume":"16","author":"Arlat","year":"1990","journal-title":"IEEE Trans. Softw. Eng."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0160","first-page":"199","article-title":"A general purpose pin-level fault injector","author":"Madeira","year":"1994"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0165","first-page":"140","article-title":"Two fault injection techniques for test of fault handling mechanisms","author":"Karlsson","year":"1991"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0170","first-page":"340","article-title":"Evaluation of error detection schemes using fault injection by heavy-ion radiation","author":"Gunneflo","year":"1989"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0175","doi-asserted-by":"crossref","first-page":"1115","DOI":"10.1109\/TC.2003.1228509","article-title":"Comparison of physical and software-implemented fault injection techniques","volume":"52","author":"Arlat","year":"2003","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0180","series-title":"The Nexus 5001 ForumTM Standard for a Global Embedded Processor Debug Interface","year":"2003"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0185","series-title":"1149.1-2001\u2014IEEE Standard Test Access Port and Boundary-Scan Architecture","year":"2001"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0190","first-page":"557","article-title":"GOOFI-2: a tool for experimental dependability assessment","author":"Skarin","year":"2010"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0195","first-page":"669","article-title":"INERTE: integrated NExus-based real-time fault injection tool for embedded systems","author":"Yuste","year":"2003"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0200","first-page":"452","article-title":"Evaluating the fault tolerance capabilities of embedded systems via BDM","author":"Rebaudengo","year":"1999"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0205","doi-asserted-by":"crossref","first-page":"575","DOI":"10.1109\/12.54853","article-title":"Fault injection experiments using FIAT","volume":"39","author":"Barton","year":"1990","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0210","first-page":"336","article-title":"FERRARI: a tool for the validation of system dependability properties","author":"Kanawati","year":"1992"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0215","doi-asserted-by":"crossref","first-page":"1105","DOI":"10.1109\/32.256857","article-title":"FINE: a fault injection and monitoring environment for tracing the Unix system behavior under faults","volume":"19","author":"Kao","year":"1993","journal-title":"IEEE Trans. Softw. Eng."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0220","series-title":"Fault-tolerant parallel and distributed systems","first-page":"252","article-title":"DEFINE: a distributed fault injection and monitoring environment","author":"Kao","year":"1995"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0225","series-title":"An approach towards benchmarking of fault-tolerant commercial systems","first-page":"314","author":"Tsai","year":"1996"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0230","first-page":"204","article-title":"DOCTOR: an integrated software fault injection environment for distributed real-time systems","author":"Han","year":"1995"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0235","doi-asserted-by":"crossref","first-page":"125","DOI":"10.1109\/32.666826","article-title":"Xception: a technique for the experimental evaluation of dependability in modern computers","volume":"24","author":"Carreira","year":"1998","journal-title":"IEEE Trans. Softw. Eng."},{"issue":"2","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0240","doi-asserted-by":"crossref","first-page":"138","DOI":"10.1109\/12.980005","article-title":"Dependability of COTS microkernel-based systems","volume":"51","author":"Arlat","year":"2002","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0245","doi-asserted-by":"crossref","first-page":"1515","DOI":"10.1109\/12.214660","article-title":"FOCUS: an experimental environment for fault sensitivity analysis","volume":"41","author":"Choi","year":"1992","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0250","first-page":"66","article-title":"Fault injection into VHDL models: the MEFISTO tool","author":"Jenn","year":"1994"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0255","first-page":"404","article-title":"Testing of fault-tolerant and real-time distributed systems via protocol fault injection","author":"Dawson","year":"1996"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0260","series-title":"Hardware and software co-design in space compaction of cores-based digital circuits","first-page":"503","author":"Assaf","year":"2004"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0265","doi-asserted-by":"crossref","first-page":"60","DOI":"10.1109\/12.559803","article-title":"DEPEND: a simulation-based environment for system level dependability analysis","volume":"46","author":"Goswami","year":"1997","journal-title":"IEEE Trans. Comput."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0270","doi-asserted-by":"crossref","first-page":"1487","DOI":"10.1109\/43.790625","article-title":"Fault emulation: a new methodology for fault grading","volume":"18","author":"Kwang-Ting","year":"1999","journal-title":"IEEE Trans. CAD Integr. Circuits Syst."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0275","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1016\/S0026-2692(02)00127-1","article-title":"New techniques for efficiently assessing reliability of SOCs","volume":"34","author":"Civera","year":"2003","journal-title":"Microelectronics J."},{"issue":"5","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0280","doi-asserted-by":"crossref","first-page":"1468","DOI":"10.1109\/TIM.2003.817144","article-title":"Using run-time reconfiguration for fault injection applications","volume":"52","author":"Antoni","year":"2003","journal-title":"IEEE Trans. Instrum. Meas."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0285","first-page":"291","article-title":"Run-time reconfiguration for emulating transient faults in VLSI systems","author":"de Andr\u00e9s","year":"2006"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0290","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1109\/TVLSI.2008.917428","article-title":"Fault emulation for dependability evaluation of VLSI systems","volume":"16","author":"de Andr\u00e9s","year":"2008","journal-title":"IEEE Trans. VLSI Syst."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0295","series-title":"Faultloads Based on Software Faults for Dependaility Benchmarking","author":"Dur\u00e3es","year":"2006"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0300","first-page":"10","article-title":"The SESAME experience: from assembly languages to declarative models","author":"Crouzet","year":"2006"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0305","first-page":"329","article-title":"Emulation of software faults by educated mutations at machine-code level","author":"Dur\u00e3es","year":"2002"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0310","first-page":"28","article-title":"The EFA Fault Injector for Fault-Tolerant Distributed System Testing","author":"Echtle","year":"1992"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0315","series-title":"Fault-tolerant parallel and distributed systems","first-page":"244","article-title":"Test of fault tolerant distributed systems by fault injection","author":"Echtle","year":"1995"},{"issue":"3","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0320","doi-asserted-by":"crossref","first-page":"443","DOI":"10.1109\/24.537015","article-title":"Fault injection for formal testing of fault tolerance","volume":"45","author":"Avresky","year":"1996","journal-title":"IEEE Trans. Reliab."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0325","first-page":"130","article-title":"A software fault injection tool on real-time mach","author":"Dawson","year":"1995"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0330","first-page":"276","article-title":"Dependability of CORBA systems: service characterization by fault injection","author":"Marsden","year":"2002"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0335","series-title":"Dependability Benchmarking for Computer Systems","year":"2008"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0340","unstructured":"Embedded Microprocessor Benchmarking Consortium, Web Site: http:\/\/www.eembc.org\/"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0345","unstructured":"Web Site of the Standard Performance Evaluation Corporation: http:\/\/www.spec.org\/"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0350","series-title":"Performance Evaluation and Benchmarking With Realistic Applications","year":"2001"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0355","unstructured":"Web Site of the Transaction Processing Performance Council: http:\/\/www.tpc.org\/"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0360","first-page":"F1","article-title":"Progress on defining standardized classes of computing the dependability of computer systems","author":"Wilson","year":"2002"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0365","first-page":"115","article-title":"Robustness benchmarking for hardware maintenance events","author":"Zhu","year":"2003"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0370","first-page":"B86","article-title":"R3\u2014a framework for availability benchmarking","author":"Zhu","year":"2003"},{"issue":"6","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0375","doi-asserted-by":"crossref","first-page":"366","DOI":"10.1109\/32.601075","article-title":"Measuring software dependability by robustness benchmarking","volume":"23","author":"Mukherjee","year":"1997","journal-title":"IEEE Trans. Softw. Eng."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0380","first-page":"261","article-title":"Benchmarking operating system dependability: Windows 2000 as a case study","author":"Kalakech","year":"2004"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0385","first-page":"681","article-title":"Benchmarking the dependability of Windows NT, 2000 and XP","author":"Kalakech","year":"2004"},{"issue":"3","key":"10.1016\/B978-0-12-396525-7.00004-6_bb0390","first-page":"275","article-title":"Dependability benchmarking for operating systems","volume":"2","author":"Kanoun","year":"2006","journal-title":"Int. J. Perform. Eng."},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0395","article-title":"Benchmarking the dependability of Windows and Linux using postmark workloads","author":"Kanoun","year":"2005"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0400","first-page":"30","article-title":"Comparing the robustness of POSIX operating systems","author":"Koopman","year":"1999"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0405","first-page":"261","article-title":"Robustness testing of the Microsoft Win32 API","author":"Shelton","year":"2000"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0410","first-page":"867","article-title":"Characterization of the impact of faulty drivers on the robustness of the Linux kernel","author":"Albinet","year":"2004"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0415","first-page":"201","article-title":"Characterization of operating systems behavior in the presence of faulty drivers through software fault emulation","author":"Dur\u00e3es","year":"2002"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0420","unstructured":"European Project on Dependability Benchmarking, IST-2000-25425, http:\/\/www.laas.fr\/DBench"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0425","unstructured":"Special Interest Group on Dependability Benchmarking of the IFIP Working Group 10.4 http:\/\/homepages.laas.fr\/kanoun\/ifip_wg_10_4_sigdeb\/"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0430","unstructured":"K. Kanoun, et al., Project Full Final Report 2004, Project Reports Section, http:\/\/www.laas.fr\/DBench"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0435","first-page":"668","article-title":"SURF-2: a program for dependability evaluation of complex hardware and software systems","author":"B\u00e9ounes","year":"1993"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0440","first-page":"72","article-title":"Comparing operating systems using robustness benchmarks","author":"Koopman","year":"1997"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0445","first-page":"135","article-title":"Detours: binary interception of Win32 functions","author":"Hunt","year":"1999"},{"key":"10.1016\/B978-0-12-396525-7.00004-6_bb0450","series-title":"Source Forge Strace Project","author":"McGrath","year":"2004"}],"container-title":["Advances in Computers","Dependable and Secure Systems Engineering"],"original-title":[],"language":"en","deposited":{"date-parts":[[2019,6,27]],"date-time":"2019-06-27T00:52:17Z","timestamp":1561596737000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/B9780123965257000046"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9780123965257"],"references-count":90,"URL":"https:\/\/doi.org\/10.1016\/b978-0-12-396525-7.00004-6","relation":{},"ISSN":["0065-2458"],"issn-type":[{"value":"0065-2458","type":"print"}],"subject":[],"published":{"date-parts":[[2012]]}}}