{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T20:35:04Z","timestamp":1773261304668,"version":"3.50.1"},"reference-count":140,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2025,10,28]],"date-time":"2025-10-28T00:00:00Z","timestamp":1761609600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100014440","name":"Spain Ministry of Science Innovation and Universities","doi-asserted-by":"publisher","award":["CER-20231011"],"award-info":[{"award-number":["CER-20231011"]}],"id":[{"id":"10.13039\/100014440","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100014440","name":"Spain Ministry of Science Innovation and Universities","doi-asserted-by":"publisher","award":["PID2023-152390NB-I00"],"award-info":[{"award-number":["PID2023-152390NB-I00"]}],"id":[{"id":"10.13039\/100014440","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008530","name":"European Regional Development Fund","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100008530","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003086","name":"Eusko Jaurlaritza","doi-asserted-by":"publisher","award":["MICIU\/AEI\/10.13039\/501100011033"],"award-info":[{"award-number":["MICIU\/AEI\/10.13039\/501100011033"]}],"id":[{"id":"10.13039\/501100003086","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003086","name":"Eusko Jaurlaritza","doi-asserted-by":"publisher","award":["projectsKK-2023\/00012"],"award-info":[{"award-number":["projectsKK-2023\/00012"]}],"id":[{"id":"10.13039\/501100003086","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Journal of Systems Architecture"],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1016\/j.sysarc.2025.103598","type":"journal-article","created":{"date-parts":[[2025,10,18]],"date-time":"2025-10-18T16:08:15Z","timestamp":1760803695000},"page":"103598","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["Linux for safety-critical systems: A survey"],"prefix":"10.1016","volume":"169","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-4558-1501","authenticated-orcid":false,"given":"Markel","family":"Galarraga","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Charles-Alexis","family":"Lefebvre","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jon","family":"Perez-Cerrolaza","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jose A.","family":"Pascual","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.sysarc.2025.103598_b1","series-title":"IEC 61508 (1-7): Functional safety of electrical\/electronic\/programmable electronic safety-related systems (second edition)","author":"International Electrotechnical Commission","year":"2010"},{"key":"10.1016\/j.sysarc.2025.103598_b2","series-title":"ISO 26262 (1-10): Road vehicles \u2014 Functional safety","author":"International Organization for Standardization","year":"2018"},{"issue":"7","key":"10.1016\/j.sysarc.2025.103598_b3","doi-asserted-by":"crossref","DOI":"10.1145\/3626314","article-title":"Artificial intelligence for safety-critical systems in industrial and transportation domains: A survey","volume":"56","author":"Perez-Cerrolaza","year":"2024","journal-title":"ACM Comput. Surv."},{"issue":"4","key":"10.1016\/j.sysarc.2025.103598_b4","article-title":"Multi-core devices for safety-critical systems: A survey","volume":"53","author":"Perez-Cerrolaza","year":"2020","journal-title":"ACM Comput. Surv."},{"issue":"7","key":"10.1016\/j.sysarc.2025.103598_b5","doi-asserted-by":"crossref","DOI":"10.1145\/3549526","article-title":"GPU devices for safety-critical systems: A survey","volume":"55","author":"Perez-Cerrolaza","year":"2022","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.sysarc.2025.103598_b6","doi-asserted-by":"crossref","first-page":"106065","DOI":"10.1109\/ACCESS.2021.3100125","article-title":"Statistical test coverage for Linux-based next-generation autonomous safety-related systems","volume":"9","author":"Allende","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.sysarc.2025.103598_b7","series-title":"2021 Linux foundation annual report. New Horizons for Open Source","author":"The Linux Foundation","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b8","series-title":"Embedded World","article-title":"Certifying Linux: Lessons Learned in Three Years of SIL2LinuxMP","author":"Platschek","year":"2018"},{"issue":"1","key":"10.1016\/j.sysarc.2025.103598_b9","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1109\/TDSC.2004.2","article-title":"Basic concepts and taxonomy of dependable and secure computing","volume":"1","author":"Avizienis","year":"2004","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"issue":"1","key":"10.1016\/j.sysarc.2025.103598_b10","doi-asserted-by":"crossref","DOI":"10.1145\/3297714","article-title":"The real-time Linux kernel: A survey on PREEMPT_RT","volume":"52","author":"Reghenzani","year":"2019","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.sysarc.2025.103598_b11","series-title":"Workshop on Fog Computing and the Internet of Things","article-title":"Real-time containers: A survey","author":"Struh\u00e1r","year":"2020"},{"key":"10.1016\/j.sysarc.2025.103598_b12","doi-asserted-by":"crossref","first-page":"36244","DOI":"10.1109\/ACCESS.2023.3264825","article-title":"A comprehensive survey on the use of hypervisors in safety-critical systems","volume":"11","author":"Lozano","year":"2023","journal-title":"IEEE Access"},{"key":"10.1016\/j.sysarc.2025.103598_b13","first-page":"359","article-title":"Testing practices of software in safety critical systems: Industrial survey","volume":"vol. 2","author":"Kassab","year":"2018"},{"key":"10.1016\/j.sysarc.2025.103598_b14","first-page":"283","article-title":"Challenges in flexible safety-critical software development - an industrial qualitative survey","volume":"7983 LNCS","author":"Pedersen Notander","year":"2013","journal-title":"Lect. Notes Comput. Sci. (Including Subser. Lect. Notes Artif. Intell. Lect. Notes Bioinform.)"},{"issue":"1","key":"10.1016\/j.sysarc.2025.103598_b15","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1109\/TIV.2016.2578706","article-title":"A survey of motion planning and control techniques for self-driving urban vehicles","volume":"1","author":"Paden","year":"2016","journal-title":"IEEE Trans. Intell. Veh."},{"key":"10.1016\/j.sysarc.2025.103598_b16","series-title":"IEEE Computer Society Conference on Computer Vision and Pattern Recognition Workshops","first-page":"129","article-title":"Development methodologies for safety critical machine learning applications in the automotive domain: A survey","author":"Rabe","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b17","series-title":"IECON Proceedings (Industrial Electronics Conference)","first-page":"2587","article-title":"The safety critical electric machines and drives in the more electric aircraft: A survey","author":"Boglietti","year":"2009"},{"key":"10.1016\/j.sysarc.2025.103598_b18","doi-asserted-by":"crossref","first-page":"156","DOI":"10.1016\/j.ress.2015.02.008","article-title":"A survey of approaches combining safety and security for industrial control systems","volume":"139","author":"Kriaa","year":"2015","journal-title":"Reliab. Eng. Syst. Saf."},{"issue":"3","key":"10.1016\/j.sysarc.2025.103598_b19","doi-asserted-by":"crossref","first-page":"2189","DOI":"10.1109\/JSYST.2018.2881017","article-title":"Safety and security co-analyses: A systematic literature review","volume":"13","author":"Lisova","year":"2019","journal-title":"IEEE Syst. J."},{"issue":"4","key":"10.1016\/j.sysarc.2025.103598_b20","doi-asserted-by":"crossref","DOI":"10.3390\/fi12040065","article-title":"Cybersecurity and safety co-engineering of cyberphysical systems\u2014A comprehensive survey","volume":"12","author":"Kavallieratos","year":"2020","journal-title":"Futur. Internet"},{"key":"10.1016\/j.sysarc.2025.103598_b21","series-title":"Proceedings of 6th International Conference in Software Engineering for Defence Applications","first-page":"245","article-title":"Safety and security in GNU\/Linux real time operating system domain","author":"Procopio","year":"2020"},{"key":"10.1016\/j.sysarc.2025.103598_b22","series-title":"10th IEEE International Symposium on Industrial Embedded Systems","first-page":"1","article-title":"Integrating Linux and the real-time ERIKA OS through the Xen hypervisor","author":"Avanzini","year":"2015"},{"key":"10.1016\/j.sysarc.2025.103598_b23","doi-asserted-by":"crossref","first-page":"75446","DOI":"10.1109\/ACCESS.2021.3080842","article-title":"SPHERE: A multi-SoC architecture for next-generation cyber-physical systems based on heterogeneous platforms","volume":"9","author":"Biondi","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.sysarc.2025.103598_b24","series-title":"2022 IEEE 28th Real-Time and Embedded Technology and Applications Symposium","first-page":"68","article-title":"FLYOS: Integrated modular avionics for autonomous multicopters","author":"Farrukh","year":"2022"},{"issue":"4","key":"10.1016\/j.sysarc.2025.103598_b25","doi-asserted-by":"crossref","first-page":"609","DOI":"10.1007\/s11241-023-09402-4","article-title":"Supporting AI-powered real-time cyber-physical systems on heterogeneous platforms via hypervisor technology","volume":"59","author":"Cittadini","year":"2023","journal-title":"Real-Time Syst."},{"issue":"2","key":"10.1016\/j.sysarc.2025.103598_b26","doi-asserted-by":"crossref","first-page":"256","DOI":"10.1007\/s11241-023-09399-w","article-title":"FlyOS: rethinking integrated modular avionics for autonomous multicopters","volume":"59","author":"Farrukh","year":"2023","journal-title":"Real-Time Syst."},{"key":"10.1016\/j.sysarc.2025.103598_b27","article-title":"A hypervisor based platform to support real-time safety critical embedded java applications","volume":"28","author":"Gonz\u00e1lez","year":"2013","journal-title":"Comput. Syst. Sci. Eng."},{"key":"10.1016\/j.sysarc.2025.103598_b28","series-title":"2021 IEEE 27th International Conference on Embedded and Real-Time Computing Systems and Applications","first-page":"73","article-title":"A multi-domain software architecture for safe and secure autonomous driving","author":"Belluardo","year":"2021"},{"issue":"16","key":"10.1016\/j.sysarc.2025.103598_b29","doi-asserted-by":"crossref","DOI":"10.3390\/electronics11162631","article-title":"KHV: KVM-based heterogeneous virtualization","volume":"11","author":"Li","year":"2022","journal-title":"Electronics"},{"key":"10.1016\/j.sysarc.2025.103598_b30","series-title":"Workshop on Next Generation Real-Time Embedded Systems (NG-RES 2020)","first-page":"3:1","article-title":"Bao: A Lightweight Static Partitioning Hypervisor for Modern Multi-Core Embedded Systems","volume":"77","author":"Martins","year":"2020"},{"key":"10.1016\/j.sysarc.2025.103598_b31","series-title":"Digital Transformation in Semiconductor Manufacturing","first-page":"121","article-title":"A novel software architecture for mixed criticality systems","author":"Ramsauer","year":"2020"},{"key":"10.1016\/j.sysarc.2025.103598_b32","series-title":"Concurrent Engineering Approaches for Sustainable Product Development in a Multi-Disciplinary Environment","first-page":"1093","article-title":"Overcoming the interoperability barrier in mixed-criticality systems","author":"Schneider","year":"2013"},{"key":"10.1016\/j.sysarc.2025.103598_b33","series-title":"Advanced in-vehicle systems: A reference design for the future","author":"Patrick","year":"2016"},{"issue":"5s","key":"10.1016\/j.sysarc.2025.103598_b34","doi-asserted-by":"crossref","DOI":"10.1145\/3477013","article-title":"Towards an integrated vehicle management system in DriveOS","volume":"20","author":"Sinha","year":"2021","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"10.1016\/j.sysarc.2025.103598_b35","series-title":"2021 10th Mediterranean Conference on Embedded Computing","first-page":"1","article-title":"VOSySmonitoRV: a mixed-criticality solution on Linux-capable RISC-V platforms","author":"Caforio","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b36","series-title":"2018 IEEE 13th International Symposium on Industrial Embedded Systems","first-page":"1","article-title":"VOSYSVirtualNet: Low-latency inter-world network channel for mixed-criticality systems","author":"Vetter","year":"2018"},{"key":"10.1016\/j.sysarc.2025.103598_b37","series-title":"36th Euromicro Conference on Real-Time Systems","first-page":"1:1","article-title":"JuMP2start: Time-Aware Stop-Start Technology for a Software-Defined Vehicle System","volume":"vol. 298","author":"Farrukh","year":"2024"},{"key":"10.1016\/j.sysarc.2025.103598_b38","series-title":"2023 IEEE 16th International Symposium on Embedded Multicore\/Many-Core Systems-on-Chip (MCSoC)","first-page":"340","article-title":"Low-latency inter-domain communication on the Xen hypervisor","author":"Lesniak","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b39","series-title":"Proceedings of the 2023 International Conference on Research in Adaptive and Convergent Systems","article-title":"Architectural design on hypervisor-based guest OSs and safetyrtos in automotive platform","author":"Kim","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b40","series-title":"Reliable Software Technologies \u2014 Ada-Europe\u2019 99","first-page":"287","article-title":"A \u201cbare-machine\u201d implementation of Ada multi-tasking beneath the Linux kernel","author":"Shen","year":"1999"},{"key":"10.1016\/j.sysarc.2025.103598_b41","series-title":"2021 IEEE International Symposium on Software Reliability Engineering Workshops","first-page":"286","article-title":"Hierarchical scheduling for real-time containers in mixed-criticality systems","author":"Barletta","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b42","series-title":"From Active Data Management To Event-Based Systems and more - Papers in Honor of Alejandro Buchmann on the Occasion of His 60th Birthday","first-page":"159","article-title":"SParK: Safety partition kernel for integrated real-time systems","volume":"vol. 6462","author":"Ghaisas","year":"2010"},{"key":"10.1016\/j.sysarc.2025.103598_b43","series-title":"2008 11th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing","first-page":"429","article-title":"Temporal and spatial partitioning of a time-triggered operating system based on real-time Linux","author":"Obermaisser","year":"2008"},{"key":"10.1016\/j.sysarc.2025.103598_b44","series-title":"2021 17th European Dependable Computing Conference","first-page":"53","article-title":"Run-time monitoring and control for temporal fault prevention in mixed-criticality systems","author":"Loche","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b45","first-page":"211","article-title":"Integration of two complementary time-triggered technologies: TMO and TTP","volume":"184","author":"Obermaisser","year":"2005","journal-title":"From Specif. Embed. Syst. Appl."},{"key":"10.1016\/j.sysarc.2025.103598_b46","first-page":"80","article-title":"A framework for rapid application development of distributed embedded real-time systems","volume":"vol. 1","author":"Obermaisser","year":"2003"},{"key":"10.1016\/j.sysarc.2025.103598_b47","series-title":"Automotive - Safety & Security 2014","first-page":"55","article-title":"Safety issues of integrating IVI and ADAS functionality via running Linux and AUTOSAR in parallel on a dual-core-system","author":"Schneider","year":"2015"},{"key":"10.1016\/j.sysarc.2025.103598_b48","article-title":"Fault resilient FPGA design for 28 nm ZYNQ system-on-chip based radiation monitoring system at CERN","volume":"100\u2013101","author":"Toner","year":"2019","journal-title":"Microelectron. Reliab."},{"key":"10.1016\/j.sysarc.2025.103598_b49","series-title":"Applications in Electronics Pervading Industry, Environment and Society","first-page":"164","article-title":"X86 system management mode (SMM) evaluation for mixed critical systems","author":"Mouzakitis","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b50","series-title":"2023 12th Mediterranean Conference on Embedded Computing","first-page":"1","article-title":"Towards a RISC-V open platform for next-generation automotive ECUs","author":"Cuomo","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b51","series-title":"2021 XXXVI Conference on Design of Circuits and Integrated Systems","first-page":"1","article-title":"Evaluating the OpenAMP framework in real-time embedded SoC platforms","author":"Alonso","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b52","series-title":"2018 IEEE 8th International Conference on Consumer Electronics - Berlin","first-page":"1","article-title":"Hypervisor based approach for integrated cockpit solutions","author":"Karthik","year":"2018"},{"key":"10.1016\/j.sysarc.2025.103598_b53","series-title":"2022 IEEE 27th International Conference on Emerging Technologies and Factory Automation","first-page":"1","article-title":"Efficient timing isolation for mixed-criticality communication stacks in performance architectures","author":"Gemlau","year":"2022"},{"key":"10.1016\/j.sysarc.2025.103598_b54","series-title":"Proceedings of the 24th International Middleware Conference: Industrial Track","first-page":"22","article-title":"Mr-TEE: Practical trusted execution of mixed-criticality code","author":"Van Eyck","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b55","series-title":"Software Engineering and Formal Methods","first-page":"315","article-title":"Efficient formal verification for the Linux kernel","author":"de Oliveira","year":"2019"},{"issue":"2","key":"10.1016\/j.sysarc.2025.103598_b56","doi-asserted-by":"crossref","first-page":"149","DOI":"10.1007\/s11334-009-0088-1","article-title":"Certification of software for real-time safety-critical systems: state of the art","volume":"5","author":"Kornecki","year":"2009","journal-title":"Innov. Syst. Softw. Eng."},{"key":"10.1016\/j.sysarc.2025.103598_b57","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1016\/j.anucene.2014.03.009","article-title":"Issues of operating systems usage for nuclear power plants","volume":"70","author":"Andryushin","year":"2014","journal-title":"Ann. Nucl. Energy"},{"key":"10.1016\/j.sysarc.2025.103598_b58","article-title":"Linux for safety critical systems in IEC 61508 context","volume":"vol. 5","author":"Mc Guire","year":"2007"},{"key":"10.1016\/j.sysarc.2025.103598_b59","series-title":"2020 50th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshops","first-page":"70","article-title":"Approaching certification of complex systems","author":"Mc Guire","year":"2020"},{"issue":"3","key":"10.1016\/j.sysarc.2025.103598_b60","doi-asserted-by":"crossref","first-page":"143","DOI":"10.61485\/IJAeT\/v5-3-2023-18","article-title":"A graphics device driver implementation compliant with opengl SC 2.0.1 standard specification","volume":"5","author":"Baek","year":"2023","journal-title":"Int. J. Appl. Eng. Technology (London)"},{"key":"10.1016\/j.sysarc.2025.103598_b61","series-title":"2023 IEEE\/AIAA 42nd Digital Avionics Systems Conference","first-page":"1","article-title":"Avionics Linux","author":"VanderLeest","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b62","series-title":"2023 IEEE\/AIAA 42nd Digital Avionics Systems Conference","first-page":"1","article-title":"Enabling Linux in aerospace applications","author":"VanderLeest","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b63","series-title":"2021 Design, Automation & Test in Europe Conference & Exhibition","first-page":"1446","article-title":"Estimation of Linux kernel execution path uncertainty for safety software test coverage","author":"Allende","year":"2021"},{"issue":"C","key":"10.1016\/j.sysarc.2025.103598_b64","article-title":"Towards Linux based safety systems\u2014A statistical approach for software execution path coverage","volume":"116","author":"Allende","year":"2021","journal-title":"J. Syst. Archit."},{"issue":"1","key":"10.1016\/j.sysarc.2025.103598_b65","doi-asserted-by":"crossref","DOI":"10.1080\/09540091.2023.2192442","article-title":"Analyzing execution path non-determinism of the linux kernel in different scenarios","volume":"35","author":"Chen","year":"2023","journal-title":"Connect. Sci."},{"key":"10.1016\/j.sysarc.2025.103598_b66","series-title":"2024 China Automation Congress","first-page":"4433","article-title":"Dynamic execution path analysis of the Linux kernel on ACRN","author":"Shao","year":"2024"},{"key":"10.1016\/j.sysarc.2025.103598_b67","doi-asserted-by":"crossref","DOI":"10.1016\/j.sysarc.2024.103266","article-title":"Toward Linux-based safety-critical systems\u2014Execution time variability analysis of Linux system calls","volume":"156","author":"Galarraga","year":"2024","journal-title":"J. Syst. Archit."},{"key":"10.1016\/j.sysarc.2025.103598_b68","series-title":"2023 Design, Automation & Test in Europe Conference & Exhibition","first-page":"1","article-title":"Formal analysis of timing diversity for autonomous systems","author":"Christmann","year":"2023"},{"issue":"5","key":"10.1016\/j.sysarc.2025.103598_b69","doi-asserted-by":"crossref","DOI":"10.3390\/computers10050064","article-title":"Real-time performance and response latency measurements of linux kernels on single-board computers","volume":"10","author":"Adam","year":"2021","journal-title":"Computers"},{"key":"10.1016\/j.sysarc.2025.103598_b70","series-title":"2022 IEEE 28th International Conference on Embedded and Real-Time Computing Systems and Applications","first-page":"212","article-title":"Controlling high-performance platform uncertainties with timing diversity","author":"Hapka","year":"2022"},{"key":"#cr-split#-10.1016\/j.sysarc.2025.103598_b71.1","unstructured":"L. Thomeczek, A. Attenberger, J. Kolb, V. Matousek, J. Mottok, Measuring Safety Critical Latency Sources using Linux Kernel eBPF Tracing, in: ARCS Workshop 2019"},{"key":"#cr-split#-10.1016\/j.sysarc.2025.103598_b71.2","unstructured":"32nd International Conference on Architecture of Computing Systems, 2019, pp. 1-8."},{"key":"10.1016\/j.sysarc.2025.103598_b72","series-title":"2017 IEEE 26th International Symposium on Industrial Electronics","first-page":"1297","article-title":"Towards predictable execution model on ARM-based heterogeneous platforms","author":"Houdek","year":"2017"},{"key":"10.1016\/j.sysarc.2025.103598_b73","series-title":"2019 IEEE Real-Time and Embedded Technology and Applications Symposium","first-page":"65","article-title":"Deterministic futexes: Addressing WCET and bounded interference concerns","author":"Zuepke","year":"2019"},{"key":"10.1016\/j.sysarc.2025.103598_b74","series-title":"2010 IEEE 15th Conference on Emerging Technologies & Factory Automation","first-page":"1","article-title":"Resource management for enhancing predictability in systems with limited processing capabilities","author":"Alonso","year":"2010"},{"key":"10.1016\/j.sysarc.2025.103598_b75","series-title":"2018 31st IEEE International System-on-Chip Conference","first-page":"215","article-title":"Reducing memory interference latency of safety-critical applications via memory request throttling and Linux Cgroup","author":"Kim","year":"2018"},{"key":"10.1016\/j.sysarc.2025.103598_b76","series-title":"2021 26th IEEE International Conference on Emerging Technologies and Factory Automation","first-page":"1","article-title":"REACT: Enabling real-time container orchestration","author":"Struh\u00e1r","year":"2021"},{"issue":"12","key":"10.1016\/j.sysarc.2025.103598_b77","doi-asserted-by":"crossref","first-page":"2723","DOI":"10.1007\/s11432-012-4739-8","article-title":"Anticipatory active monitoring for safety- and security-critical software","volume":"55","author":"Dong","year":"2012","journal-title":"Sci. China Inf. Sci."},{"key":"10.1016\/j.sysarc.2025.103598_b78","series-title":"2021 IEEE International Conference on Robotics and Automation","first-page":"708","article-title":"Benchmarking real-time capabilities of ROS 2 and OROCOS for robotics applications","author":"Barut","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b79","series-title":"2016 IEEE 19th International Conference on Intelligent Transportation Systems","first-page":"2398","article-title":"Systematic evaluation of sandboxed software deployment for real-time software on the example of a self-driving heavy vehicle","author":"Masek","year":"2016"},{"key":"10.1016\/j.sysarc.2025.103598_b80","series-title":"2021 26th IEEE International Conference on Emerging Technologies and Factory Automation","first-page":"1","article-title":"Evaluation of networking options for containerized deployment of real-time applications","author":"Albanese","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b81","series-title":"Innovative Intelligent Industrial Production and Logistics","first-page":"486","article-title":"Impact of real-time Linux for industrial edge AI","author":"De Barrena","year":"2025"},{"key":"10.1016\/j.sysarc.2025.103598_b82","series-title":"36th Euromicro Conference on Real-Time Systems (ECRTS 2024)","first-page":"12:1","article-title":"Autonomy Today: Many Delay-Prone Black Boxes","volume":"vol. 298","author":"Liu","year":"2024"},{"key":"10.1016\/j.sysarc.2025.103598_b83","series-title":"2023 IEEE 29th International Conference on Parallel and Distributed Systems","first-page":"2100","article-title":"Want predictable GPU execution? Beware SMIs!","author":"Wagle","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b84","series-title":"2023 IEEE 29th International Conference on Embedded and Real-Time Computing Systems and Applications","first-page":"38","article-title":"BandWatch: A system-wide memory bandwidth regulation system for heterogeneous multicore","author":"Seals","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b85","series-title":"2021 IEEE 27th International Conference on Embedded and Real-Time Computing Systems and Applications","first-page":"159","article-title":"Thermal-aware scheduling for MPSoC in the avionics domain: Tooling and initial results","author":"Benedikt","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b86","series-title":"2014 IEEE 19th Real-Time and Embedded Technology and Applications Symposium","first-page":"111","article-title":"Partitioned scheduling of multi-modal mixed-criticality real-time systems on multiprocessor platforms","author":"de Niz","year":"2014"},{"key":"10.1016\/j.sysarc.2025.103598_b87","series-title":"The 17th Annual Workshop on Operating Systems Platforms for Embedded Real-Time Applications","article-title":"Joint time-and event-triggered scheduling in the Linux kernel","author":"Gala","year":"2023"},{"issue":"12","key":"10.1016\/j.sysarc.2025.103598_b88","doi-asserted-by":"crossref","first-page":"2806","DOI":"10.1109\/TPDS.2019.2926455","article-title":"Resource-aware scheduling for dependable multicore real-time systems: Utilization bound and partitioning algorithm","volume":"30","author":"Han","year":"2019","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"10.1016\/j.sysarc.2025.103598_b89","series-title":"2016 IEEE Real-Time and Embedded Technology and Applications Symposium","first-page":"1","article-title":"Mixed-criticality federated scheduling for parallel real-time tasks","author":"Li","year":"2016"},{"issue":"4","key":"10.1016\/j.sysarc.2025.103598_b90","doi-asserted-by":"crossref","DOI":"10.1145\/2362336.2362350","article-title":"Overload provisioning in mixed-criticality cyber-physical systems","volume":"11","author":"Lakshmanan","year":"2013","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"10.1016\/j.sysarc.2025.103598_b91","series-title":"2019 IEEE Real-Time and Embedded Technology and Applications Symposium","first-page":"143","article-title":"RT-Gang: Real-time gang scheduling framework for safety-critical systems","author":"Ali","year":"2019"},{"issue":"9","key":"10.1016\/j.sysarc.2025.103598_b92","doi-asserted-by":"crossref","first-page":"5727","DOI":"10.1109\/LRA.2023.3300251","article-title":"A safety-performance metric enabling computational awareness in autonomous robots","volume":"8","author":"Sifat","year":"2023","journal-title":"IEEE Robot. Autom. Lett."},{"key":"10.1016\/j.sysarc.2025.103598_b93","series-title":"2018 IEEE International Symposium on Software Reliability Engineering Workshops","first-page":"71","article-title":"A fault injection approach to evaluate soft-error dependability of system calls","author":"Amarnath","year":"2018"},{"issue":"2","key":"10.1016\/j.sysarc.2025.103598_b94","doi-asserted-by":"crossref","DOI":"10.1145\/1880050.1880060","article-title":"Boosting software fault injection for dependability analysis of real-time embedded applications","volume":"10","author":"Cabodi","year":"2011","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"10.1016\/j.sysarc.2025.103598_b95","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1016\/j.jpdc.2017.03.004","article-title":"On the injection of hardware faults in virtualized multicore systems","volume":"106","author":"Cinque","year":"2017","journal-title":"J. Parallel Distrib. Comput."},{"key":"10.1016\/j.sysarc.2025.103598_b96","series-title":"Computer Safety, Reliability, and Security","first-page":"213","article-title":"Systems-theoretic safety assessment of robotic telesurgical systems","author":"Alemzadeh","year":"2015"},{"key":"10.1016\/j.sysarc.2025.103598_b97","series-title":"2016 17th Latin-American Test Symposium","first-page":"147","article-title":"Soft error analysis in embedded software developed with & without operating system","author":"Casagrande","year":"2016"},{"key":"10.1016\/j.sysarc.2025.103598_b98","series-title":"Computer Safety, Reliability, and Security","first-page":"106","article-title":"A preliminary fault injection framework for evaluating multicore systems","author":"Lanzaro","year":"2012"},{"key":"10.1016\/j.sysarc.2025.103598_b99","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1016\/j.microrel.2016.02.011","article-title":"KITO tool: A fault injection environment in Linux kernel data structures","volume":"60","author":"Velasco","year":"2016","journal-title":"Microelectron. Reliab."},{"key":"10.1016\/j.sysarc.2025.103598_b100","series-title":"2011 IEEE International Workshop on Measurements and Networking Proceedings (M&N)","first-page":"71","article-title":"Towards identifying OS-level anomalies to detect application software failures","author":"Bovenzi","year":"2011"},{"key":"#cr-split#-10.1016\/j.sysarc.2025.103598_b101.1","unstructured":"A.D. Velasco, B. Montrucchio, M. Rebaudengo, Hardening Approach for the Scheduler's Kernel Data Structures, in: ARCS 2017"},{"key":"#cr-split#-10.1016\/j.sysarc.2025.103598_b101.2","unstructured":"30th International Conference on Architecture of Computing Systems, 2017, pp. 1-4."},{"key":"10.1016\/j.sysarc.2025.103598_b102","series-title":"2017 18th IEEE Latin American Test Symposium","first-page":"1","article-title":"TMR technique for mutex kernel data structures","author":"Velasco","year":"2017"},{"key":"10.1016\/j.sysarc.2025.103598_b103","series-title":"2012 IEEE International Conference on Technologies for Practical Robot Applications","first-page":"1","article-title":"Fault detection and diagnosis for component-based robotic systems","author":"Jung","year":"2012"},{"key":"10.1016\/j.sysarc.2025.103598_b104","series-title":"Computer Safety, Reliability, and Security","first-page":"213","article-title":"A case study on state-based robustness testing of an operating system for the avionic domain","author":"Cotroneo","year":"2011"},{"key":"10.1016\/j.sysarc.2025.103598_b105","series-title":"2016 6th International Conference on Computer and Knowledge Engineering","first-page":"159","article-title":"Improving the stateful robustness testing of embedded real-time operating systems","author":"Shahpasand","year":"2016"},{"issue":"8","key":"10.1016\/j.sysarc.2025.103598_b106","first-page":"2196","article-title":"Analyzing the impact of fault-tolerance methods in ARM processors under soft errors running Linux and parallelization APIs","volume":"64","author":"Rodrigues","year":"2017","journal-title":"IEEE Trans. Nucl. Sci."},{"key":"10.1016\/j.sysarc.2025.103598_b107","series-title":"VLSI-SoC: Design Trends","first-page":"235","article-title":"RAT: A lightweight architecture independent system-level soft error mitigation technique","author":"Gava","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b108","series-title":"2020 IFIP\/IEEE 28th International Conference on Very Large Scale Integration","first-page":"165","article-title":"RAT: A lightweight system-level soft error mitigation technique","author":"Gava","year":"2020"},{"key":"10.1016\/j.sysarc.2025.103598_b109","doi-asserted-by":"crossref","DOI":"10.1016\/j.sysarc.2022.102710","article-title":"SOFIA: An automated framework for early soft error assessment, identification, and mitigation","volume":"131","author":"Gava","year":"2022","journal-title":"J. Syst. Archit."},{"key":"10.1016\/j.sysarc.2025.103598_b110","series-title":"2016 16th European Conference on Radiation and Its Effects on Components and Systems","first-page":"1","article-title":"Analyzing the impact of using pthreads versus openmp under fault injection in ARM cortex-A9 dual-core","author":"Rodrigues","year":"2016"},{"key":"10.1016\/j.sysarc.2025.103598_b111","unstructured":"F. Mazzocchetti, S. Alcaide, F. Bas, P. Benedicte, G. Cabo, F. Chang, F. Fuentes, J. Abella, SafeSoftDR: A Library to Enable Software-based Diverse Redundancy for Safety-Critical Tasks, in: FORECAST Workshop (with HiPEAC Conference), 2022."},{"key":"10.1016\/j.sysarc.2025.103598_b112","series-title":"2012 IEEE\/AIAA 31st Digital Avionics Systems Conference","first-page":"6C5","article-title":"Full virtualizing micro hypervisor for spacecraft flight computer","author":"Joe","year":"2012"},{"key":"10.1016\/j.sysarc.2025.103598_b113","unstructured":"A. Prakash, L. Krawczyk, C. Wolff, APP4MC RaceCar: A Practical ADAS Demonstrator for Evaluating and Verifying Timing Behavior, in: Proceedings of the 2nd Eclipse Research International Conference on Security, Artificial Intelligence, Architecture and Modelling for Next Generation Mobility, 2021."},{"key":"10.1016\/j.sysarc.2025.103598_b114","series-title":"Systems, Software and Services Process Improvement","first-page":"465","article-title":"Highly autonomous vehicle (system) design patterns \u2013 achieving fail operational and high level of safety and security","author":"Messnarz","year":"2019"},{"key":"10.1016\/j.sysarc.2025.103598_b115","series-title":"2017 22nd International Conference on Engineering of Complex Computer Systems","first-page":"40","article-title":"Distributed object-oriented design of autonomous control systems for connected vehicle platoons","author":"Mouelhi","year":"2017"},{"key":"10.1016\/j.sysarc.2025.103598_b116","series-title":"2012 IEEE 15th International Symposium on Object\/Component\/Service-Oriented Real-Time Distributed Computing Workshops","first-page":"53","article-title":"Design and implementation of an automotive telematics gateway based on virtualization","author":"Gu","year":"2012"},{"key":"10.1016\/j.sysarc.2025.103598_b117","series-title":"2019 15th European Dependable Computing Conference","first-page":"47","article-title":"Towards Linux for the development of mixed-criticality embedded systems based on multi-core devices","author":"Allende","year":"2019"},{"key":"10.1016\/j.sysarc.2025.103598_b118","series-title":"2018 IEEE 8th International Conference on Consumer Electronics - Berlin","first-page":"1","article-title":"Digital cockpit in AUTOSAR adaptive context","author":"Kotur","year":"2018"},{"key":"10.1016\/j.sysarc.2025.103598_b119","series-title":"2020 23rd Euromicro Conference on Digital System Design","first-page":"370","article-title":"SELENE: Self-monitored dependable platform for high-performance safety-critical systems","author":"Hern\u00e0ndez","year":"2020"},{"key":"10.1016\/j.sysarc.2025.103598_b120","series-title":"2011 IEEE 27th International Conference on Data Engineering Workshops","first-page":"174","article-title":"Non-disruptive large-scale component updates for real-time controllers","author":"Wahler","year":"2011"},{"key":"10.1016\/j.sysarc.2025.103598_b121","series-title":"Mobile Computing, Applications, and Services","first-page":"294","article-title":"An approach for using mobile devices in industrial safety-critical embedded systems","author":"Armoush","year":"2014"},{"key":"10.1016\/j.sysarc.2025.103598_b122","series-title":"seL4 Proofs & Certification","author":"seL4 Foundation","year":"2025"},{"key":"10.1016\/j.sysarc.2025.103598_b123","series-title":"29th Euromicro Conference on Real-Time Systems (ECRTS 2017)","first-page":"6:1","article-title":"VOSYSmonitor, a Low Latency Monitor Layer for Mixed-Criticality Systems on ARMv8-A","volume":"vol. 76","author":"Lucas","year":"2017"},{"key":"10.1016\/j.sysarc.2025.103598_b124","series-title":"2011 17th IEEE Real-Time and Embedded Technology and Applications Symposium","first-page":"269","article-title":"A predictable execution model for COTS-based embedded systems","author":"Pellizzoni","year":"2011"},{"key":"10.1016\/j.sysarc.2025.103598_b125","series-title":"SIL2LinuxMP: OSADL - Open Source Automation Development Lab eG","author":"OSADL","year":"2014"},{"key":"10.1016\/j.sysarc.2025.103598_b126","series-title":"ELISA - Advancing Open Source Safety-Critical Systems","author":"ELISA","year":"2019"},{"key":"10.1016\/j.sysarc.2025.103598_b127","series-title":"AGL - Automotive Grade Linux","author":"Automotive Grade Linux","year":"2012"},{"key":"10.1016\/j.sysarc.2025.103598_b128","series-title":"What OS Does Tesla Use?","author":"McElligott","year":"2023"},{"key":"10.1016\/j.sysarc.2025.103598_b129","series-title":"Taxonomy and Definitions for Terms Related to Driving Automation Systems for On-Road Motor Vehicles","author":"SAE International","year":"2021"},{"key":"10.1016\/j.sysarc.2025.103598_b130","series-title":"EB corbos Linux for Safety Applications","author":"Elektrobit","year":"2024"},{"key":"10.1016\/j.sysarc.2025.103598_b131","series-title":"Codethink Trustable Reproducible Linux (CTRL OS)","author":"Codethink","year":"2025"},{"key":"10.1016\/j.sysarc.2025.103598_b132","series-title":"Space Grade Linux SIG. Building a space ready Linux distribution.","author":"ELISA","year":"2019"},{"key":"10.1016\/j.sysarc.2025.103598_b133","series-title":"How Embedded Linux is used in Spacecrafts !","author":"Emad","year":"2024"},{"key":"10.1016\/j.sysarc.2025.103598_b134","series-title":"AIAA Scitech 2019 Forum","first-page":"1289","article-title":"Flight control system for nasa\u2019s mars helicopter","author":"avard F. Grip","year":"2019"},{"key":"10.1016\/j.sysarc.2025.103598_b135","series-title":"Proceedings of the 2014 IEEE Emerging Technology and Factory Automation","first-page":"1","article-title":"Linux-based memory efficient ARINC 653 partition scheduler","author":"Kown","year":"2014"},{"key":"10.1016\/j.sysarc.2025.103598_b136","series-title":"2011 IEEE\/AIAA 30th Digital Avionics Systems Conference","first-page":"7E1","article-title":"Full virtualization based ARINC 653 partitioning","author":"Han","year":"2011"},{"key":"10.1016\/j.sysarc.2025.103598_b137","series-title":"29th Digital Avionics Systems Conference","first-page":"5.E.2","article-title":"ARINC 653 hypervisor","author":"VanderLeest","year":"2010"},{"key":"10.1016\/j.sysarc.2025.103598_b138","series-title":"Redhawk Linux RTOS","author":"Concurrent Real-Time","year":"2022"}],"container-title":["Journal of Systems Architecture"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S138376212500270X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S138376212500270X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T04:12:44Z","timestamp":1773202364000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S138376212500270X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12]]},"references-count":140,"alternative-id":["S138376212500270X"],"URL":"https:\/\/doi.org\/10.1016\/j.sysarc.2025.103598","relation":{},"ISSN":["1383-7621"],"issn-type":[{"value":"1383-7621","type":"print"}],"subject":[],"published":{"date-parts":[[2025,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Linux for safety-critical systems: A survey","name":"articletitle","label":"Article Title"},{"value":"Journal of Systems Architecture","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.sysarc.2025.103598","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2025 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"103598"}}