{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,24]],"date-time":"2025-09-24T09:00:15Z","timestamp":1758704415187,"version":"3.28.0"},"reference-count":27,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,8,24]],"date-time":"2020-08-24T00:00:00Z","timestamp":1598227200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,8,24]],"date-time":"2020-08-24T00:00:00Z","timestamp":1598227200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,8,24]],"date-time":"2020-08-24T00:00:00Z","timestamp":1598227200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,8,24]]},"DOI":"10.1109\/syscon47679.2020.9275888","type":"proceedings-article","created":{"date-parts":[[2020,12,7]],"date-time":"2020-12-07T23:40:26Z","timestamp":1607384426000},"page":"1-5","source":"Crossref","is-referenced-by-count":8,"title":["Beyond SOTIF: Black Swans and Formal Methods"],"prefix":"10.1109","author":[{"given":"Arash Khabbaz","family":"Saberi","sequence":"first","affiliation":[]},{"given":"Jos","family":"Hegge","sequence":"additional","affiliation":[]},{"given":"Terry","family":"Fruehling","sequence":"additional","affiliation":[]},{"given":"Jan Friso","family":"Groote","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"journal-title":"ISO ISO\/AWI PAS 21448 Road vehicles – Safety of the intended functionality","year":"2017","key":"ref10"},{"key":"ref11","article-title":"On the Impact of Early Design Decisions on Quality Attributes of Automated Driving Systems","author":"khabbaz saberi","year":"0","journal-title":"The 13th Annual IEEE International Systems Conference (SYSCON 2019)"},{"key":"ref12","article-title":"Overview of formal methods in software engineering","author":"rodhe","year":"2015","journal-title":"FOI Swedish Defence Research Agency"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2013.11.020"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.1536"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-015-0374-1"},{"journal-title":"A Calculus of Communicating Systems","year":"1982","author":"milner","key":"ref16"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/S0019-9958(84)80025-X"},{"key":"ref18","volume":"21","author":"hoare","year":"1978","journal-title":"Communicating Sequential Processes"},{"key":"ref19","article-title":"An introduction. Monographs in Theoretical Computer Science","author":"reisig","year":"1985","journal-title":"An EATCS Series"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2013.6636728"},{"journal-title":"TLA+","year":"0","key":"ref27"},{"journal-title":"Automated Driving Roadmap","article-title":"ERTRAC Task Force: Connectivity and Automated Driving","year":"2015","key":"ref3"},{"journal-title":"ISO ISO 26262 Road vehicles - Functional safety","year":"2011","key":"ref6"},{"journal-title":"Scenario-based safety validation of connected and automated driving","year":"2018","author":"elrofai","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-12157-0_10"},{"journal-title":"ISO\/FDIS 26262 Road vehicles – Functional safety","year":"2018","key":"ref7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19078-5_13"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SYSCON.2018.8369598"},{"volume":"june","journal-title":"Taxonomy and Definitions for Terms Related to On-Road Motor Vehicle Automated Driving Systems-J3016","year":"2018","key":"ref1"},{"key":"ref20","first-page":"33","author":"le lann","year":"1996","journal-title":"The Ariane 5 Flight 501 Failure - A Case Study in System Engineering for Computing Systems apport"},{"key":"ref22","first-page":"1","author":"shalev-shwartz","year":"2017","journal-title":"On a formal model of safe and scalable self-driving cars"},{"key":"ref21","article-title":"Formal verification of safety requirements of a truck platooning system Formal verification of safety requirements of a truck platooning system","author":"ka tam","year":"2016","journal-title":"Technical University of Eindhoven"},{"key":"ref24","first-page":"97","article-title":"Architectural Modeling and Analysis for Safety Engineering","author":"d s b","year":"2017","journal-title":"International Symposium on Model-Based and Assessment"},{"key":"ref23","first-page":"1.1.2","author":"botham","year":"2015","journal-title":"Proving Properties of Automotive Systems of Systems under ISO 26262 using Automated Formal Methods"},{"journal-title":"Verum-Dezyne","year":"0","key":"ref26"},{"journal-title":"Ansys-Scade","year":"0","key":"ref25"}],"event":{"name":"2020 IEEE International Systems Conference (SysCon)","start":{"date-parts":[[2020,8,24]]},"location":"Montreal, QC, Canada","end":{"date-parts":[[2020,9,20]]}},"container-title":["2020 IEEE International Systems Conference (SysCon)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9275655\/9275656\/09275888.pdf?arnumber=9275888","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,30]],"date-time":"2022-06-30T11:15:52Z","timestamp":1656587752000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9275888\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,24]]},"references-count":27,"URL":"https:\/\/doi.org\/10.1109\/syscon47679.2020.9275888","relation":{},"subject":[],"published":{"date-parts":[[2020,8,24]]}}}