{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T14:58:22Z","timestamp":1775487502947,"version":"3.50.1"},"reference-count":204,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100018877","name":"Strategic Vehicle Research and Innovation (FFI) Program in Sweden via the SALIENCE4CAV Project","doi-asserted-by":"publisher","award":["2020-02946"],"award-info":[{"award-number":["2020-02946"]}],"id":[{"id":"10.13039\/501100018877","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Wallenberg Al, Autonomous Systems and Software Program"},{"DOI":"10.13039\/501100004063","name":"Knut och Alice Wallenbergs Stiftelse","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004063","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Swedish Innovation Agency"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Intell. Transport. Syst."],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1109\/tits.2025.3532684","type":"journal-article","created":{"date-parts":[[2025,1,30]],"date-time":"2025-01-30T19:22:47Z","timestamp":1738264967000},"page":"4315-4345","source":"Crossref","is-referenced-by-count":11,"title":["The Road to Safe Automated Driving Systems: A Review of Methods Providing Safety Evidence"],"prefix":"10.1109","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9020-6501","authenticated-orcid":false,"given":"Magnus","family":"Gyllenhammar","sequence":"first","affiliation":[{"name":"Zenseact, Gothenburg, Sweden"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8218-6915","authenticated-orcid":false,"given":"Gabriel","family":"Rodrigues de Campos","sequence":"additional","affiliation":[{"name":"Zenseact, Gothenburg, Sweden"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4300-885X","authenticated-orcid":false,"given":"Martin","family":"T\u00f6rngren","sequence":"additional","affiliation":[{"name":"Mechatronics Division, KTH Royal Institute of Technology, Stockholm, Sweden"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Surface Vehicle Recommended Practice\u2014Taxonomy and Definitions for Terms Related to Driving Automation Systems for on-Road Motor Vehicles","year":"2021"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2018.09.004"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MITS.2016.2583491"},{"key":"ref4","article-title":"Safety first for automated driving","author":"Wood","year":"2019"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1207\/S15327957PSPR0504_2"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.tra.2016.09.010"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.4271\/2020-01-1205"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2020.106393"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2019.8813894"},{"key":"ref10","article-title":"An analysis of ISO 26262: Using machine learning safely in automotive software","author":"Salay","year":"2017","journal-title":"arXiv:1709.02435"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2019.00021"},{"key":"ref12","article-title":"Guidance on the assurance of machine learning in autonomous systems (AMLAS)","author":"Hawkins","year":"2021","journal-title":"arXiv:2102.01564"},{"key":"ref13","article-title":"Safe AI\u2014How is this possible?","author":"Rue\u00df","journal-title":"arXiv:2201.10436"},{"key":"ref14","volume-title":"Safety Methods Database. Version 1.2","author":"Everdij","year":"2020"},{"key":"ref15","volume-title":"Road Vehicles\u2014Safety for Automated Driving Systems, Design, Verification and Validation","year":"2021"},{"key":"ref16","volume-title":"Road Vehicles\u2014Test Scenarios for Automated Driving Systems, Specification for Operational Design Domain","year":"2023"},{"key":"ref17","volume-title":"Standard for Evaluation of Autonomous Products","year":"2020"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ieeestd.2022.9761121"},{"key":"ref19","volume-title":"Road Vehicles\u2014Cybersecurity Engineering","year":"2021"},{"key":"ref20","volume-title":"Road Vehicles\u2014Functional Safety","year":"2018"},{"key":"ref21","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.1500-201","volume-title":"Framework for Cyber-physical Systems: Volume 1, Overview","author":"Griffor","year":"2017"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1136\/bmj.n71"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3136353"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2993730"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/MITS.2023.3292511"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3327918"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3390\/safety8020026"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.3390\/e26080634"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.3390\/info14100555"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.3389\/frai.2022.952773"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2023.10.011"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1080\/15389588.2023.2176711"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.4271\/12-05-03-0017"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.4271\/12-04-01-0002"},{"key":"ref35","volume-title":"Road Vehicles\u2014Safety of the Intended Functionality","year":"2019"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1177\/0361198119827910"},{"key":"ref37","first-page":"139","article-title":"Derivation of quantitative risk acceptance criteria for automated driving systems","volume-title":"Proc. Workshop Fahrerassistenz Und Automatisiertes Fahren","author":"Stellet"},{"key":"ref38","article-title":"Choosing risk acceptance criteria for safe automated driving","volume-title":"Proc. Int. Workshop Crit. Automot. Appl., Robustness Saf. (CARS)","author":"Sandblom"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2021.103133"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2021.3085297"},{"key":"ref41","article-title":"Towards safety analysis of interactions between human users and automated driving systems","volume-title":"Proc. Eur. Congr. Embedded Real Time Softw. Syst.","author":"Warg"},{"key":"ref42","article-title":"Collision between vehicle controlled by developmental automated driving system and pedestrian","year":"2019"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1177\/0018720818788164"},{"key":"ref44","first-page":"398","article-title":"A review of driver state monitoring systems in the context of automated driving","volume-title":"Proc. 20th Congr. Int. Ergonom. Assoc. (IEA)","author":"Hecht"},{"key":"ref45","volume-title":"A Scalable Approach to ADAS and Autonomous Driving White Paper","author":"Hodgson","year":"2023"},{"key":"ref46","article-title":"BOEING 737 MAX\u2014The failure of a safety culture","volume-title":"Proc. Scandin. Conf. Syst. Softw. Saf.","author":"Hammarberg"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2014.03.001"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2021.3073430"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-95246-8_27"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2019.2949915"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-40953-0_30"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08915-7_11"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2023.3274536"},{"key":"ref54","article-title":"Basic numbers needed to understand the traffic safety effect of automated cars","volume-title":"Proc. Int. Res. Council Biomechanics Injury (IRCOBI) Conf.","author":"Lindman"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-W50199.2020.00026"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.2"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2021.3129933"},{"key":"ref58","volume-title":"Real Time Systems\u2014Design Principles for Distributed Embedded Applications","author":"Kopetz","year":"2012"},{"key":"ref59","volume-title":"Safety Management Requirements for Defence Systems\u2014Part 1: Requirements","year":"2017"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-54549-9_1"},{"key":"ref61","volume-title":"Autonomous Vehicles Tests Without a Driver","year":"2024"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.4271\/2016-01-0128"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.artint.2019.103201"},{"key":"ref64","first-page":"47","article-title":"Automotive safety and machine learning: Initial results from a study on how to adapt the ISO 26262 safety standard","volume-title":"Proc. IEEE\/ACM 1st Int. Workshop Softw. Eng. AI Auto. Syst. (SEFAIAS)","author":"Henriksson"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-54549-9_15"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3134599"},{"key":"ref67","article-title":"Continuous learning approach to safety engineering","author":"Johansson","year":"2022","journal-title":"CARS-Critical Automotive Applications: Robustness Safety"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.56094\/jss.v55i2.46"},{"key":"ref69","article-title":"Towards an operational design domain that supports the safety argumentation of an automated driving system","volume-title":"Proc. Eur. Congr. Embedded Real Time Syst.","author":"Gyllenhammar"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2023.10.1128"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2010.5548115"},{"key":"ref72","article-title":"Definition and identification of system boundaries of highly automated driving","volume-title":"Proc. 7th Tagung Fahrerassistenz","author":"Wittmann"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/IV47402.2020.9304552"},{"key":"ref74","article-title":"Operational world model ontology for automated driving systems\u2014Part 1: Road structure","author":"Czarnecki","year":"2018"},{"key":"ref75","article-title":"Operational world model ontology for automated driving systems\u2014Part 2: Road users, animals, other obstacles, and environmental conditions","author":"Czarnecki","year":"2018"},{"key":"ref76","volume-title":"Operational Design Domain (ODD) Taxonomy for an Automated Driving System (ADS)\u2014Specification","year":"2020"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-31895-0_16"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/IV47402.2020.9304780"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1002\/9781119443070.ch31"},{"key":"ref80","article-title":"Safety cases: An impending crisis?","volume-title":"Proc. Safety-Critical Syst. Symp.","author":"Habli"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/8179.001.0001"},{"key":"ref82","volume-title":"Failure Modes and Effects Analysis (FMEA and FMECA)","year":"2018"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-017-9396-0"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.4394251"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58920-2_11"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2017.8317868"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2019.00013"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW53098.2021.00023"},{"key":"ref89","volume-title":"Concepts of Design Assurance for Neural Networks (CoDANN)","year":"2020"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-40953-0_34"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/363235.363259"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1561\/1000000053"},{"key":"ref93","first-page":"25","article-title":"A contract-based approach to designing safe systems","volume-title":"Proc. 8th Austral. Workshop Saf. Crit. Syst. Softw. (SCS)","volume":"33","author":"Bate"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2013.6688921"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2021.110922"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2015.7381825"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1145\/2491465.2491467"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2019.00091"},{"key":"ref99","article-title":"ADS safety assurance-future directions","volume-title":"Proc. Int. Workshop Crit. Automot. Applications: Robustness Saf. (CARS)","author":"Gyllenhammar"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-22337-2_4"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2016.7535402"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-S50200.2020.00015"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2018.8569945"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2012.6338682"},{"key":"ref105","volume-title":"Safety Requirements","author":"Koopman","year":"2020"},{"key":"ref106","volume-title":"Systems and Software Engineering\u2014Architecture Description","year":"2011"},{"key":"ref107","volume-title":"Engineering Complex Systems With Models and Objects","author":"Oliver","year":"1997"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.1998.731596"},{"key":"ref109","volume-title":"Safe Automated Driving: Requirements and Architectures"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2001.936213"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2016.2633291"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-77935-5_23"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00027"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.4271\/12-03-04-0020"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2022.3196396"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2017.2768219"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/IV51971.2022.9827255"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.3141\/2489-14"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC45102.2020.9294652"},{"key":"ref120","article-title":"Streetwise scenario-based safety validation of connected and automated driving","author":"Elrofai","year":"2018"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-023-05732-2"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1080\/15472450.2020.1738231"},{"key":"ref123","article-title":"A risk reducing fleet monitor for automated vehicles based on extreme value theory","author":"\u00c5sljung","year":"2022","journal-title":"Techrxiv"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2016.07.709"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2015.164"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.4271\/2020-01-0712"},{"key":"ref127","article-title":"System validation of highly automated vehicles with a database of relevant traffic scenarios","volume":"1","author":"P\u00fctz","year":"2017","journal-title":"Situations"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3162601"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2019.2919430"},{"key":"ref130","first-page":"197","article-title":"Adaptive generation of challenging scenarios for testing and evaluation of autonomous vehicles","volume":"137","author":"Mullins","year":"2018","journal-title":"J. Syst. Softw."},{"key":"ref131","article-title":"Systems approach to creating test scenarios for automated driving systems","volume":"215","author":"Khastgir","year":"2021","journal-title":"Rel. Eng. Syst. Saf."},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2018.8500632"},{"issue":"3","key":"ref133","first-page":"183","article-title":"Concept and development of a unified ontology for generating test and use-case catalogues for assisted and automated vehicle guidance","volume":"8","author":"Geyer","year":"2014","journal-title":"IET Intell. Transp. Syst."},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2022.3170122"},{"key":"ref135","article-title":"Notes on structured programming","author":"Dijkstra","year":"1970"},{"key":"ref136","first-page":"131","article-title":"How certain are we that our automated driving system is safe?","volume":"24","author":"de Gelder","year":"2023","journal-title":"Traffic Injury Prevention"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/AITEST49225.2020.00011"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2021.3117049"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2022.3170517"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2019.8917326"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2016.2582208"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2018.8569800"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3061732"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/TASE.2021.3064065"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref147","first-page":"84","article-title":"Formal verification of automotive embedded software","volume-title":"Proc. IEEE\/ACM 6th Int. FME Workshop Formal Methods Softw. Eng. (FormaliSE)","author":"Todorov"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2022.110692"},{"key":"ref149","article-title":"On a formal model of safe and scalable self-driving cars","author":"Shalev-Shwartz","year":"2017","journal-title":"arXiv:1708.06374"},{"key":"ref150","volume-title":"The safety force field","author":"Nist\u00e9r","year":"2019"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA.2019.8794364"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2019.8813875"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2015.2419196"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-26601-1_17"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1016\/j.jlap.2008.08.004"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.199"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2017.2738640"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2020.3022030"},{"key":"ref159","article-title":"The interpretation and evaluation of assurance cases","author":"Rushby","year":"2015"},{"key":"ref160","volume-title":"Performance monitoring and evaluation of a vehicle adas or autonomous driving feature","author":"Gyllenhammar","year":"2021"},{"key":"ref161","volume-title":"Perception performance evaluation of a vehicle adas or ads","author":"Gyllenhammar","year":"2021"},{"key":"ref162","volume-title":"Assessment of a vehicle control system","author":"Gyllenhammar","year":"2021"},{"key":"ref163","article-title":"Dynamic behavior risk assessment for autonomous systems","author":"Feth","year":"2020"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.4271\/2020-01-1206"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1007\/s11831-022-09788-7"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2018.2886682"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2022.3163747"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1186\/s40648-014-0001-z"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1016\/j.aap.2019.01.029"},{"key":"ref170","first-page":"3","article-title":"Towards a software component to perform situation-aware dynamic risk assessment for autonomous vehicles","volume-title":"Proc. Eur. Dependable Comput. Conf. (EDCC)","author":"Reich"},{"key":"ref171","first-page":"224","article-title":"Methodology for determining maximum injury potential for automated driving system evaluation","volume":"23","author":"Kusano","year":"2022","journal-title":"Traffic Injury Prevention"},{"key":"ref172","article-title":"A baseline for detecting misclassified and out-of-distribution examples in neural networks","author":"Hendrycks","year":"2016","journal-title":"arXiv:1610.02136"},{"key":"ref173","article-title":"Enhancing the reliability of out-of-distribution image detection in neural networks","author":"Liang","year":"2017","journal-title":"arXiv:1706.02690"},{"key":"ref174","first-page":"21464","article-title":"Energy-based out-of-distribution detection","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Liu"},{"key":"ref175","first-page":"233","article-title":"Out-of-distribution detection as support for autonomous driving safety lifecycle","volume-title":"Proc. Int. Work. Conf. Requirements Eng., Found. Softw. Qual.","author":"Henriksson"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.173"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87698-4_24"},{"key":"ref178","article-title":"Towards dynamic safety management for autonomous systems","volume-title":"Proc. Safety-Critical Syst. Symp.","author":"Trapp"},{"key":"ref179","article-title":"Supporting safe decision making through holistic system-level representations & monitoring\u2014A summary and taxonomy of self-representation concepts for automated vehicles","author":"Nolte","year":"2020","journal-title":"arXiv:2007.13807"},{"key":"ref180","article-title":"A taxonomy and review of algorithms for modeling and predicting human driver behavior","author":"Brown","year":"2020","journal-title":"arXiv:2006.08832"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/TIV.2022.3167103"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC51268.2020.00017"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2018.00041"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2016.7535354"},{"issue":"2","key":"ref185","first-page":"119","article-title":"Risk estimation for driving support and behavior planning in intelligent vehicles","volume":"66","author":"Eggert","year":"2018","journal-title":"At-Automatisierungstechnik"},{"key":"ref186","first-page":"48","article-title":"Engineering self-adaptive systems through feedback loops","volume-title":"Software Engineering for Self-Adaptive Systems","author":"Brun","year":"2009"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2018.8500530"},{"key":"ref188","article-title":"Minimal risk condition for safety assurance of automated driving systems","volume-title":"Proc. Int. Workshop Crit. Automot. Applications: Robustness Saf. (CARS)","author":"Gyllenhammar"},{"issue":"1","key":"ref189","first-page":"7","article-title":"A formally verified fail-operational safety concept for automated driving","volume":"5","author":"Fu","year":"2022","journal-title":"SAE Int. J. Connected Automated Vehicles"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2018.8500536"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.2007.26"},{"key":"ref192","first-page":"57","article-title":"Conditional safety certificates in open systems","volume-title":"Proc. 1st Workshop Crit. Automot. Appl. Robustness Saf.","author":"Schneider"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/SEAMS.2013.6595504"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/SEAMS.2015.10"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2018.00027"},{"key":"ref196","volume-title":"Path planning in autonomous driving environments","author":"Gyllenhammar","year":"2022"},{"key":"ref197","volume-title":"Risk estimation in autonomous driving environments","author":"Gyllenhammar","year":"2022"},{"key":"ref198","volume-title":"Scenario identification in autonomous driving environments","author":"Gyllenhammar","year":"2022"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC48978.2021.9564879"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/SSRR50563.2020.9292629"},{"key":"ref201","volume-title":"Complementary Discussion for Challenge Classification to Main Paper \u2019The Road to Safe Automated Driving Systems: A Review of Methods Providing Safety Evidence\u2019","author":"Gyllenhammar","year":"2024"},{"key":"ref202","volume-title":"Collection of Research Gaps\u2014Identified From Discussion Sections IV Through VII","author":"Gyllenhammar","year":"2024"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1109\/IV47402.2020.9304823"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1145\/2601248.2601268"}],"container-title":["IEEE Transactions on Intelligent Transportation Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6979\/10945245\/10858599.pdf?arnumber=10858599","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,31]],"date-time":"2025-03-31T23:48:56Z","timestamp":1743464936000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10858599\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4]]},"references-count":204,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tits.2025.3532684","relation":{},"ISSN":["1524-9050","1558-0016"],"issn-type":[{"value":"1524-9050","type":"print"},{"value":"1558-0016","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4]]}}}