{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,5]],"date-time":"2025-12-05T12:12:06Z","timestamp":1764936726102,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":82,"publisher":"ACM","license":[{"start":{"date-parts":[[2014,5,31]],"date-time":"2014-05-31T00:00:00Z","timestamp":1401494400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2014,5,31]]},"DOI":"10.1145\/2593882.2593895","type":"proceedings-article","created":{"date-parts":[[2014,5,20]],"date-time":"2014-05-20T13:48:00Z","timestamp":1400593680000},"page":"182-200","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":53,"title":["Certifiably safe software-dependent systems: challenges and directions"],"prefix":"10.1145","author":[{"given":"John","family":"Hatcliff","sequence":"first","affiliation":[{"name":"Kansas State University, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alan","family":"Wassyng","sequence":"additional","affiliation":[{"name":"McMaster University, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tim","family":"Kelly","sequence":"additional","affiliation":[{"name":"University of York, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cyrille","family":"Comar","sequence":"additional","affiliation":[{"name":"AdaCore, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul","family":"Jones","sequence":"additional","affiliation":[{"name":"US Food and Drug Administration, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2014,5,31]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"aug","author":"Ministry","year":"2010","unstructured":"Ministry of defence defence standard 23-09 \u2013 generic vehicle architecture , aug 2010 . Ministry of defence defence standard 23-09 \u2013 generic vehicle architecture, aug 2010."},{"key":"e_1_3_2_1_2_1","volume-title":"Software engineering","author":"ACM and IEEE Computer Society","year":"2004","unstructured":"ACM and IEEE Computer Society . Software engineering 2004 , curriculum guidelines for undergraduate degree programs in software engineering. http:\/\/sites. computer.org\/ccse\/SE2004Volume.pdf, 2004. ACM and IEEE Computer Society. Software engineering 2004, curriculum guidelines for undergraduate degree programs in software engineering. http:\/\/sites. computer.org\/ccse\/SE2004Volume.pdf, 2004."},{"key":"e_1_3_2_1_3_1","volume-title":"jury: Toyota liable in sudden acceleration crash. http: \/\/www.cbsnews.com\/news\/okla-jury-toyotaliable-in-sudden-acceleration-crash\/","author":"Press Associated","year":"2013","unstructured":"Associated Press . Okla. jury: Toyota liable in sudden acceleration crash. http: \/\/www.cbsnews.com\/news\/okla-jury-toyotaliable-in-sudden-acceleration-crash\/ , 2013 . Associated Press. Okla. jury: Toyota liable in sudden acceleration crash. http: \/\/www.cbsnews.com\/news\/okla-jury-toyotaliable-in-sudden-acceleration-crash\/, 2013."},{"key":"e_1_3_2_1_4_1","volume-title":"https:\/\/www.autosar.org","author":"Rchitecture Tomotive Open","year":"2014","unstructured":"AU Tomotive Open System A Rchitecture . AUTOSAR. https:\/\/www.autosar.org , 2014 . AUTomotive Open System ARchitecture. AUTOSAR. https:\/\/www.autosar.org, 2014."},{"key":"e_1_3_2_1_5_1","volume-title":"High Integrity Software\u2014the SPARK Approach to Safety and Security","author":"Barnes J.","year":"2003","unstructured":"J. Barnes . High Integrity Software\u2014the SPARK Approach to Safety and Security . Addison-Wesley , 2003 . J. Barnes. High Integrity Software\u2014the SPARK Approach to Safety and Security. Addison-Wesley, 2003."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2008.4702758"},{"key":"e_1_3_2_1_7_1","unstructured":"Boston Scientific. PACEMAKER system requirements specification. http:\/\/sqrl.mcmaster.ca\/pacemaker.htm 2007.  Boston Scientific. PACEMAKER system requirements specification. http:\/\/sqrl.mcmaster.ca\/pacemaker.htm 2007."},{"key":"e_1_3_2_1_8_1","unstructured":"Carnegie Mellon. Entertainment Technology Center. http:\/\/www.etc.cmu.edu\/site\/ 2014.  Carnegie Mellon. Entertainment Technology Center. http:\/\/www.etc.cmu.edu\/site\/ 2014."},{"key":"e_1_3_2_1_9_1","volume-title":"IEEE Spectrum","author":"Charette R. N.","year":"2009","unstructured":"R. N. Charette . This Car Runs on Code . IEEE Spectrum , Feb. 2009 . R. N. Charette. This Car Runs on Code. IEEE Spectrum, Feb. 2009."},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings of the 8th International Common Criteria Conference","author":"DeLong R.","year":"2007","unstructured":"R. DeLong and J. Rushby . A common criteria authoring environment supporting composition . In Proceedings of the 8th International Common Criteria Conference , 2007 . R. DeLong and J. Rushby. A common criteria authoring environment supporting composition. In Proceedings of the 8th International Common Criteria Conference, 2007."},{"issue":"2","key":"e_1_3_2_1_11_1","first-page":"36","article-title":"avionics standards help U.S. DoD\u2019s vision of reusable technology to take off","volume":"9","author":"Dion B.","year":"2013","unstructured":"B. Dion . FACE, ARINC , DO-178C avionics standards help U.S. DoD\u2019s vision of reusable technology to take off . Military Embedded Systems , 9 ( 2 ): 36 \u2013 39 , mar 2013 . B. Dion. FACE, ARINC, DO-178C avionics standards help U.S. DoD\u2019s vision of reusable technology to take off. Military Embedded Systems, 9(2):36\u201339, mar 2013.","journal-title":"Military Embedded Systems"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1882362.1882382"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1002\/0471739421"},{"key":"e_1_3_2_1_14_1","first-page":"50128","article-title":"signalling and processing systems - Software for railway control and protection systems","author":"European Committee for Electrical Standardization (CENELEC). Railway applications - Communication","year":"2011","unstructured":"European Committee for Electrical Standardization (CENELEC). Railway applications - Communication , signalling and processing systems - Software for railway control and protection systems . CENELEC Standard 50128 , 2011 . European Committee for Electrical Standardization (CENELEC). Railway applications - Communication, signalling and processing systems - Software for railway control and protection systems. CENELEC Standard 50128, 2011.","journal-title":"CENELEC Standard"},{"key":"e_1_3_2_1_15_1","volume-title":"SAE International","author":"Feiler P.","year":"2013","unstructured":"P. Feiler . Architecture Analysis and Design Language (AADL) Annex Volume 3: Annex E: Error Model V2 Annex. Number SAE AS5506\/3 (Draft) in SAE Aerospace Standard . SAE International , 2013 . P. Feiler. Architecture Analysis and Design Language (AADL) Annex Volume 3: Annex E: Error Model V2 Annex. Number SAE AS5506\/3 (Draft) in SAE Aerospace Standard. SAE International, 2013."},{"key":"e_1_3_2_1_16_1","volume-title":"Model-Based Engineering with AADL: An Introduction to the SAE Architecture Analysis and Design Language","author":"Feiler P.","year":"2012","unstructured":"P. Feiler and D. Gluch . Model-Based Engineering with AADL: An Introduction to the SAE Architecture Analysis and Design Language . Addison-Wesley , 2012 . P. Feiler and D. Gluch. Model-Based Engineering with AADL: An Introduction to the SAE Architecture Analysis and Design Language. Addison-Wesley, 2012."},{"key":"e_1_3_2_1_17_1","volume-title":"Avionics Today","author":"Feliz E.","year":"2007","unstructured":"E. Feliz . Engineering pipeline under pressure . Avionics Today , December 2007 . E. Feliz. Engineering pipeline under pressure. Avionics Today, December 2007."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1038\/scientificamerican1004-76"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2013.6688926"},{"key":"e_1_3_2_1_20_1","volume-title":"Kearney Whitepaper","author":"Hagen C.","year":"2012","unstructured":"C. Hagen , S. Hurt , J. Sorenson , and D. Wall . Software: The brains behind us defense systems. A.T . Kearney Whitepaper , Nov 2012 . C. Hagen, S. Hurt, J. Sorenson, and D. Wall. Software: The brains behind us defense systems. A.T. Kearney Whitepaper, Nov 2012."},{"key":"e_1_3_2_1_21_1","volume-title":"Come","author":"Harel D.","year":"2003","unstructured":"D. Harel and R. Marelly . Come , Let\u2019s Play : Scenario-Based Programming Using LSCs and the Play-Engine. Springer , 2003 . D. Harel and R. Marelly. Come, Let\u2019s Play: Scenario-Based Programming Using LSCs and the Play-Engine. Springer, 2003."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.entcs.2009.09.002"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS.2012.9"},{"key":"e_1_3_2_1_24_1","unstructured":"J. Hatcliff A. Wassyng T. Kelly and C. Comar. Certifiably safe software-dependent systems: Challenges and directions (paper web site \/ extended version). http:\/\/santoslab.org\/pub\/papers\/fose14certification\/.  J. Hatcliff A. Wassyng T. Kelly and C. Comar. Certifiably safe software-dependent systems: Challenges and directions (paper web site \/ extended version). http:\/\/santoslab.org\/pub\/papers\/fose14certification\/."},{"key":"e_1_3_2_1_25_1","volume-title":"Springer","author":"Hawkins R.","year":"2011","unstructured":"R. Hawkins , K. Clegg , R. Alexander , and T. Kelly . Using a software safety argument pattern catalogue: two case studies. In Computer Safety, Reliability, and Security, pages 185\u2013198 . Springer , 2011 . R. Hawkins, K. Clegg, R. Alexander, and T. Kelly. Using a software safety argument pattern catalogue: two case studies. In Computer Safety, Reliability, and Security, pages 185\u2013198. Springer, 2011."},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of Workshop SASSUR (Next Generation of System Assurance Approaches for Safety-Critical Systems) of the 32nd International Conference on Computer Safety, Reliability and Security","author":"Hawkins R.","year":"2013","unstructured":"R. Hawkins , I. Habli , T. Kelly , Principled construction of software safety cases . In Proceedings of Workshop SASSUR (Next Generation of System Assurance Approaches for Safety-Critical Systems) of the 32nd International Conference on Computer Safety, Reliability and Security , 2013 . R. Hawkins, I. Habli, T. Kelly, et al. Principled construction of software safety cases. In Proceedings of Workshop SASSUR (Next Generation of System Assurance Approaches for Safety-Critical Systems) of the 32nd International Conference on Computer Safety, Reliability and Security, 2013."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/FOSE.2007.18"},{"key":"e_1_3_2_1_28_1","first-page":"269","volume-title":"Computer Safety, Reliability, and Security - 30th International Conference (SAFECOMP","author":"Hillebrand J.","year":"2011","unstructured":"J. Hillebrand , P. Reichenpfader , I. Mandic , H. Siegl , and C. Peer . Establishing confidence in the usage of software tools in context of iso 26262 . In Computer Safety, Reliability, and Security - 30th International Conference (SAFECOMP 2011 ), pages 257\u2013 269 , 2011. J. Hillebrand, P. Reichenpfader, I. Mandic, H. Siegl, and C. Peer. Establishing confidence in the usage of software tools in context of iso 26262. In Computer Safety, Reliability, and Security - 30th International Conference (SAFECOMP 2011), pages 257\u2013269, 2011."},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 31st International System Safety Conference (ISSC)","author":"Holloway C. M.","year":"2013","unstructured":"C. M. Holloway . Making the implicit explicit: Towards an assurance case for do-178c . In Proceedings of the 31st International System Safety Conference (ISSC) , 2013 . C. M. Holloway. Making the implicit explicit: Towards an assurance case for do-178c. In Proceedings of the 31st International System Safety Conference (ISSC), 2013."},{"key":"e_1_3_2_1_30_1","unstructured":"IEEE Computer Society. Software engineering body of knowledge. http:\/\/www.computer.org\/portal\/ web\/swebok\/html\/contents 2004.  IEEE Computer Society. Software engineering body of knowledge. http:\/\/www.computer.org\/portal\/ web\/swebok\/html\/contents 2004."},{"key":"e_1_3_2_1_31_1","volume-title":"IEEE Standard Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations","author":"Institute of Electrical and Electronics Engineers (IEEE).","year":"2010","unstructured":"Institute of Electrical and Electronics Engineers (IEEE). IEEE Standard Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations . IEEE Standard 7-4.3.2, 2010 . Institute of Electrical and Electronics Engineers (IEEE). IEEE Standard Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations. IEEE Standard 7-4.3.2, 2010."},{"key":"e_1_3_2_1_32_1","volume-title":"Medical device software \u2013 Software life cycle processes. IEC Standard 62304 edition 1.0","author":"International Electrotechnical Commission","year":"2006","unstructured":"International Electrotechnical Commission . Medical device software \u2013 Software life cycle processes. IEC Standard 62304 edition 1.0 , 2006 . International Electrotechnical Commission. Medical device software \u2013 Software life cycle processes. IEC Standard 62304 edition 1.0, 2006."},{"key":"e_1_3_2_1_33_1","volume-title":"Functional Safety of Electrical\/Electronic\/Programmable Electronic Safety-related Systems. IEC Standard 61508 edition 2.0","author":"International Electrotechnical Commission","year":"2010","unstructured":"International Electrotechnical Commission . Functional Safety of Electrical\/Electronic\/Programmable Electronic Safety-related Systems. IEC Standard 61508 edition 2.0 , 2010 . International Electrotechnical Commission. Functional Safety of Electrical\/Electronic\/Programmable Electronic Safety-related Systems. IEC Standard 61508 edition 2.0, 2010."},{"key":"e_1_3_2_1_34_1","first-page":"25000","author":"International Organization for Standardization. Software Engineering \u2013 Software product Quality Requirements and Evaluation (SQuaRE) \u2013 Guide to SQuaRE","year":"2005","unstructured":"International Organization for Standardization. Software Engineering \u2013 Software product Quality Requirements and Evaluation (SQuaRE) \u2013 Guide to SQuaRE . ISO Standard 25000 , 2005 . International Organization for Standardization. Software Engineering \u2013 Software product Quality Requirements and Evaluation (SQuaRE) \u2013 Guide to SQuaRE. ISO Standard 25000, 2005.","journal-title":"ISO Standard"},{"key":"e_1_3_2_1_35_1","first-page":"14971","article-title":"Application of Risk Management to Medical Devices","author":"International Organization for Standardization","year":"2007","unstructured":"International Organization for Standardization . Application of Risk Management to Medical Devices . ISO Standard 14971 , 2007 . International Organization for Standardization. Application of Risk Management to Medical Devices. ISO Standard 14971, 2007.","journal-title":"ISO Standard"},{"key":"e_1_3_2_1_36_1","first-page":"26262","author":"International Organization for Standardization. Road Vehicles \u2013 Functional Safety","year":"2011","unstructured":"International Organization for Standardization. Road Vehicles \u2013 Functional Safety . ISO Standard 26262 , 2011 . International Organization for Standardization. Road Vehicles \u2013 Functional Safety. ISO Standard 26262, 2011.","journal-title":"ISO Standard"},{"key":"e_1_3_2_1_37_1","volume-title":"Systems and software engineering \u2013 Systems and software assurance \u2013 Part 2: Assurance case. ISO Standard 15026 part 2","author":"International Organization for Standardization.","year":"2011","unstructured":"International Organization for Standardization. Systems and software engineering \u2013 Systems and software assurance \u2013 Part 2: Assurance case. ISO Standard 15026 part 2 , 2011 . International Organization for Standardization. Systems and software engineering \u2013 Systems and software assurance \u2013 Part 2: Assurance case. ISO Standard 15026 part 2, 2011."},{"key":"e_1_3_2_1_38_1","unstructured":"ISO IEC IEEE. IEEE Standard 24765: Systems and software engineering - Vocabulary 2010.  ISO IEC IEEE. IEEE Standard 24765: Systems and software engineering - Vocabulary 2010."},{"key":"e_1_3_2_1_39_1","volume-title":"Conformity assessment \u2013 vocabulary and general principles","author":"IEC.","year":"2004","unstructured":"ISO\/ IEC. ISO\/IEC 17000 : Conformity assessment \u2013 vocabulary and general principles , 2004 . ISO\/IEC. ISO\/IEC 17000: Conformity assessment \u2013 vocabulary and general principles, 2004."},{"key":"e_1_3_2_1_40_1","unstructured":"ISO\/IEEE. 11073-x Medical Health Device Communication Standards family.  ISO\/IEEE. 11073-x Medical Health Device Communication Standards family."},{"key":"e_1_3_2_1_41_1","volume-title":"Software Abstractions: Logic, Language, and Analysis","author":"Jackson D.","year":"2012","unstructured":"D. Jackson . Software Abstractions: Logic, Language, and Analysis . MIT Press , 2012 . D. Jackson. Software Abstractions: Logic, Language, and Analysis. MIT Press, 2012."},{"key":"e_1_3_2_1_42_1","first-page":"65","volume-title":"Proceedings of the Eleventh Australian Workshop on Safety Critical Systems and Software -","volume":"69","author":"Kelly T.","year":"2006","unstructured":"T. Kelly . Using software architecture techniques to support the modular certification of safety-critical systems . In Proceedings of the Eleventh Australian Workshop on Safety Critical Systems and Software - Volume 69 , SCS \u201906, pages 53\u2013 65 , 2006 . T. Kelly. Using software architecture techniques to support the modular certification of safety-critical systems. In Proceedings of the Eleventh Australian Workshop on Safety Critical Systems and Software - Volume 69, SCS \u201906, pages 53\u201365, 2006."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1050849.1050852"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/1107458.1107486"},{"key":"e_1_3_2_1_45_1","unstructured":"B. Larson and J. Hatcliff. Open PCA Pump project website. http:\/\/openpcapump.santoslab.org.  B. Larson and J. Hatcliff. Open PCA Pump project website. http:\/\/openpcapump.santoslab.org."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10817-009-9155-4"},{"key":"e_1_3_2_1_47_1","volume-title":"Safeware: System Safety and Computers","author":"Leveson N.","year":"1995","unstructured":"N. Leveson . Safeware: System Safety and Computers . Addison-Wesley , 1995 . N. Leveson. Safeware: System Safety and Computers. Addison-Wesley, 1995."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"crossref","DOI":"10.7551\/mitpress\/8179.001.0001","volume-title":"Engineering a Safer World: Systems Thinking Applied to Safety","author":"Leveson N.","year":"2012","unstructured":"N. Leveson . Engineering a Safer World: Systems Thinking Applied to Safety . MIT Press , 2012 . N. Leveson. Engineering a Safer World: Systems Thinking Applied to Safety. MIT Press, 2012."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/336512.336556"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2008.37"},{"key":"e_1_3_2_1_51_1","volume-title":"Schwartz. Hacked Medical Device Sparks Congressional Inquiry. http:\/\/www.informationweek.com\/security\/ vulnerabilities-and-threats\/hackedmedical-device-sparks-congressionalinquiry\/d\/d-id\/1099726","author":"Mathew","year":"2011","unstructured":"Mathew J. Schwartz. Hacked Medical Device Sparks Congressional Inquiry. http:\/\/www.informationweek.com\/security\/ vulnerabilities-and-threats\/hackedmedical-device-sparks-congressionalinquiry\/d\/d-id\/1099726 , 2011 . Mathew J. Schwartz. Hacked Medical Device Sparks Congressional Inquiry. http:\/\/www.informationweek.com\/security\/ vulnerabilities-and-threats\/hackedmedical-device-sparks-congressionalinquiry\/d\/d-id\/1099726, 2011."},{"key":"e_1_3_2_1_52_1","volume-title":"Avionics Today","author":"McKenna E.","year":"2008","unstructured":"E. McKenna . Embedded overall . Avionics Today , Nov 2008 . E. McKenna. Embedded overall. Avionics Today, Nov 2008."},{"key":"e_1_3_2_1_53_1","unstructured":"Naval Postgraduate School. Department of Systems Engineering: Programs of Study. http:\/\/www.nps. edu\/Academics\/Schools\/GSEAS\/Departments\/ SE\/Academics\/ProgramsofStudy.html 2014.  Naval Postgraduate School. Department of Systems Engineering: Programs of Study. http:\/\/www.nps. edu\/Academics\/Schools\/GSEAS\/Departments\/ SE\/Academics\/ProgramsofStudy.html 2014."},{"key":"e_1_3_2_1_54_1","unstructured":"Open platform for evolutionary certification of safety-critical systems. www.opencoss-project.eu.  Open platform for evolutionary certification of safety-critical systems. www.opencoss-project.eu."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/52.805469"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/78973.78974"},{"key":"e_1_3_2_1_57_1","volume-title":"C. Michael Holloway. AESSCS 2014 Workshop. Planning the Unplanned Experiment: Assessing the Efficacy of Standards for Safety Critical Software. http:\/\/www.idt.mdh.se\/AESSCS\\_2014\/","author":"Graydon Patrick J.","year":"2013","unstructured":"Patrick J. Graydon , C. Michael Holloway. AESSCS 2014 Workshop. Planning the Unplanned Experiment: Assessing the Efficacy of Standards for Safety Critical Software. http:\/\/www.idt.mdh.se\/AESSCS\\_2014\/ , 2013 . Patrick J. Graydon, C. Michael Holloway. AESSCS 2014 Workshop. Planning the Unplanned Experiment: Assessing the Efficacy of Standards for Safety Critical Software. http:\/\/www.idt.mdh.se\/AESSCS\\_2014\/, 2013."},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-28901-1","volume-title":"Software Product Line Engineering: Foundations, Principles and Techniques","author":"Pohl K.","year":"2005","unstructured":"K. Pohl , G. B\u00f6ckle , and F. van der Linden . Software Product Line Engineering: Foundations, Principles and Techniques . Springer , 2005 . K. Pohl, G. B\u00f6ckle, and F. van der Linden. Software Product Line Engineering: Foundations, Principles and Techniques. Springer, 2005."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1049\/cp.2010.0838"},{"key":"e_1_3_2_1_60_1","volume-title":"RTCA Standard DO-178C","author":"Software RTCA.","year":"2012","unstructured":"RTCA. Software Considerations in Airborne Systems and Equipment Certification . RTCA Standard DO-178C , 2012 . RTCA. Software Considerations in Airborne Systems and Equipment Certification. RTCA Standard DO-178C, 2012."},{"key":"e_1_3_2_1_61_1","volume-title":"US","author":"Rushby J.","year":"2001","unstructured":"J. Rushby . Modular certification. Technical report, Computer Science Laboratory, SRI International, Menlo Park, CA 94025 , US , September 2001 . J. Rushby. Modular certification. Technical report, Computer Science Laboratory, SRI International, Menlo Park, CA 94025, US, September 2001."},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35743-5_2"},{"key":"e_1_3_2_1_63_1","volume-title":"Michael Waterman. Gap Assessment of IEC and IEEE Standards for Safety Assurance of Digital Systems. Software Certification Consortium Meeting 9: http:\/\/cps-vo.org\/node\/3472","author":"Sydnor Russell","year":"2012","unstructured":"Russell Sydnor , Sushil Birla , Michael Waterman. Gap Assessment of IEC and IEEE Standards for Safety Assurance of Digital Systems. Software Certification Consortium Meeting 9: http:\/\/cps-vo.org\/node\/3472 , 2012 . Russell Sydnor, Sushil Birla, Michael Waterman. Gap Assessment of IEC and IEEE Standards for Safety Assurance of Digital Systems. Software Certification Consortium Meeting 9: http:\/\/cps-vo.org\/node\/3472, 2012."},{"key":"e_1_3_2_1_64_1","volume-title":"Killed by Code: Software transparency in implantable medical devices","author":"Sandler K.","year":"2010","unstructured":"K. Sandler , L. Ohrstrom , L. Moy , and R. McVay . Killed by Code: Software transparency in implantable medical devices . Software Freedom Law Center Whitepaper , 2010 . K. Sandler, L. Ohrstrom, L. Moy, and R. McVay. Killed by Code: Software transparency in implantable medical devices. Software Freedom Law Center Whitepaper, 2010."},{"key":"e_1_3_2_1_65_1","volume-title":"http:\/\/www.itu.int\/dms\\_pub\/itut\/oth\/06\/5B\/T065B0000020008PDFE.pdf","author":"Schkade G.","year":"2011","unstructured":"G. Schkade . SA E\u2019s Perspective on Connected Vehicle . http:\/\/www.itu.int\/dms\\_pub\/itut\/oth\/06\/5B\/T065B0000020008PDFE.pdf , 2011 . G. Schkade. SAE\u2019s Perspective on Connected Vehicle. http:\/\/www.itu.int\/dms\\_pub\/itut\/oth\/06\/5B\/T065B0000020008PDFE.pdf, 2011."},{"key":"e_1_3_2_1_66_1","unstructured":"O. Slotosch. Model-based tool qualification. http:\/\/wiki.eclipse.org\/Auto\\_IWG\\_WP5.  O. Slotosch. Model-based tool qualification. http:\/\/wiki.eclipse.org\/Auto\\_IWG\\_WP5."},{"key":"e_1_3_2_1_67_1","volume-title":"Arp4761: Guidelines and methods for conducting the safety assessment process on civil airborne systems and equipment","author":"Society of Automotive Engineers (SAE).","year":"1996","unstructured":"Society of Automotive Engineers (SAE). Arp4761: Guidelines and methods for conducting the safety assessment process on civil airborne systems and equipment , 1996 . Society of Automotive Engineers (SAE). Arp4761: Guidelines and methods for conducting the safety assessment process on civil airborne systems and equipment, 1996."},{"key":"e_1_3_2_1_68_1","volume-title":"http:\/\/abcnews.go.com\/blogs\/ technology\/2012\/05\/google-self-drivingcar-license-approved-in-nevada\/","author":"Stern J.","year":"2012","unstructured":"J. Stern . Google Self-Driving Car License Approved in Nevada . http:\/\/abcnews.go.com\/blogs\/ technology\/2012\/05\/google-self-drivingcar-license-approved-in-nevada\/ , 2012 . J. Stern. Google Self-Driving Car License Approved in Nevada. http:\/\/abcnews.go.com\/blogs\/ technology\/2012\/05\/google-self-drivingcar-license-approved-in-nevada\/, 2012."},{"key":"e_1_3_2_1_69_1","volume-title":"Safety Management Requirements for Defence Systems. Defence Standard 00-56. Issue 4","author":"United Kingdom Ministry of Defence.","year":"2007","unstructured":"United Kingdom Ministry of Defence. Safety Management Requirements for Defence Systems. Defence Standard 00-56. Issue 4 ., 2007 . United Kingdom Ministry of Defence. Safety Management Requirements for Defence Systems. Defence Standard 00-56. Issue 4., 2007."},{"key":"e_1_3_2_1_70_1","volume-title":"UCLA Extension: Safety-Critical Software. https:\/\/www.uclaextension.edu\/pages\/ Course.aspx?reg=V9149","author":"University of California, Los Angeles.","year":"2014","unstructured":"University of California, Los Angeles. UCLA Extension: Safety-Critical Software. https:\/\/www.uclaextension.edu\/pages\/ Course.aspx?reg=V9149 , 2014 . University of California, Los Angeles. UCLA Extension: Safety-Critical Software. https:\/\/www.uclaextension.edu\/pages\/ Course.aspx?reg=V9149, 2014."},{"key":"e_1_3_2_1_71_1","volume-title":"Mil-std-882e: Department of defense standard practice: System safety","author":"U.S. Department of Defense.","year":"2012","unstructured":"U.S. Department of Defense. Mil-std-882e: Department of defense standard practice: System safety , 2012 . U.S. Department of Defense. Mil-std-882e: Department of defense standard practice: System safety, 2012."},{"key":"e_1_3_2_1_72_1","volume-title":"http:\/\/www.fda.gov\/Safety\/Recalls\/ ucm165546.htm","author":"U.S. Food and Drug Administration","year":"2009","unstructured":"U.S. Food and Drug Administration . Safety, Recalls, Market Withdrawals , & Safety Alerts , Background and Definitions . http:\/\/www.fda.gov\/Safety\/Recalls\/ ucm165546.htm , 2009 . U.S. Food and Drug Administration. Safety, Recalls, Market Withdrawals, & Safety Alerts, Background and Definitions. http:\/\/www.fda.gov\/Safety\/Recalls\/ ucm165546.htm, 2009."},{"key":"e_1_3_2_1_73_1","unstructured":"U.S. Nuclear Regulatory Commission. Research information letter (ril) 1101: Technical basis to review hazard analysis of digital safety systems.  U.S. Nuclear Regulatory Commission. Research information letter (ril) 1101: Technical basis to review hazard analysis of digital safety systems."},{"key":"e_1_3_2_1_74_1","unstructured":"U.S. Nuclear Regulatory Commission. Research Information Letter 1001: Software-related uncertainties in the assurance of digital safety systems \u2013 expert clinic findings Part 1. http:\/\/adamswebsearch2.nrc.gov\/IDMWS\/ ViewDocByAccession.asp? \\\\AccessionNumber=ML111240017 2011.  U.S. Nuclear Regulatory Commission. Research Information Letter 1001: Software-related uncertainties in the assurance of digital safety systems \u2013 expert clinic findings Part 1. http:\/\/adamswebsearch2.nrc.gov\/IDMWS\/ ViewDocByAccession.asp? \\\\AccessionNumber=ML111240017 2011."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/1453101.1453133"},{"key":"e_1_3_2_1_76_1","volume-title":"Analytical studies from aeronautical history","author":"Vincenti W. G.","year":"1990","unstructured":"W. G. Vincenti . What engineers know and how they know it : Analytical studies from aeronautical history . The Johns Hopkins University Press , 1990 . W. G. Vincenti. What engineers know and how they know it: Analytical studies from aeronautical history. The Johns Hopkins University Press, 1990."},{"key":"e_1_3_2_1_77_1","first-page":"108","volume-title":"Conquering Complexity","author":"Wassyng A.","unstructured":"A. Wassyng , M. Lawford , and T. Maibaum . Separating safety & control systems to reduce complexity . In M. Hinchey and L. Doyle, editors, Conquering Complexity , pages 89\u2013\u2013 108 . Springer, 2012. A. Wassyng, M. Lawford, and T. Maibaum. Separating safety & control systems to reduce complexity. In M. Hinchey and L. Doyle, editors, Conquering Complexity, pages 89\u2013\u2013108. Springer, 2012."},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45236-2_9"},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"crossref","unstructured":"A.\n      Wassyng T.\n      Maibaum M.\n      Lawford and \n      H.\n      Bherer\n  . \n  Software certification: Is there a case against safety cases? In R\n  . Calinescu and E. Jackson editors Foundations of Computer Software. Modeling Development and Verification of Adaptive Systems volume \n  6662\n   of \n  Lecture Notes in Computer Science pages 206\u2013\n  227\n  . Springer Berlin Heidelberg 2011.   A. Wassyng T. Maibaum M. Lawford and H. Bherer. Software certification: Is there a case against safety cases? In R. Calinescu and E. Jackson editors Foundations of Computer Software. Modeling Development and Verification of Adaptive Systems volume 6662 of Lecture Notes in Computer Science pages 206\u2013227. Springer Berlin Heidelberg 2011.","DOI":"10.1007\/978-3-642-21292-5_12"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.5555\/2662398.2662401"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33678-2_27"},{"key":"e_1_3_2_1_82_1","unstructured":"The Muen Separation Kernel. http:\/\/muen.codelabs.ch\/.  The Muen Separation Kernel. http:\/\/muen.codelabs.ch\/."}],"event":{"name":"ICSE '14: 36th International Conference on Software Engineering","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","TCSE IEEE Computer Society's Tech. Council on Software Engin."],"location":"Hyderabad India","acronym":"ICSE '14"},"container-title":["Future of Software Engineering Proceedings"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2593882.2593895","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2593882.2593895","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:03:54Z","timestamp":1750273434000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2593882.2593895"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,5,31]]},"references-count":82,"alternative-id":["10.1145\/2593882.2593895","10.1145\/2593882"],"URL":"https:\/\/doi.org\/10.1145\/2593882.2593895","relation":{},"subject":[],"published":{"date-parts":[[2014,5,31]]},"assertion":[{"value":"2014-05-31","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}