{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T22:33:48Z","timestamp":1762036428167,"version":"build-2065373602"},"publisher-location":"New York, NY, USA","reference-count":125,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,4,21]],"date-time":"2021-04-21T00:00:00Z","timestamp":1618963200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF","award":["CNS-1563873, CNS-1703936, CNS-1750158, CNS-1955670"],"award-info":[{"award-number":["CNS-1563873, CNS-1703936, CNS-1750158, CNS-1955670"]}]},{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["ONR N00014-20-1-2744"],"award-info":[{"award-number":["ONR N00014-20-1-2744"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,4,21]]},"DOI":"10.1145\/3447786.3456257","type":"proceedings-article","created":{"date-parts":[[2021,4,22]],"date-time":"2021-04-22T06:18:11Z","timestamp":1619072291000},"page":"523-539","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["REBOUND"],"prefix":"10.1145","author":[{"given":"Neeraj","family":"Gandhi","sequence":"first","affiliation":[{"name":"University of Pennsylvania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Edo","family":"Roth","sequence":"additional","affiliation":[{"name":"University of Pennsylvania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Brian","family":"Sandler","sequence":"additional","affiliation":[{"name":"University of Pennsylvania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andreas","family":"Haeberlen","sequence":"additional","affiliation":[{"name":"University of Pennsylvania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Linh Thi Xuan","family":"Phan","sequence":"additional","affiliation":[{"name":"University of Pennsylvania"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,4,21]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095817"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00044"},{"key":"e_1_3_2_1_3_1","volume-title":"Proc. NSDI","author":"Aditya P.","year":"2012","unstructured":"P. Aditya , M. Zhao , Y. Lin , A. Haeberlen , P. Druschel , B. Maggs , and B. Wishon . Reliable client accounting for hybrid content-distribution networks . In Proc. NSDI , 2012 . P. Aditya, M. Zhao, Y. Lin, A. Haeberlen, P. Druschel, B. Maggs, and B. Wishon. Reliable client accounting for hybrid content-distribution networks. In Proc. NSDI, 2012."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF02278853"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095816"},{"key":"e_1_3_2_1_6_1","volume-title":"OSDI","author":"Alagappan R.","year":"2018","unstructured":"R. Alagappan , A. Ganesan , J. Liu , A. Arpaci-Dusseau , and R. Arpaci-Dusseau . Fault-tolerance, fast and slow: Exploiting failure asynchrony in distributed systems . In OSDI , 2018 . R. Alagappan, A. Ganesan, J. Liu, A. Arpaci-Dusseau, and R. Arpaci-Dusseau. Fault-tolerance, fast and slow: Exploiting failure asynchrony in distributed systems. In OSDI, 2018."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00602-9_3"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2010.70"},{"key":"e_1_3_2_1_9_1","volume-title":"Oct. 2","author":"Anderson Z.","year":"2014","unstructured":"Z. Anderson and M. Giovanardi . Self-driving vehicle with integrated active suspension , Oct. 2 2014 . US Patent App . 14\/242,691. Z. Anderson and M. Giovanardi. Self-driving vehicle with integrated active suspension, Oct. 2 2014. US Patent App. 14\/242,691."},{"key":"e_1_3_2_1_10_1","volume-title":"Proc. NDSS","author":"Backes M.","year":"2009","unstructured":"M. Backes , P. Druschel , A. Haeberlen , and D. Unruh . CSAR: a practical and provable technique to make randomized systems accountable . In Proc. NDSS , 2009 . M. Backes, P. Druschel, A. Haeberlen, and D. Unruh. CSAR: a practical and provable technique to make randomized systems accountable. In Proc. NDSS, 2009."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2010.30"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1331904.1331907"},{"key":"e_1_3_2_1_13_1","unstructured":"Ben Lynn. PBC Library. Version 0.5.14.  Ben Lynn. PBC Library. Version 0.5.14."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1400751.1400802"},{"issue":"5","key":"e_1_3_2_1_15_1","first-page":"418","volume":"14","author":"Besselmann T.","year":"2008","unstructured":"T. Besselmann and M. Morari . Hybrid Parameter-Varying MPC for Autonomous Vehicle Steering. European Journal of Control , 14 ( 5 ): 418 -- 431 , 2008 . T. Besselmann and M. Morari. Hybrid Parameter-Varying MPC for Autonomous Vehicle Steering. European Journal of Control, 14(5):418 -- 431, 2008.","journal-title":"Hybrid Parameter-Varying MPC for Autonomous Vehicle Steering. European Journal of Control"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2017.33"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36288-6_3"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCST.2005.860527"},{"key":"e_1_3_2_1_19_1","volume-title":"Proc. PODC","author":"Bracha G.","year":"1984","unstructured":"G. Bracha . An asynchronous ⌊(n -- 1)\/3⌋-resilient consensus protocol. In Proc. PODC , 1984 . G. Bracha. An asynchronous ⌊(n -- 1)\/3⌋-resilient consensus protocol. In Proc. PODC, 1984."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/12.24293"},{"key":"e_1_3_2_1_21_1","unstructured":"A. Burns and R. I. Davis. Mixed criticality systems - a review. http:\/\/www-users.cs.york.ac.uk\/burns\/review.pdf Mar. 2019.  A. Burns and R. I. Davis. Mixed criticality systems - a review. http:\/\/www-users.cs.york.ac.uk\/burns\/review.pdf Mar. 2019."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/63264.63403"},{"key":"e_1_3_2_1_23_1","volume-title":"Proc. HotSec","author":"C\u00e1rdenas A. A.","year":"2008","unstructured":"A. A. C\u00e1rdenas , S. Amin , and S. Sastry . Research challenges for the security of control systems . In Proc. HotSec , 2008 . A. A. C\u00e1rdenas, S. Amin, and S. Sastry. Research challenges for the security of control systems. In Proc. HotSec, 2008."},{"key":"e_1_3_2_1_24_1","volume-title":"Efficient Implementation of Randomized MPC for Miniature Race Cars. In European Control Conference (ECC)","author":"Carrau J.","year":"2016","unstructured":"J. Carrau , A. Liniger , X. Zhang , and J. Lygeros . Efficient Implementation of Randomized MPC for Miniature Race Cars. In European Control Conference (ECC) , 2016 . J. Carrau, A. Liniger, X. Zhang, and J. Lygeros. Efficient Implementation of Randomized MPC for Miniature Race Cars. In European Control Conference (ECC), 2016."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/571637.571640"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043567"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/234533.234549"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/226643.226647"},{"key":"e_1_3_2_1_29_1","volume-title":"This car runs on code","author":"Charette R. N.","year":"2009","unstructured":"R. N. Charette . This car runs on code . IEEE Spectrum , 2009 . http:\/\/spectrum.ieee.org\/transportation\/systems\/this-car-runs-on-code. R. N. Charette. This car runs on code. IEEE Spectrum, 2009. http:\/\/spectrum.ieee.org\/transportation\/systems\/this-car-runs-on-code."},{"key":"e_1_3_2_1_30_1","volume-title":"Proc. USENIX Security","author":"Checkoway S.","year":"2011","unstructured":"S. Checkoway , D. McCoy , B. Kantor , D. Anderson , H. Shacham , S. Savage , K. Koscher , A. Czeskis , F. Roesner , and T. Kohno . Comprehensive experimental analyses of automotive attack surfaces . In Proc. USENIX Security , 2011 . S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, S. Savage, K. Koscher, A. Czeskis, F. Roesner, and T. Kohno. Comprehensive experimental analyses of automotive attack surfaces. In Proc. USENIX Security, 2011."},{"key":"e_1_3_2_1_31_1","volume-title":"Proc. HotOS","author":"Chen A.","year":"2015","unstructured":"A. Chen , H. Xiao , L. T. X. Phan , and A. Haeberlen . Fault tolerance and the five-second rule . In Proc. HotOS , May 2015 . A. Chen, H. Xiao, L. T. X. Phan, and A. Haeberlen. Fault tolerance and the five-second rule. In Proc. HotOS, May 2015."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2014.27"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294280"},{"key":"e_1_3_2_1_34_1","volume-title":"Proc. NSDI","author":"Clement A.","year":"2009","unstructured":"A. Clement , E. L. Wong , L. Alvisi , M. Dahlin , and M. Marchetti . Making Byzantine fault tolerant systems tolerate Byzantine faults . In Proc. NSDI , 2009 . A. Clement, E. L. Wong, L. Alvisi, M. Dahlin, and M. Marchetti. Making Byzantine fault tolerant systems tolerate Byzantine faults. In Proc. NSDI, 2009."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-0708-5"},{"key":"e_1_3_2_1_36_1","volume-title":"Proc. OSDI","author":"Cowling J. A.","year":"2006","unstructured":"J. A. Cowling , D. S. Myers , B. Liskov , R. Rodrigues , and L. Shrira . HQ replication: A hybrid quorum protocol for Byzantine fault tolerance . In Proc. OSDI , 2006 . J. A. Cowling, D. S. Myers, B. Liskov, R. Rodrigues, and L. Shrira. HQ replication: A hybrid quorum protocol for Byzantine fault tolerance. In Proc. OSDI, 2006."},{"key":"e_1_3_2_1_37_1","volume-title":"Proc. NSDI","author":"Cully B.","year":"2008","unstructured":"B. Cully , G. Lefebvre , D. Meyer , M. Feeley , N. Hutchinson , and A. Warfield . Remus: high availability via asynchronous virtual machine replication . In Proc. NSDI , 2008 . B. Cully, G. Lefebvre, D. Meyer, M. Feeley, N. Hutchinson, and A. Warfield. Remus: high availability via asynchronous virtual machine replication. In Proc. NSDI, 2008."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/11577327_4"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/361179.361202"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-76627-8_19"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"crossref","unstructured":"S. Dolev. Self-Stabiliaztion. MIT Press 2000.  S. Dolev. Self-Stabiliaztion. MIT Press 2000.","DOI":"10.7551\/mitpress\/6156.001.0001"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/93385.93407"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/1017460.1017463"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2011.6083139"},{"key":"e_1_3_2_1_45_1","volume-title":"Secure estimation and control for cyber-physical systems under adversarial attacks. In arXiv:1025.5073v1","author":"Fawzi H.","year":"2012","unstructured":"H. Fawzi , P. Tabuada , and S. Diggavi . Secure estimation and control for cyber-physical systems under adversarial attacks. In arXiv:1025.5073v1 , 2012 . H. Fawzi, P. Tabuada, and S. Diggavi. Secure estimation and control for cyber-physical systems under adversarial attacks. In arXiv:1025.5073v1, 2012."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3149.214121"},{"key":"e_1_3_2_1_47_1","volume-title":"E76-D(11):1333--1340","author":"Fohler G.","year":"1993","unstructured":"G. Fohler . Changing operational modes in the context of pre-runtime scheduling. IEICE Transactions on Information and Systems , E76-D(11):1333--1340 , 1993 . G. Fohler. Changing operational modes in the context of pre-runtime scheduling. IEICE Transactions on Information and Systems, E76-D(11):1333--1340, 1993."},{"key":"e_1_3_2_1_48_1","volume-title":"Proc. WOOT","author":"Foster I.","year":"2015","unstructured":"I. Foster , A. Prudhomme , K. Koscher , and S. Savage . Fast and vulnerable: A story of telematic failures . In Proc. WOOT , 2015 . I. Foster, A. Prudhomme, K. Koscher, and S. Savage. Fast and vulnerable: A story of telematic failures. In Proc. WOOT, 2015."},{"key":"e_1_3_2_1_49_1","volume-title":"Hacker finds he can remotely kill car engines after breaking into GPS tracking apps","author":"Franceschi-Bichhierai L.","year":"2019","unstructured":"L. Franceschi-Bichhierai . Hacker finds he can remotely kill car engines after breaking into GPS tracking apps , 2019 . https:\/\/www.vice.com\/en_us\/article\/zmpx4x\/hacker-monitor-cars-kill-engine-gps-tracking-apps. L. Franceschi-Bichhierai. Hacker finds he can remotely kill car engines after breaking into GPS tracking apps, 2019. https:\/\/www.vice.com\/en_us\/article\/zmpx4x\/hacker-monitor-cars-kill-engine-gps-tracking-apps."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS48715.2020.00-13"},{"issue":"5","key":"e_1_3_2_1_52_1","first-page":"2454","volume":"23","author":"Geyer T.","year":"2008","unstructured":"T. Geyer , G. Papafotiou , R. Frasca , and M. Morari . Constrained Optimal Control of the Step-Down DC-DC Converter. IEEE Transactions on Power Electronics , 23 ( 5 ): 2454 -- 2464 , Sept. 2008 . T. Geyer, G. Papafotiou, R. Frasca, and M. Morari. Constrained Optimal Control of the Step-Down DC-DC Converter. IEEE Transactions on Power Electronics, 23(5):2454--2464, Sept. 2008.","journal-title":"Constrained Optimal Control of the Step-Down DC-DC Converter. IEEE Transactions on Power Electronics"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2008.2007030"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/12.88464"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.5555\/102243.102249"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755913.1755950"},{"key":"e_1_3_2_1_57_1","unstructured":"Gurobi Optimization Inc. http:\/\/www.gurobi.com.  Gurobi Optimization Inc. http:\/\/www.gurobi.com."},{"key":"e_1_3_2_1_58_1","volume-title":"Proc. OSDI","author":"Haeberlen A.","year":"2010","unstructured":"A. Haeberlen , P. Aditya , R. Rodrigues , and P. Druschel . Accountable virtual machines . In Proc. OSDI , 2010 . A. Haeberlen, P. Aditya, R. Rodrigues, and P. Druschel. Accountable virtual machines. In Proc. OSDI, 2010."},{"key":"e_1_3_2_1_59_1","volume-title":"Proc. NSDI","author":"Haeberlen A.","year":"2009","unstructured":"A. Haeberlen , I. Avramopoulos , J. Rexford , and P. Druschel . NetReview: Detecting when interdomain routing goes wrong . In Proc. NSDI , 2009 . A. Haeberlen, I. Avramopoulos, J. Rexford, and P. Druschel. NetReview: Detecting when interdomain routing goes wrong. In Proc. NSDI, 2009."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-10877-8_10"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294279"},{"key":"e_1_3_2_1_62_1","volume-title":"The Sydney Morning Herald","author":"Ham L.","year":"2009","unstructured":"L. Ham and R. Grace . Cruise control terror for freeway driver . The Sydney Morning Herald , Dec. 2009 . https:\/\/www.smh.com.au\/national\/cruise-control-terror-for-freeway-driver-20091215-ktxn.html. L. Ham and R. Grace. Cruise control terror for freeway driver. The Sydney Morning Herald, Dec. 2009. https:\/\/www.smh.com.au\/national\/cruise-control-terror-for-freeway-driver-20091215-ktxn.html."},{"key":"e_1_3_2_1_63_1","volume-title":"Proc. NSDI","author":"Ho C.","year":"2008","unstructured":"C. Ho , R. van Renesse , M. Bickford , and D. Dolev . Nysiad: Practical protocol transformation to tolerate Byzantine failures . In Proc. NSDI , 2008 . C. Ho, R. van Renesse, M. Bickford, and D. Dolev. Nysiad: Practical protocol transformation to tolerate Byzantine failures. In Proc. NSDI, 2008."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-49823-0_25"},{"key":"e_1_3_2_1_65_1","volume-title":"SAFEbus. In Proc. DASC","author":"Hoyme K.","year":"1992","unstructured":"K. Hoyme and K. Driscoll . SAFEbus. In Proc. DASC , 1992 . K. Hoyme and K. Driscoll. SAFEbus. In Proc. DASC, 1992."},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/93385.93409"},{"key":"e_1_3_2_1_67_1","first-page":"1","article-title":"A public key cryptosystem suitable for digital multisignatures","volume":"71","author":"Itakura K.","year":"1983","unstructured":"K. Itakura and K. Nakamura . A public key cryptosystem suitable for digital multisignatures . NEC Research & Development , 71 : 1 -- 8 , 1983 . K. Itakura and K. Nakamura. A public key cryptosystem suitable for digital multisignatures. NEC Research & Development, 71:1--8, 1983.","journal-title":"NEC Research & Development"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787479"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF02278852"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/46.1.16"},{"key":"e_1_3_2_1_71_1","volume-title":"Proc. OSDI","author":"Kim T.","year":"2010","unstructured":"T. Kim , X. Wang , N. Zeldovich , and M. F. Kaashoek . Intrusion recovery using selective re-execution . In Proc. OSDI , 2010 . T. Kim, X. Wang, N. Zeldovich, and M. F. Kaashoek. Intrusion recovery using selective re-execution. In Proc. OSDI, 2010."},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2002.805821"},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1109\/40.16792"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/1658357.1658358"},{"key":"e_1_3_2_1_75_1","volume-title":"Security Week","author":"Kovacs E.","year":"2014","unstructured":"E. Kovacs . Cyberattack on german steel plant caused significant damage . Security Week , 2014 . https:\/\/www.securityweek.com\/cyberattack-german-steel-plant-causes-significant-damage-report. E. Kovacs. Cyberattack on german steel plant caused significant damage. Security Week, 2014. https:\/\/www.securityweek.com\/cyberattack-german-steel-plant-causes-significant-damage-report."},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(79)90151-0"},{"key":"e_1_3_2_1_77_1","volume-title":"May","author":"Lamport L.","year":"1998","unstructured":"L. Lamport . The part-time parliament. ACM Transactions on Computer Systems (TOCS), 16(2):133--169 , May 1998 . L. Lamport. The part-time parliament. ACM Transactions on Computer Systems (TOCS), 16(2):133--169, May 1998."},{"key":"e_1_3_2_1_78_1","volume-title":"The Byzantine generals problem. ACM Transactions on Programming Languages and Systems (TOPLAS), 4(3):382--401","author":"Lamport L.","year":"1982","unstructured":"L. Lamport , R. Shostak , and M. Pease . The Byzantine generals problem. ACM Transactions on Programming Languages and Systems (TOPLAS), 4(3):382--401 , 1982 . L. Lamport, R. Shostak, and M. Pease. The Byzantine generals problem. ACM Transactions on Programming Languages and Systems (TOPLAS), 4(3):382--401, 1982."},{"key":"e_1_3_2_1_79_1","volume-title":"Proc. NSDI","author":"Li J.","year":"2007","unstructured":"J. Li and D. Mazi\u00e8res . Beyond one-third faulty replicas in Byzantine fault tolerant systems . In Proc. NSDI , 2007 . J. Li and D. Mazi\u00e8res. Beyond one-third faulty replicas in Byzantine fault tolerant systems. In Proc. NSDI, 2007."},{"key":"e_1_3_2_1_80_1","article-title":"The sound of hacking: Researchers use Trojan CD to hack car","author":"Liebowitz M.","year":"2011","unstructured":"M. Liebowitz . The sound of hacking: Researchers use Trojan CD to hack car . NBC News , 2011 . http:\/\/www.nbcnews.com\/id\/42074718\/ns\/technology_and_science-security\/t\/sound-hacking-researchers-use-trojan-cd-hack-car\/#.XYPOBSUpDUY. M. Liebowitz. The sound of hacking: Researchers use Trojan CD to hack car. NBC News, 2011. http:\/\/www.nbcnews.com\/id\/42074718\/ns\/technology_and_science-security\/t\/sound-hacking-researchers-use-trojan-cd-hack-car\/#.XYPOBSUpDUY.","journal-title":"NBC News"},{"key":"e_1_3_2_1_81_1","volume-title":"Testing the limits of an industrial robot's security. TrendLabs, https:\/\/www.dropbox.com\/s\/7ob04tbhpdjj6ks\/tr.pdf","author":"Maggi F.","year":"2017","unstructured":"F. Maggi . Rogue robots : Testing the limits of an industrial robot's security. TrendLabs, https:\/\/www.dropbox.com\/s\/7ob04tbhpdjj6ks\/tr.pdf , 2017 . F. Maggi. Rogue robots: Testing the limits of an industrial robot's security. TrendLabs, https:\/\/www.dropbox.com\/s\/7ob04tbhpdjj6ks\/tr.pdf, 2017."},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-49823-0_29"},{"key":"e_1_3_2_1_83_1","volume-title":"Natick","author":"MATLAB.","year":"2019","unstructured":"MATLAB. Version 9.7.0 (R2019b). The MathWorks Inc ., Natick , Massachusetts , 2019 . MATLAB. Version 9.7.0 (R2019b). The MathWorks Inc., Natick, Massachusetts, 2019."},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1117\/12.2517604"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/501983.502017"},{"key":"e_1_3_2_1_86_1","volume-title":"Proc. SRDS","author":"Milosevic Z.","year":"2013","unstructured":"Z. Milosevic , M. Biely , and A. Schiper . Bounded delay in Byzantinetolerant state machine replication . In Proc. SRDS , 2013 . Z. Milosevic, M. Biely, and A. Schiper. Bounded delay in Byzantinetolerant state machine replication. In Proc. SRDS, 2013."},{"key":"e_1_3_2_1_87_1","volume-title":"Proc. NASA Langley Formal Methods Workshop (LFM)","author":"Miner P.","year":"2000","unstructured":"P. Miner . Analysis of the SPIDER fault-tolerance protocols . In Proc. NASA Langley Formal Methods Workshop (LFM) , 2000 . P. Miner. Analysis of the SPIDER fault-tolerance protocols. In Proc. NASA Langley Formal Methods Workshop (LFM), 2000."},{"key":"e_1_3_2_1_88_1","unstructured":"mLAB. Autoplug. https:\/\/github.com\/mlab-upenn\/AutoPlug\/blob\/master\/Firmware\/CruiseControl\/Sources\/main.c.  mLAB. Autoplug. https:\/\/github.com\/mlab-upenn\/AutoPlug\/blob\/master\/Firmware\/CruiseControl\/Sources\/main.c."},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.5555\/1793974.1794131"},{"key":"e_1_3_2_1_90_1","unstructured":"M. Morari. Fast model predictive control (MPC). Presentation available from http:\/\/divf.eng.cam.ac.uk\/cfes\/pub\/Main\/Presentations\/Morari.pdf.  M. Morari. Fast model predictive control (MPC). Presentation available from http:\/\/divf.eng.cam.ac.uk\/cfes\/pub\/Main\/Presentations\/Morari.pdf."},{"key":"e_1_3_2_1_91_1","unstructured":"NIST. Guide to supervisory control and data acquisition (SCADA) and industrial control systems security 2006. https:\/\/www.dhs.gov\/sites\/default\/files\/publications\/csd-nist-guidetosupervisoryanddataccquisition-scadaandindustrialcontrolsystemssecurity-2007.pdf.  NIST. Guide to supervisory control and data acquisition (SCADA) and industrial control systems security 2006. https:\/\/www.dhs.gov\/sites\/default\/files\/publications\/csd-nist-guidetosupervisoryanddataccquisition-scadaandindustrialcontrolsystemssecurity-2007.pdf."},{"key":"e_1_3_2_1_92_1","volume-title":"Share-driven scheduling of embedded networks","author":"Nolte T.","year":"2006","unstructured":"T. Nolte . Share-driven scheduling of embedded networks , 2006 . T. Nolte. Share-driven scheduling of embedded networks, 2006."},{"key":"e_1_3_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2010.5717458"},{"key":"e_1_3_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCS.2016.2643239"},{"key":"e_1_3_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2008.2007032"},{"key":"e_1_3_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.1109\/EMWRTS.1998.685082"},{"key":"e_1_3_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1109\/12.477249"},{"key":"e_1_3_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.1023\/B:TIME.0000016129.97430.c6"},{"key":"e_1_3_2_1_99_1","volume-title":"USA Today, 2018","author":"Reindl J.","year":"2018","unstructured":"J. Reindl . Car hacking remains a very real threat as autos become ever more loaded with tech . USA Today, 2018 . https:\/\/www.usatoday.com\/story\/money\/ 2018 \/01\/14\/car-hacking-remains-very-real-threat-autos-become-ever-more-loaded-tech\/1032951001\/. J. Reindl. Car hacking remains a very real threat as autos become ever more loaded with tech. USA Today, 2018. https:\/\/www.usatoday.com\/story\/money\/2018\/01\/14\/car-hacking-remains-very-real-threat-autos-become-ever-more-loaded-tech\/1032951001\/."},{"key":"e_1_3_2_1_100_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACC.2010.5531095"},{"key":"e_1_3_2_1_101_1","volume-title":"RTAS","author":"Roth E.","year":"2021","unstructured":"E. Roth and A. Haeberlen . Do not overpay for fault tolerance! In Proc . RTAS , 2021 . E. Roth and A. Haeberlen. Do not overpay for fault tolerance! In Proc. RTAS, 2021."},{"key":"e_1_3_2_1_102_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF00365439"},{"key":"e_1_3_2_1_103_1","volume-title":"Proc. RTAS","author":"Shu L. C.","year":"2002","unstructured":"L. C. Shu , J. A. Stankovic , and S. H. Son . Achieving bounded and predictable recovery using real-time logging . In Proc. RTAS , 2002 . L. C. Shu, J. A. Stankovic, and S. H. Son. Achieving bounded and predictable recovery using real-time logging. In Proc. RTAS, 2002."},{"key":"e_1_3_2_1_104_1","volume-title":"Proc. NSDI","author":"Singh A.","year":"2008","unstructured":"A. Singh , T. Das , P. Maniatis , P. Druschel , and T. Roscoe . BFT protocols under fire . In Proc. NSDI , 2008 . A. Singh, T. Das, P. Maniatis, P. Druschel, and T. Roscoe. BFT protocols under fire. In Proc. NSDI, 2008."},{"key":"e_1_3_2_1_105_1","volume-title":"Proc. NSDI","author":"Singh A.","year":"2009","unstructured":"A. Singh , P. Fonseca , P. Kuznetsov , R. Rodrigues , and P. Maniatis . Zeno: Eventually consistent Byzantine-fault tolerance . In Proc. NSDI , 2009 . A. Singh, P. Fonseca, P. Kuznetsov, R. Rodrigues, and P. Maniatis. Zeno: Eventually consistent Byzantine-fault tolerance. In Proc. NSDI, 2009."},{"key":"e_1_3_2_1_106_1","doi-asserted-by":"publisher","DOI":"10.1145\/2502524.2502542"},{"key":"e_1_3_2_1_107_1","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2009.5090640"},{"key":"e_1_3_2_1_108_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCE.2008.4559554"},{"key":"e_1_3_2_1_109_1","doi-asserted-by":"publisher","DOI":"10.1145\/2185505.2185515"},{"key":"e_1_3_2_1_110_1","doi-asserted-by":"publisher","DOI":"10.1109\/FTCS.1998.689473"},{"key":"e_1_3_2_1_111_1","volume-title":"Oct. 18","author":"Tesar D.","year":"1994","unstructured":"D. Tesar . Robot and robot actuator module therefor , Oct. 18 1994 . US Patent 5,355,743. D. Tesar. Robot and robot actuator module therefor, Oct. 18 1994. US Patent 5,355,743."},{"key":"e_1_3_2_1_112_1","doi-asserted-by":"publisher","DOI":"10.1109\/REAL.1992.242672"},{"key":"e_1_3_2_1_114_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294268"},{"key":"e_1_3_2_1_115_1","doi-asserted-by":"publisher","DOI":"10.1080\/00207170600587572"},{"key":"e_1_3_2_1_116_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2007.47"},{"volume-title":"Xc90 technical data","year":"2018","key":"e_1_3_2_1_117_1","unstructured":"Volvo. Xc90 technical data , 2018 . Available from https:\/\/www.media.volvocars.com\/global\/en-gb\/models\/xc90\/2018\/specifications. Volvo. Xc90 technical data, 2018. Available from https:\/\/www.media.volvocars.com\/global\/en-gb\/models\/xc90\/2018\/specifications."},{"key":"e_1_3_2_1_118_1","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359653"},{"key":"e_1_3_2_1_119_1","volume-title":"San Diego Tribune, 2015","author":"Warth G.","year":"2015","unstructured":"G. Warth . New hack : When drivers aren't in control . San Diego Tribune, 2015 . https:\/\/www.sandiegouniontribune.com\/news\/education\/sdut-ucsd-professor-cyber-hacking- 2015 aug28-story.html. G. Warth. New hack: When drivers aren't in control. San Diego Tribune, 2015. https:\/\/www.sandiegouniontribune.com\/news\/education\/sdut-ucsd-professor-cyber-hacking-2015aug28-story.html."},{"key":"e_1_3_2_1_120_1","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2009.5399536"},{"key":"e_1_3_2_1_121_1","doi-asserted-by":"publisher","DOI":"10.1145\/1966445.1966457"},{"key":"e_1_3_2_1_122_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2016.7461322"},{"key":"e_1_3_2_1_123_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945470"},{"key":"e_1_3_2_1_124_1","volume-title":"Proc. PODC","author":"Yin M.","year":"2019","unstructured":"M. Yin , D. Malkhi , M. K. Reiter , G. G. Gueta , and I. Abraham . Hot-Stuff: BFT consensus with linearity and responsivenes . In Proc. PODC , 2019 . M. Yin, D. Malkhi, M. K. Reiter, G. G. Gueta, and I. Abraham. Hot-Stuff: BFT consensus with linearity and responsivenes. In Proc. PODC, 2019."},{"key":"e_1_3_2_1_125_1","doi-asserted-by":"publisher","DOI":"10.3166\/ejc.11.40-49"},{"key":"e_1_3_2_1_126_1","volume-title":"Bibliographical review on reconfigurable faulttolerant control systems. Annual reviews in control, 32(2):229--252","author":"Zhang Y.","year":"2008","unstructured":"Y. Zhang and J. Jiang . Bibliographical review on reconfigurable faulttolerant control systems. Annual reviews in control, 32(2):229--252 , 2008 . Y. Zhang and J. Jiang. Bibliographical review on reconfigurable faulttolerant control systems. Annual reviews in control, 32(2):229--252, 2008."},{"key":"e_1_3_2_1_127_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043584"}],"event":{"name":"EuroSys '21: Sixteenth European Conference on Computer Systems","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"],"location":"Online Event United Kingdom","acronym":"EuroSys '21"},"container-title":["Proceedings of the Sixteenth European Conference on Computer Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3447786.3456257","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3447786.3456257","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3447786.3456257","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:48:04Z","timestamp":1750193284000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3447786.3456257"}},"subtitle":["defending distributed systems against attacks with bounded-time recovery"],"short-title":[],"issued":{"date-parts":[[2021,4,21]]},"references-count":125,"alternative-id":["10.1145\/3447786.3456257","10.1145\/3447786"],"URL":"https:\/\/doi.org\/10.1145\/3447786.3456257","relation":{},"subject":[],"published":{"date-parts":[[2021,4,21]]},"assertion":[{"value":"2021-04-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}