{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,15]],"date-time":"2026-02-15T15:30:07Z","timestamp":1771169407560,"version":"3.50.1"},"reference-count":25,"publisher":"Open Publishing Association","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Electron. Proc. Theor. Comput. Sci.","EPTCS"],"DOI":"10.4204\/eptcs.272.1","type":"journal-article","created":{"date-parts":[[2018,6,25]],"date-time":"2018-06-25T08:47:06Z","timestamp":1529916426000},"page":"1-22","source":"Crossref","is-referenced-by-count":12,"title":["System Design in the Era of IoT \u2014 Meeting the Autonomy Challenge"],"prefix":"10.4204","volume":"272","author":[{"given":"Joseph","family":"Sifakis","sequence":"first","affiliation":[{"name":"University Grenoble Alpes and CNRS \/ Verimag"}]}],"member":"2720","published-online":{"date-parts":[[2018,6,25]]},"reference":[{"key":"ref9","volume-title":"The Adelard safety case development (ASCAD)","year":"1998"},{"key":"ref23","series-title":"Dover Books on Electrical Engineering","volume-title":"Adaptive Control","author":"\u00c5str\u00f6m","year":"2013"},{"issue":"2","key":"ref22","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/s00165-015-0349-8","article-title":"A general framework for architecture composability","volume":"28","author":"Attie","year":"2016","journal-title":"Formal Aspects of Computing"},{"issue":"3","key":"ref8","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1109\/MS.2011.27","article-title":"Rigorous Component-Based System Design Using the BIP Framework","volume":"28","author":"Basu","year":"2011","journal-title":"IEEE Software"},{"key":"ref17","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10270-017-0642-5","article-title":"Rigorous design of cyber-physical systems","author":"Bliudze","year":"2017","journal-title":"Software & Systems Modeling"},{"key":"ref20","series-title":"Synthesis Lectures on Distributed Computing Theory","doi-asserted-by":"publisher","DOI":"10.2200\/S00658ED1V01Y201508DCT013","volume-title":"Decidability of Parameterized Verification","author":"Bloem","year":"2015"},{"issue":"9","key":"ref1","doi-asserted-by":"publisher","first-page":"6","DOI":"10.1145\/3130331","article-title":"Take Two Aspirin and Call Me in the Morning","volume":"60","author":"Cerf","year":"2017","journal-title":"Commun. ACM"},{"issue":"11","key":"ref12","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1145\/1592761.1592781","article-title":"Model Checking: Algorithmic Verification and Debugging","volume":"52","author":"Clarke","year":"2009","journal-title":"Commun. ACM"},{"key":"ref26","series-title":"EMSOFT '05","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1145\/1086228.1086247","article-title":"QoS Control for Optimality and Safety","volume-title":"Proceedings of the 5th ACM International Conference on Embedded Software","author":"Combaz","year":"2005"},{"issue":"1","key":"ref25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s11241-008-9049-2","article-title":"Symbolic quality control for multimedia applications","volume":"40","author":"Combaz","year":"2008","journal-title":"Real-Time Systems"},{"issue":"5","key":"ref16","doi-asserted-by":"publisher","first-page":"271","DOI":"10.1145\/359104.359106","article-title":"Social Processes and Proofs of Theorems and Programs","volume":"22","author":"De Millo","year":"1979","journal-title":"Commun. ACM"},{"key":"ref18","article-title":"DReAM: Dynamic Reconfigurable Architecture Modeling (full paper)","author":"De Nicola","year":"2018","journal-title":"ArXiv e-prints"},{"issue":"3","key":"ref21","doi-asserted-by":"publisher","first-page":"675","DOI":"10.1145\/146637.146681","article-title":"Reasoning About Systems with Many Processes","volume":"39","author":"German","year":"1992","journal-title":"J. ACM"},{"issue":"5","key":"ref24","doi-asserted-by":"publisher","first-page":"29","DOI":"10.1145\/2898969","article-title":"Cybersecurity Gets Smart","volume":"59","author":"Greengard","year":"2016","journal-title":"Commun. ACM"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-2231-4","volume-title":"Synchronous Programming of Reactive Systems","author":"Halbwachs","year":"1993"},{"issue":"12","key":"ref3","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1145\/2677034","article-title":"A New Software Engineering","volume":"57","author":"Jacobson","year":"2014","journal-title":"Commun. ACM"},{"issue":"6","key":"suggested-ref","doi-asserted-by":"publisher","first-page":"869","DOI":"10.1109\/TSE.2012.74","article-title":"What Industry Needs from Architectural Languages: A Survey","volume":"39","author":"Malavolta","year":"2013","journal-title":"IEEE Transactions on Software Engineering"},{"key":"ref15","volume-title":"Federal Automated Vehicles Policy, Accelerating the Next Revolution In Roadway Safety","author":"National Highway Traffic Safety Administration","year":"2016"},{"key":"ref29","article-title":"On a Formal Model of Safe and Scalable Self-driving Cars","author":"Shalev-Shwartz","year":"2017","journal-title":"ArXiv e-prints"},{"issue":"4","key":"ref7","doi-asserted-by":"publisher","first-page":"293","DOI":"10.1561\/1000000034","article-title":"Rigorous System Design","volume":"6","author":"Sifakis","year":"2013","journal-title":"Foundations and Trendsin Electronic Design Automation"},{"issue":"11","key":"ref6","doi-asserted-by":"publisher","first-page":"2093","DOI":"10.1109\/JPROC.2015.2484060","article-title":"System Design Automation: Challenges and Limitations","volume":"103","author":"Sifakis","year":"2015","journal-title":"Proceedings of the IEEE"},{"key":"ref28","doi-asserted-by":"publisher","first-page":"752","DOI":"10.23919\/DATE.2017.7927090","article-title":"Near-optimal deployment of dataflow applications on many-core platforms with real-time guarantees","volume-title":"Design, Automation and Test in Europe Conference Exhibition (DATE), 2017","author":"Skalistis","year":"2017"},{"key":"ref11","volume-title":"Ada Language and Methodology","author":"Watt","year":"1987"},{"issue":"3","key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1347375.1347389","article-title":"The Worst-case Execution-time ProblemOverview of Methods and Survey of Tools","volume":"7","author":"Wilhelm","year":"2008","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"ref13","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1016\/j.paerosci.2012.02.004","article-title":"Advanced model-based FDIR techniques for aerospace systems: Today challenges and opportunities","volume":"53","author":"Zolghadri","year":"2012","journal-title":"Progress in Aerospace Sciences"}],"container-title":["Electronic Proceedings in Theoretical Computer Science"],"original-title":[],"language":"en","deposited":{"date-parts":[[2019,11,20]],"date-time":"2019-11-20T05:05:29Z","timestamp":1574226329000},"score":1,"resource":{"primary":{"URL":"http:\/\/arxiv.org\/abs\/1806.09846v1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,6,25]]},"references-count":25,"URL":"https:\/\/doi.org\/10.4204\/eptcs.272.1","relation":{},"ISSN":["2075-2180"],"issn-type":[{"value":"2075-2180","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,6,25]]}}}