PDCS Publications

The following lists all the papers describing research supported in whole or in part by PDCS that have been published in refereed journals and technical conferences.

[1] J. Arlat, "Fault Injection for the Experimental Validation of Fault-Tolerant Systems (Invited paper)", in Proc. Workshop Fault-Tolerant Systems, (IEICE, Tokyo, Japan), pp.33-40, 1992.

[2] J. Arlat, A. Costes, Y. Crouzet, J. C. Laprie and D. Powell, "Fault Injection and Dependability Evaluation of Fault-Tolerant Systems", IEEE Transactions on Computers, 42 (8), pp.913-23, August 1993.

[3] J. Arlat, Y. Crouzet and J. C. Laprie, "Fault Injection for the Experimental Validation of Fault Tolerance", in Proc. 1991 ESPRIT Conj, (Brussels), pp.791-805,1991.

[4] J. Arlat, K. Kanoun and J. C. Laprie, "Dependability Modelling and Evaluation of Software-Fault Tolerant Systems", IEEE Trans. Computers (Special Issue on Fault Tolerance), 39 (4), pp. 504-13, 1990.

[5] N. Audsley, A. Burns, M. Richardson, K. Tindell and A. Wellings, "Applying New Scheduling Theory to Static Priority Pre-emptive Scheduling", Software Engineering Journal, 8 (5), pp.284-92, September 1993.

[6] D. R. Avresky and J. Arlat, "Functional Programming for Fault Tolerance in Parallel Computing Systems", in Proc. 6th ISCA Int. Conj on Parallel and Distributed Computing Systems (PDCS'93), (Louisville, KY, USA), pp.38-45, ISCA,1993.

[7] D. R. Avresky, J. Arlat, J. C. Laprie and Y. Crouzet, "Fault Injection for the Formal Testing of Fault Tolerance", in Proc. 22th Int. Symp. Fault-Tolerant Computing (FTCS-22), (Boston, MA, USA), pp.345-54, IEEE Computer Society Press, 1992.

[8] O. Babaoglu, "Fault-Tolerant Computing Based on Mach", in Proc. USENIX Mach Workshop, (Vermont), 1990.

[9] O. Babaoglu, L. Alvisi, A. Amoroso and R. Davoli, "Mapping Parallel Computations onto Distributed Systems in Paralex", in Proc. IEEE CompEuro '91, (Bologna, Italy), 1991.

[10] A. Baker, J. Bieman, N. E. Fenton, D. Gustafson, A. Melton and R. W. Whitty, "A Philosophy for Software Measurement", Journal of Systems Software, 12, pp.277-81, 1990.

[11] G. Bernot, M.-C. Gaudel and B. Marre, "Software Testing Based on Formal Specifications: A theory and a tool", Software Engineering Journal, 9 (6), pp.387-405, 1991.

574 PDCS Publications

[12] J. Bieman, N. E. Fenton, D. Gustafson, A. Melton and R. W. Whitty, "Moving from Philosophy to Practice in Software Measurement", in Formal Aspects of Software Measurement (T. Denvir, H. R. and R. W. Whitty, Eds.), pp.38-59, Springer Verlag, 1992.

[13] A. Bondavalli, S. Chiaradonna and F. Di Giandomenico, "Efficient Fault Tolerance: An approach to deal with transient faults in multiprocessor architectures", in Proc. Int. Con! on Parallel and Distributed Systems (ICPADS'94), (Hsinchu, Taiwan), pp.354-9, IEEE Computer Society, 1994.

[14] A. Bondavalli, S. Chiaradonna, F. Di Giandomenico and L. Strigini, "Dependability Models for Iterative Software Considering Correlation among Successive Inputs", in Proc. Int. Symp. on Computer Performance and Dependability (IPDS'95), (Erlangen, Germany), p.in publication, 1995.

[15] A. BondavaIIi, F. Di Giandomenico and J. Xu, "A Cost-Effective and Flexible Scheme for Software Fault Tolerance", 1. of Computer Systems Science and Engineering, 8 (4), pp.234-44, October 1993.

[16] A. Bondavalli, M. Mannocci, F. Tarini, P. Zini, L. Nardone and L. Simoncini, "A Performable BSM Architecture", in Proc. 5th GIIITGIGMA Int. Con! on Fault-Tolerant Computing, (Nurnberg, Germany), 1991.

[17] A. Bondavalli and L. Nardone, "Supporto a Tempo di Esecuzione ed Ambiente per un Linguaggio Dataflow Esteso", in Proc. Congresso Annuale A. I. CA., Vol. 2, (Siena), pp.l061-75, 1991.

[18] A. Bondavalli and L. Simoncini, "Failure Classification with respect to Detection", in Proc. 2nd Workshop on Future Trends of Distributed Computing Systems in the 90s, (Cairo), pp.47-53, IEEE, 1990.

[19] A. Bondavalli and L. Simoncini, "Structured Software Fault Tolerance with BSM", in Proc. 3rd IEEE Workshop on the Future Trends of Distributed Computing Systems, (Taipei, Taiwan), 1992.

[20] A. Bondavalli, J. A. Stankovic and L. Strigini, "Adaptable Fault Tolerance for Real-Time Systems", in Proc. 3rd Int. Workshop on Responsive Computer Systems, (New Hampshire), pp.123-32, 1993.

[21] A. Bondavalli, L. Strigini and L. Simoncini, "Data-Flow like Languages for Real-Time Systems: Issues of computational models and notation", in Proc. IIth Symp. on Reliable Distributed Systems (SRDS-II), (Houston, Texas), pp.214-21, 1992.

[22] S. Brocklehurst, P. Y. Chan, B. Littlewood and J. Snell, "Recalibrating Software Reliability Models", IEEE Trans. Software Engineering, 16 (4), pp.458-70, 1990.

[23] S. Brocklehurst, K. Kanoun, J. C. Laprie, B. Littlewood, S. Metge, P. Mellor and A. Tanner, "Reliability Analyses of Software Failure Data", in Proc. 1991 ESPRIT Can!, (Brussels), pp.806-21, 1991.

[24] S. Brocklehurst and B. Littlewood, "New Ways to get Accurate Reliability Measures", IEEE Software (Special Issue on Applications of Software Reliability Models), 9 (4), pp.34-42, 1992.

poes Publications 575

[25] S. Brocklehurst, B. Littlewood, T. Olovsson and E. Jonsson, "On Measurement of Operational Security", in Proc. 9th Annual IEEE Conference on Computer Assurance (COMPASS 94), (Gaithersburg), pp.257-66, IEEE Computer Society, 1994.

[26] A. Burns, "Scheduling Hard Real-Time Systems: A review", Software Engineering Journal, 6 (3), pp.116-28, 1991.

[27] A. Burns, "Real-Time System Scheduling", Software Engineering Journal 1993.

[28] A. Burns, J. A. McDermid and J. E. Dobson, "On the Meaning of Safety and Security", Computer Journal, 34 (1) 1992.

[29] R. Chakka and I. Mitrani, "Multiprocessor Systems with General Breakdowns and Repairs", in Proc. Sigmetrics - Performance '92, (Newport, RI), 1992.

[30] R. Chakka and I. Mitrani, "A Numerical Solution Method for MUltiprocessor Systems with General Breakdowns and Repairs", in 6th Int. Con! on Modelling Techniques and Tools for Computer Performance Evaluation, (Edinburgh), pp.289-304, Edinburgh University Press, 1992.

[31] R. Chakka and I. Mitrani, "Heterogeneous Multiprocessor Systems with Breakdowns: Performance and optimal repair strategies", in Proc. INRIAlORSAITIMS/SMAI Con! on Applied Probability in Engineering, Computer and Communication Sciences, (Paris), 1993.

[32] S. Chiaradonna, A. Bondavalli and L. Strigini, "On Performability Modeling and Evaluation of Software Fault Tolerance Structures", in First European Dependable Computing Conference (EDCC1), (Berlin, Germany), pp.pp. 97-114,1994.

[33] S.1. Clarke, A. C. Coombes and J. A. McDermid., "Methods for Developing Safe Software", in Proc. SafetyNet '90, (Royal Aeronautical Society, London), p.6: I - 6:8, 1990.

[34] P. J. Courtois (Ed.), Software Important to Safety in Nuclear Power Plants, Technical Reports Series N0367, 169p., International Atomic Energy Agency, Vienna, 1994.

[35] P. J. Courtois and D. L. Parnas, "Documentation for Safety Critical Software", in Proc. 15th Int. Con! on Software Eng. (ICSE 15), (Baltimore), 1993.

[36] M. Dacier, "A Petri Net Representation of the Take-Grant Model", in Proc. of the Computer Security Foundations Workshop VI, (Franconia, USA), pp.99-\08, IEEE Computer Society, 1993.

l37J M. Dacier and Y. Deswarte, "Privilege graph: an extension to the Typed Access Matrix model", in Proc. European Symposium on Research in Computer Security (ESORICS 94), (D. Gollmann, Ed.), (Brighton, UK), Lecture Notes in Computer Science (LNCS), 875, pp.319-34, Springer­Verlag, 1994.

576 poes Publications

[38] R. de Lemos, A. Saeed and T. Anderson, "Distributed Real-Time Systems: Value Inconsistencies due to time uncertainties", in Proc. of DCCS-10, (Semmering, Austria), 1991.

[39] R. de Lemos, A. Saeed and T. Anderson, "Analysis of Timeliness Requirements in Safety-Critical Systems", in Proc. Symp. on Formal Techniques for Real-Time and Fault-Tolerant Systems, (Nijmegen. Netherlands), 1992.

[40] R. de Lemos, A. Saeed and T. Anderson, "A Train Set as a Case Study for the Requirements Analysis of Safety-Critical Systems", The Computer Journal (Special Issue on Security and Safety), 34 (2), pp.30-40, February 1992.

[41] R. de Lemos, A. Saeed and A. Waterworth, "Exception Handling in Real­Time Software from Specification to Design", in Proc. Workshop on Responsive Computer Systems, (Saitama, Japan), pp.1 08-21, 1992.

[42] R. de Lemos, A. Saeed and A. Waterworth, "Exception Handling in Real­Time Software from Specification to Design", in Responsive Computer Systems (Dependable Computing and Fault-Tolerant Systems, Vol. 7) (H. Kopetz and Y. Kakuda, Eds.), Springer-Verlag, New York, 1993.

[43] Y. Deswarte, L. Blain and J.-C. Fabre, "Intrusion Tolerance in Distributed Computing Systems", in Proc. 1991 Symp. on Research in Security and Privacy, (Oakland, California), pp.llO-2I, IEEE Computer Society Press, 1991.

[44] F. Di Giandomenico and L. Strigini, "Adjudicators for Diverse Redundant Components", in Proc. 9th Int. Symp. Reliable Distributed Systems, (Huntsville, Alabama), pp.114-23, IEEE, 1990.

[45] F. Di Giandomenico and L. Strigini, "Implementations and Extensions of the Conversation Concept", in Proc. 5th GIIITGIGMA Int. Con! Fault-Tolerant Computing Systems. (Nurnberg, Germany), 1991.

[46] J. E. Dobson, "Conversation Structures as an Instrument of Security Policy", in Database Security: Status and Prospects III (D. L. Spooner and C. E. Landwehr, Eds.), pp.25-40, North-Holland, Amsterdam, 1990.

[47] J. E. Dobson, "A Methodology for Analysing Human and Computer-Related Issues in Secure Systems", in Compusec 90 (IFlP Int. Con! on Computer Security), (Helsinki), 1990.

[48] J. E. Dobson, "Elicitation and Representation of a Security Policy for a Telecommunications Application", in Eighth Int. Con! on Software Engineering for Telecommunications Systems and Services, (Florence, Italy), 1992.

[49] J. E. Dobson, J. C. Laprie and B. Randell, "Predictably Dependable Computing systems: An ESPRIT Basic Research Project", Bulletin of the EATCS (European Association for Theoretical Computing Science), 401990.

[50] J. E. Dobson, M. J. Martin, C. W. Olphert and S. E. Powrie, "Determining Requirements for Co-operative Working", in Con! on Collaborative Work,

PDCS Publications 577

Social Communications and Information Systems Theories (COS CIS '91), (Helsinki), 1991.

[51] 1. E. Dobson and 1. A. McDermid, "Security Models and Enterprise Models", in Database Security: Status and Prospects II (c. Landwehr, Ed.), Elsevier Science Publishers, Amsterdam, 1989.

[52] 1. C. Fabre, Y. Deswarte and B. Randell, "Designing Secure and Reliable Applications using Fragmentation-Redundancy-Scattering: An object-oriented approach", in Proc. of the First European Dependable Computing Conference (EDCC-l), (Berlin, Germany), Lecture Notes in Computer Science, 852, (K. Echtle, D. Hammer and D. Powell, Eds.), pp.23-38, Springer-Verlag, 1994.

[53] 1. C. Fabre, V. Nicomette, T. Perennou, R. 1. Stroud and Z. Wu, "Implementing Fault-Tolerant Applications using Reflective Object-Oriented Programming", in Proc. 25th Int. Symp. on Fault-Tolerant Computing (FTCS-25), (Pasadena, CA, USA), IEEE Computer Society Press, 1995.

[54] 1. C. Fabre and B. Randell, "An Object-Oriented View of Fragmented Data Processing for Fault and Intrusion Tolerance in Distributed Systems", in Proc. 2nd European Symp. on Research in Computer Security (ESORICS 92), (Y. Deswarte, G. Eizenberg and 1.-1. Quisquater, Eds.), (Toulouse, France), Lecture Notes on Computer Science, 648, pp.193-208, Berlin: Springer­Verlag, 1992.

[55] N. E. Fenton, "Measurement of Complex Systems", in Computer-Based Systems Engineering Workshop, (Israel), pp.16-21, IEEE Computer Soc. Press, 1990.

[56] N. E. Fenton, Software Metrics: A rigorous approach, Chapman and Hall, London, 1991.

[57] N. E. Fenton, "Software Measurement: Why a formal approach?", in Formal Aspects of Software Measurement (T. Denvir, H. R. and R. W. Whitty, Eds.), pp.3-27, Springer Verlag, 1992.

[58] N. E. Fenton, "When a Software Measure is not a Measure", Software Eng J., 7 (5), pp.357-62, 1992.

[59] N. E. Fenton, "How Effective are Software Engineering Methods?", Journal of Systems & Software, 20, pp.93-100, 1993.

[60] N. E. Fenton, "Software Measurement: A necessary scientific basis", IEEE Trans Software Eng, 20 (3), pp.l99-206, 1994.

[61] N. E. Fenton, Software Quality Assurance and Metrics: A worldwide perspective, Chapman and Hall, 1995.

[62] N. E. Fenton and B. A. Kitchenham, "Validating Software Measures", 1 Software Testing Verification and Reliability, 1 (2), pp.27-42, 1991.

[63] N. E. Fenton and B. Littlewood (Eds.), Software Reliability and Metrics, Elsevier, 1991.

[64] N. E. Fenton and N. E. Melton, "Deriving Structurally Based Software Measures", Journal of Systems Software, 12, pp.177-87, 1990.

578 poes Publications

[65] G. Fohler, "Realizing Changes of Operational Modes with Pre Run-Time Scheduled Hard Real-Time Systems.", in Proc. of the Second Int. Workshop on Responsive Computer Systems, (Saitama, Japan), 1992.

[66] D. Gollmann and P. Wichmann, "PC-Security Evaluation", in Proc. 5th European Conference on Information Systems Security, Control and Audit, (Copenhagen), 1990.

[67] A. G. Greenberg, B. D. Lubachevsky and I. Mitrani, "Unboundedly Parallel Simulations Via Recurrence Relations", in Proc. Sigmetrics, (Boulder), 1990.

[68] G. A. Greenberg and I. Mitrani, "Massively Parallel Algorithms for Network Partition Functions", in Proc. Int. Con! on Parallel Processing, (Chicago), 1991.

[69] G. Gruensteidl, H. Kantz and H. Kopetz, "Communication Reliability in Distributed Real-Time Systems", in Proc. 10th IFAC Workshop on Distributed Computer Control Systems, (Semmering, Austria), 1991.

[70] G. Griinsteidl, H. Kantz and H. Kopetz, "Communication Reliability in Distributed Real-Time Systems", in Proc. 10th IFAC Workshop on Distributed Computer Control Systems, (Semmering, Austria), pp.123-9, Pergamon Press, 1991.

[71] G. Griinsteidl and H. Kopetz, "A Reliable Multicast Protocol for Distributed Real-Time Systems", in Proc. 8th IEEE Workshop on Real-Time Operating Systems and Software, (Atlanta, GA, USA), pp.19-24, 1991.

[72] E. S. Hocking and J. A. McDermid, "Towards an Object-Oriented Development Environment for Secure Systems", in Proc. European Symp. on Research in Computer Security (ESORICS 90), (Toulouse, France), pp.191-200,1990.

[73] E. Jenn, J. ArIat, M. Rimen, J. Ohlsson and J. Karlsson, "Fault Injection into VHDL Models: The MEFISTO Tool", in Proc. 24th Int. Symp. on Fault­Tolerant Computing (FTCS-24), (Austin, TX, USA), pp.66-75, IEEE Computer Society Press, 1994.

[74] E. Jonsson, M. Andersson and S. Asmussen, "A Practical Dependability Measure for Degradable Computer Systems with Non-Exponential Degradation", in Proc. IFAC Symp. on Fault Detection, Supervision and Safety for Technical Processes (SAFEPROCESS'94), (Espoo, Finland), pp.227 -33, 1994.

[75] E. Jonsson and S. Asmussen, "A Practical Dependability Measure for Embedded Computer Systems", in Proc. IFAC 12th World Congress, Vol. 2, (Sydney, Australia), pp.647-52, 1993.

[76] E. Jonsson and T. Olovsson, "On the Integration of Security and Dependability in Computer Systems", in Proc. lASTED Int. Con! for Reliability, Quality Control and Risk Assessment, 1992.

[77] M. Kaaniche and K. Kanoun, "The Discrete-Time Hyperexponential Model for Software Reliability Growth Evaluation", in Proc. 3rd Int. Symp. on

poes Publications 579

Software Reliability Engineering (ISSRE'92), (Research-Triangle Park, USA), pp.64-75,1992.

[78] M. Kaaniche and K. Kanoun, "Qualitative and Quantitative Analysis of the Failure Data of Two Switching Systems", in Proc.J2th Int. Con! on Computer Safety, Reliability and Security (SAFECOMP'93), (J. Gorski, Ed.), (Poznan­Kiekrz, Poland), pp.230-9, London: Springer-Verlag, 1993.

[79] M. Kaaniche, K. Kanoun, M. Cukier and M. Bastos Martini, "Software Reliability Analysis of Three Successive Generations of a Switching System", in Proc. First European Conference on Dependable Computing (EDCC-l), (Berlin, Germany), Lecture Notes in Computer Science, 852, pp.473-90, Berlin: Springer-Verlag, 1994.

[80] K. Kanoun, "Data Collection for Software Reliability Databases", in Reliability, Maintainability and Safety (ICRMS'94), (Beijing, China), pp.3-9, 1994.

[81] K. Kanoun, M. Kaaniche, C. Beounes, J. C. Laprie and J. Arlat, "Reliability Growth of Fault-Tolerant Software", IEEE Transactions on Reliability, 42 (2), pp.205-19,1993.

[82] K. Kanoun, M. Kaaniche and J. C. Laprie, "Experience in Software Reliability: From data collection to quantitative evaluation", in Proc. 4th IEEE Int. Symp. on Software Reliability Engineering (ISSRE'93), (Denver, USA), 1993.

[83] K. Kanoun, M. Kaaniche, J. C. Laprie and S. Metge, "SoRel: A tool for reliability growth analysis and prediction from statistical failure data", in Proc. 23rd Int. Symp. Fault-Tolerant Computing (FTCS-23), (Toulouse, France), pp.654-9, IEEE Computer Society Press, 1993.

[84] K. Kanoun and J.-C. Laprie, "Software Reliability Trend Analyses: From theoretical to practical considerations", IEEE Transactions on Software Engineering, 20 (9), pp.740-7, 1994.

[85] K. Kanoun and J.-C. Laprie, "Trend Analysis", in Software Reliability Engineering Handbook (M. Lyu, Ed.), p.Ch. 10, Mc Graw Hill, 1995.

[86] K. Kanoun and J. C. Laprie, "The Role of Trend Analysis in Software Development and Validation", in Proc. IFAC Symp. on Safety of Computer Control Systems (SAFECOMP'9I), (Trondheim, Norway), pp.169-74, 1991.

[87] H. Kantz, "Flexible Handling of Diverse Dependability Requirements in MARS", in Proc. 10th Symp. on Reliable Distributed Systems, (Pisa, Italy), pp.142-51, IEEE Computer Society Press, 1991.

[88] H. Kantz, "Integrating Dependability Analysis into the Design of Distributed Computer Systems", in IEEE CompEuro 91, (Bologna, Italy), 1991.

[89] Kopetz, "A Communication Infrastracture for a Fault-Tolerant Real-Time System", Control Engineering Practice-- A Journal of IFAC 1995.

[90] H. Kopetz, "Fault Tolerance in Real-Time Systems", in Proc. IFAC World Congress, (Tallinn, USSR), pp.111-8, 1990.

580 PDeS Publications

[91] H. Kopetz, "Event-Triggered versus Time-Triggered Real-Time Systems", in Proc. Int. Workshop on Operating Systems for the 90s and Beyond (Lecture Notes on Computer Science, Volume 563) (A. Karshmer and J. Nehmer, Eds.), pp.87-101, Springer-Verlag, Berlin, Germany, 1991.

[92] H. Kopetz, "Real-Time Systems", in The Software Engineer's Reference Book (J. A. McDermid, Ed.), Butterworth Scientific, Ltd., Surrey, UK, 1991.

[93] H. Kopetz, "Six Difficult Problems in the Design of Responsive Systems", in Proc. of the Second Int. Workshop on Responsive Computer Systems, (Saitama, Japan), 1992.

[94] H. Kopetz, "Software Engineering in Real-Time Systems", in Shifting Paradigms in Software Engineering Klagenfurt, Austria, 1992.

[95] H. Kopetz, "Sparse Time versus Dense Time in Distributed Real-Time Systems", in Proc. 14th Int. Con! on Distributed Computing Systems, (Yokohama, Japan), pp.460-7, IEEE Press, 1992.

[96] H. Kopetz, "Should Responsive Systems be Event-Triggered or Time­Triggered?", IEICE Trans. on Information and Systems (Special Issue on Responsive Computer Systems) 1993.

[97] H. Kopetz, "The Systematic Design of Large Real-Time Systems or Interface Simplicity", in Proc. of Workshop Hardware and Software Architectures for Fault Tolerance: Perspectives and Towards a Synthesis, (P. Lee, Ed.), (Le Mont Saint-Michel, France), Springer Verlag, 1993.

[98] H. Kopetz, "An Analysis of the Communication Service in Responsive Systems", in Proc. IEEE Int. Workshop on Object-Oriented Real-Time Dependable Systems, (Dana Point, Cal.), pp.pp. 50-5, IEEE Press, 1994.

[99] H. Kopetz, "The Design of Fault-Tolerant Real-Time Systems", in Proc. Euromicro 1994, (Liverpool), pp.4-11, IEEE Press, 1994.

[100] H. Kopetz, "Fault-Management in the Time-Triggered Protocol", in Proc. SAE World Congress. pp.77-84, SAE Press, 1994.

[101] H. Kopetz, "A Solution to an Automotive Control System System Benchmark", in Proc. 15th IEEE Real-Time Systems Symp., (Puerto Rico), IEEE Press, 1994.

[102] H. Kopetz, "TTP/A - A Time-Triggered Protocol of Body Electronics Using Standard UARTS", in Proc. SAE World Congress, 1995.

[103] H. Kopetz, G. Fohler, G. Grlinsteidl, H. Kantz, G. Pospischil, P. Puschner, J. Reisinger, R. Schlatterbeck, W. Schlitz, A. Vrchoticky and R. Zainlinger, "The Programmer's View of MARS", in Proc.13th Real-Time Systems Symp .. (Phoenix, Arizona), pp.223-6, 1992.

[104] H. Kopetz, G. Fohler, G. Grlinsteidl, H. Kantz, G. Pospischil, P. Puschner, J. Reisinger, R. Schlatterbeck, W. Schlitz, A. Vrchoticky and R. Zainlinger, "Real-Time System Development: The programming model of MARS", in Proc. Int. Symp. on Autonomous Decentralized Systems, (Kawasaki, Japan), pp.290-9, 1993.

poes Publications 581

[105] H. Kopetz and G. Grunsteidl, "A Reliable Multicast Protocol for Distributed Real-Time Systems", in Proc. 8th IEEE Workshop on Real-Time Operating Systems and Software, (Atlanta, GA, USA), Pergamon Press, 1991.

[106] H. Kopetz and G. Grunsteidl, "TTP-A Time-Triggered Protocol for Automotive Applications", IEEE Computer, 24 (I), pp.22-66, 1994.

[107] H. Kopetz, H. Kantz, G. Grunsteidl, P. Puschner and 1. Reisinger, "Tolerating Transient Faults in MARS", in Proc. 20th Int. Symp. on Fault-Tolerant Computing (FTCS-20), (Newcastle upon Tyne, UK), pp.466-73, 1990.

[108] H. Kopetz and K. Kim, "Temporal Uncertainties in Interactions among Real­Time Objects", in Proc. 9th Symp. on Reliable Distributed Systems, (Huntsville, AL, USA), pp.165-74, IEEE Computer Society Press, 1990.

[109] H. Kopetz and 1. Reisinger, 'The Non-Blocking Write Protocol NBW: A Solution to a Real-Time Synchronisation Problem", in Proc. 14th Real-Time Systems Symp., (Raleigh-Durham, North Carolina), 1993.

1I10] H. Kopetz and W. Schwabl, "Global Time in Distributed Real-Time Systems", in Advances on Real-Time Computer Systems lAI Press Inc., Greenwich, Conn., USA, 1991.

[Ill] H. Kopetz, R. Zainlinger, G. Fohler, H. Kantz, P. Puschner and W. Schutz, 'The Design of Real-Time Systems: From specification to implementation and verification", lEE Software Engineering Journal, 5 (3) 1991.

[112] H. Kopetz, R. Zainlinger, G. Fohler, H. Kantz, P. Puschner and W. Schutz, "An Engineering Approach to Hard Real-Time System Design", in Proc.3rd European Software Engineering Conf, (Milano, Italy), 1991.

[113] 1.-C. Laprie, "Hardware-and-Software Dependability Evaluation", in Proc. IFfP 11th World Computer Congress, (San Francisco, CA), pp.109-14, 1989.

[114] 1.-C. Laprie, 1. Arlat, C. Beounes and K. Kanoun, "Architectural Issues in Software Fault Tolerance", in Software Fault Tolerance (M. Lyu, Ed.), p.Ch. 3,1. Willey & Sons, Ltd, 1995.

[115] 1.-C. Laprie and K. Kanoun, "Software Reliability and System Reliability", in Software Reliability Engineering Handbook (M. Lyu, Ed.), p.Ch. 2, Mc Graw Hill, 1995.

[116] 1. C. Laprie (Ed.), Dependability: Basic concepts and associated terminology, Dependable Computing and Fault -Tolerant Systems, Springer-Verlag, 1991.

[117] 1. C. Laprie (Ed.), Dependability: Basic concepts and terminology - in English, French, German, German and Japanese, Dependable Computing and Fault Tolerance, 5, 265p., Springer-Verlag, Vienna, Austria, 1992.

[118] 1. C. Laprie, "For a Product-in-a-Process Approach to Software Reliability Evaluation (Invited paper)", in Proc. 3rd Int. Symp. on Software Reliability Engineering ( ISSRE'92), (Research-Triangle Park, USA), pp.134-9, 1992.

[119] 1. C. Laprie, "Dependability: From concepts to limits (Invited paper)", in Proc. J 2th Int. Canl on Computer Safety, Reliability and Security

582 poes Publications

(SAFECOMP'93), (J. Gorski, Ed.), (Poznan-Kiekrz, Poland), pp.157-68, Berlin: Springer-Verlag, 1993.

[120] J. C. Laprie, J. Arlat, C. Beounes and K. Kanoun, "Definition and Analysis of Hardware-and-Software Fault-Tolerant Architectures", IEEE Computer (Special Issue on Fault Tolerant Systems), 23 (7), pp.39-51, July 1990.

[121] J. C. Laprie, J. Arlat, C. Beounes and K. Kanoun, "Hardware- and Software­Fault Tolerance", in Proc. ESPRIT'90, (Brussels, Belgium), pp.786-9, Kluwer Academic Press, Dordrecht, The Netherlands, 1990.

[122] J. C. Laprie and K. Kanoun, "X-ware Reliability and Availability Modelling", IEEE Trans. on Soft. Eng., 18 (2), pp.130-47, 1992.

[123] J. C. Laprie, K. Kanoun, C. Beounes and M. Kaaniche, "The Transformation Approach to the Modelling and Evaluation of Reliability and Availability Growth", in Proc. 20th Int. Symp. on Fault-Tolerant Computing (FTCS-20), (Newcastle upon Tyne), pp.364-71, IEEE Computer Society Press, 1990.

[124] J. C. Laprie, K. Kanoun, C. Beounes and M. Kaaniche, "The KAT -Knowledge-Action-Transformation - Approach to the Modeling and Evaluation of Reliability and Availability Growth", IEEE Transactions on Software Engineering, 12 (4), pp.370-82, 1991.

[125] J. C. Laprie and B. Littlewood, "Quantitative Assessment of Safety-Critical Software: Why and how?", Communications of ACM, 35 (2), pp.13-21, 1992.

[126] P. Liden, P. Dahlgren and J. Torin, "Transistor Fault Coverage for Self­Testing CMOS Checkers", in Proc. Int. Test Conj. 92 (ITC92), 1992.

[127] B. Littlewood, Computer Safety (Edition of Antenna, Channel 2, 24th October, 1990), BBC Television, 1990.

[128] B. Littlewood, "Modelling Growth in Software Reliability", in Software Reliability Handbook (P. Rook, Ed.), Elsevier, 1990.

[129] B. Littlewood, "Limits to Evaluation of Software Dependability", in Software Reliability and Metrics (B. Littlewood and N. Fenton, Eds.), Elsevier, 1991.

[130] B. Littlewood, "Reliability", in Software Metrics: A Rigorous Approach (Chap. 11) (N. E. Fenton, Ed.), pp.230-49, Chapman and Hall, London, 1991.

[131] B. Littlewood, "Software Reliability Modelling", in Software Engineer's Handbook (1. McDermid, Ed.), Butterworth Scientific, 1991.

[132] B. Littlewood, "Software Reliability Modelling: Achievements and limitations", in Proc. IEEE CompEuro 91, (Bologna), pp.336-44, IEEE Computer Society, 1991.

[133] B. Littlewood, "Software Reliability Modelling: Achievements and limitations (Invited paper)", in Proc IEEE CompEuro 91, (Bologna, Italy), pp.336-44, IEEE Computer Soc. Press, 1991.

[134] B. Littlewood, "Validation of Ultra-High Dependability for Software-Based Systems", in Software Reliability and Metrics Elsevier, 1991.

PDes Publications 583

[135] B. Littlewood, "Why We Should Learn not to Depend too Much on Software", in Trans. IFfP Congress 94, 13th World Computer Congress, (Hamburg), pp.254-61, North Holland, 1994.

[136] B. Littlewood, S. Brocklehurst, N. E. Fenton, P. Mellor, S. Page, D. Wright, J. E. Dobson, J. A. McDermid and D. Gollmann, "Towards Operational Measures of Computer Security", Journal of Computer Security, 2 (3), pp.211-29,1993.

[137] B. Littlewood and R. Miller (Eds.), Software Reliability and Safety, Elsevier, 1991.

[138] B. Littlewood and L. Strigini, "The Risks of Software", Scientific American, 267 (5), pp.38-43, November 1992.

[139] B. Littlewood and L. Strigini, "Validation of Ultra-High Dependability for Software-Based Systems", Communications of the A CM, 36 (11), pp.69-80, November 1993.

[140] B. Littlewood and M. Thomas, "Reasons why Safety-Critical Avionics Software Cannot be Adequately Validated", in Proc. Safety and Reliability Society Spring Cont, "Air Transport Safety", (Manchester), pp.77-87, SaRS, 1991.

[141] B. Littlewood and D. Wright, "On a Stopping Rule for the Operational Testing of Safety Critical Software", in Proc. 25th Inter. Symp. Fault -Tolerant Computing (FTCS-25), (Pasadena), IEEE Computer Society Press, 1995.

[142] M. Lu, S. Brocklehurst and B. Littlewood, "Combination of Predictions Obtained from Different Software Reliability Growth Models", in Proc 10th Annual Software Reliability Symp., (Denver, Colorado), 1992.

[143] B. Marre, P. Thevenod-Fosse, H. Waeselynck, P. L. Gall and Y. Crouzet, "An Experimental Evaluation of Formal and Statistical Testing", in Proc. IFAC Symposium on Safety of Computer Control Systems (SAFECOMP'92), (Zurich, Switzerland), pp.311-6, 1992.

[144] J. A. McDermid, "Integrated Project Support Environments: General principles and issues in the development of dependable systems", in Software Engineering for Large Software Systems (CSR Cont), (B. A. Kitchenham, Ed.), pp.27-83, Elsevier, 1990.

[145] J. A. McDermid, "Safety Arguments, Software and System Reliability", in Proc. 2nd Int. Symp. on Software Reliability Engineering, (Austin, Texas), IEEE, 1991.

[146] J. A. McDermid and E. S. Hocking, "Security Policies for Integrated Project Support", in Security III: Status and Prospects (Proc. IFfP Con! on Database Security), (D. L. Spooner and C. Landwehr, Eds.), pp. 41-74, North Holland, 1990.

[147] J. A. McDermid and E. S. Hocking, "Towards and Object-Oriented Development Environment for Secure Applications", in Proc. European Symp. on Research in Computer Security (ESORICS 90), (Toulouse), pp.191-200, 1991.

584 PDCS Publications

[148] P. Mellor, "Software Reliability Modelling", in Proc. COMPSEC Inti., (London), pp.30l-24, Elsevier Advanced Technology, 1990.

[149] P. Mellor, "Failures, Faults and Changes in Dependability Measurement", Information and Software Technology, 34 (10), pp.640-S4, 1992.

[ISO] P. Mellor, "CAD: Computer-Aided Disaster", High Integrity Systems Journal, 1(2), pp.lOI-S6, 1994.

[lSI] D. Mitra and I. Mitrani, "Analysis of a Kanban Discipline for Cell Coordination in Production Lines", Management Science, 36 (12), pp.IS48-66, 1990.

[IS2] D. Mitra and I. Mitrani, "Asymptotic Optimality of the Go-Back-n Protocol in High Speed Data Networks with Small Buffers", in Proc. 4th Int. Con! on Data Communication Systems and Their Performance, (Barcelona), 1990.

[IS3] I. Mitrani, "Queueing Theory", in The Software Engineer's Reference Book (J. A. McDermid, Ed.), Butterworth Scientific Ltd, 1991.

[IS4] I. Mitrani and R. Chakka, "Spectral Expansion Solution for a Class of Markov Models: Application and comparison with the Matrix-Geometric Method", Performance Evaluation, 23 1995.

[ISS] I. Mitrani and D. Mitra, "A Spectral Expansion Method for Random Walks on Semi-Infinite Strips", in Proc. IMACS Int. Symp. on Iterative Methods in Linear Algebra, (Brussels), 1991.

[IS6] J. Ohlsson and M. Rimen, "Implicit Signature Checking", in Proc. 25th Int. Symp. Fault-Tolerant Computing (FTCS-25), (Los Angeles, CA), IEEE Computer Society Press, 1995.

[IS7] J. Ohlsson, M. Rimen and U. Gunneflo, "A Study of the Effects of Transient Fault Injection into a 32-bit RISC with Built-in Watchdog", in Proc. 22th Int. Symp. Fault-Tolerant Computing (FTCS-22), (Boston, MA, USA), pp.316-2S, IEEE Computer Society Press, 1992.

[IS8] T. Olovsson and E. Jonsson, "Security Forms for Protection against Vulnerabilities in Computer Systems", in Proc. lASTED Int. Con! for Reliability, Quality Control and Risk Assessment, 1992.

[IS9] G. Pospischil, P. Puschner, A. Vrchoticky and R. Zainlinger, "Developing Real-Time Tasks with Predictable Timing", IEEE Software, 9 (S), pp.3S-44, 1992.

[160] D. Powell, "Failure Mode Assumptions and Assumption Coverage", in Proc. 22nd Int. Symp. on Fault-Tolerant Computing (FTCS-22), (Boston, MA, USA), pp.386-9S, IEEE Computer Society Press, 1992.

[161] D. Powell, E. Martins, J. Arlat and Y. Crouzet, "Estimators for Fault Tolerance Coverage Evaluation", in Proc. 23rd Int. Symp. Fault-Tolerant Computing (FTCS-23), (Toulouse, France), pp.228-37, IEEE Computer Society Press, 1993.

POCS Publications 585

[162] D. Powell, E. Martins, J. Arlat and Y. Crouzet, "Estimators for Fault Tolerance Coverage Evaluation", IEEE Transactions on Computers, 44 (2), pp.261-74, February 1995.

[163] G. Pucci, "On the Modelling and Testing of Recovery Block Structures", in Proc. 20th IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-20), (Newcastle upon Tyne), pp.353-63, 1990.

[164] P. Puschner and A. Vrchoticky, "An Assessment of Task Execution Time Analysis", in Proc. 10th IFAC Workshop on Distributed Computer Control Systems, (Semmering, Austria), pp.41-5, Pergamon Press, 1991.

[165] P. Puschner and R. Zainlinger, "Developing Software with Predictable Timing Behavior", in Proc. 7th IEEE Workshop on Real-Time Operating Systems and Software, (Charlottesville, VA, USA), pp.70-6, 1990.

[166] Qi Shi and J. A. McDermid, "A Formal Model of Security Dependency for Analysis and Testing of Secure Systems", in Proc. Computer Security Foundations Workshop IV, (Franconia, NH), IEEE Computer Society Press, 1991.

[167] Qi Shi and J. A. McDermid, "A Formal Approach for Security Evaluation", in Proc. Seventh Annual Conference on Computer Assurance, IEEE and BCS, 1992.

[168] Qi Shi and J. A. McDermid, "Secure Composition of Systems", in Proc. Eighth Annual Computer Security Applications Coni, IEEE Computer Society Press, 1992.

[169] Qi Shi and J. A. McDermid, "Achieving System Security by Testing", in Proc. Test Technology Transfer Symp., International Test and Evaluation Association (ITEA), 1993.

[170] Qi Shi and J. A. McDermid, "Applying Noninterference to Composition of Systems: A more practical approach", in Proc. 9th Annual Computer Security Applications Coni, IEEE Computer Society Press, 1993.

[171] Qi Shi and J. A. McDermid, "Constructing Secure Distributed Systems Using Components", in Proc. 12th Symp. on Reliable Distributed Systems, IEEE Computer Society Press, 1993.

[172] Qi Shi and J. A. McDermid, "Designing Secure Systems of Good Quality", in Proc. 3rd Int. Coni. on Software Quality, American Society for Quality Control, 1993.

[173] Qi Shi and J. A. McDermid, "Developing Secure Systems in A Modular Way", in Proc. Eighth Annual Coni on Computer Assurance, IEEE and BCS, 1993.

[174] Qi Shi and J. A. McDermid, "Testing and Evaluating System Security", in Proc. Test Technology Transfer Symp., International Test and Evaluation Association (ITEA), 1993.

[175] B. Randell and J. C. Fabre, "Fault and Intrusion Tolerance in Object-Oriented Systems", in Proc. Int. Workshop on Object-Orientation in Operating

586 PDCS Publications

Systems, (Palo Alto, CA), pp. 1 80-4, IEEE Technical Committee on Operating Systems and Application Environments (TCOS), 1991.

[176] B. Randell and J. C. Laprie, "Predictably Dependable Computing Systems: Second year report", Bulletin of the EATCS (European Association for Theoretical Computing Science), 44, pp.61-86, 1991.

[177] B. Randell and J. Xu, "The Evolution of the Recovery Block Concept", in Software Fault Tolerance (M. Lyu, Ed.), Trends in Software, pp.I-22, J. Wiley, 1994.

[178] J. Reisinger, "Time Driven Operating Systems: A case study on the MARS Kernel", in Proc. 5th ACM SIGOPS European Workshop, (Le Mont Saint­Michel, France), IRISAIINRIA-Rennes, 1992.

[179] J. Reisinger and A. Steininger, "The Design of a Fail-Silent Processing Node for MARS", Distributed Systems Engineering Journal 1994.

[180] M. Rimen and 1. Ohlsson, "A Study of the Error Behavior of a 32-bit RISC Subjected to Simulated Transient Fault Injection", in Proc. Int. Test Con! 92 (ITC92), 1992.

[181] M. Rimen, J. Ohlsson and J. Torin, "On Microprocessor Error Behavior Modeling", in Proc. 24th Int. Symp. Fault-Tolerant Computing (FTCS-24), IEEE Computer Society Press, 1994.

[182] c. M. F. Rubira-Calsavara and R. J. Stroud, "Forward and Backward Error Recovery in C++", Object-Oriented Systems, 1 (I), pp.61-85, 1994.

[183] A. Saeed, T. Anderson and M. Koutny, "A Formal Model for Safety-Critical Computing Systems", in Proc. !FAC Workshop SAFECOMP' 90, (London), pp.I-6, 1990.

[184] A. Saeed, R. d. Lemos and T. Anderson, 'The Role of Formal Methods in the Requirements Analysis of Safety-Critical Systems: A train set example", in Proc. 21st. IEEE Int. Symp. on Fault-Tolerant Computing (FTCS-21), (Montreal), 1991.

[185] W. Schlitz, "Real-Time Simulation in the Distributed Real-Time System MARS", in Proc. 1990 European Simulation Multiconference, (Nuremberg, Germany), pp.51-7, The Society for Computer Simulation International, 1990.

[186] W. Schlitz, "A Test Strategy for the Distributed Real-Time System MARS", in Proc. IEEE CompEuro 90 (Computer Systems and Software Engineering), (Tel Aviv), pp.20-7, 1990.

[187] W. Schlitz, "On the Testability of Distributed Real-Time Systems", in Proc. 10th Symp. on Reliable Distributed Systems, (Pis a, Italy), pp.52-61, 1991.

[188] W. Schlitz, The Testability of Distributed Real-Time Systems, 160p., Kluwer Academic Publishers, Boston, MA, 1993.

[189] P. Semal, "Two Bounding Schemes for the Steady-State Solution of Markov Chains", in Computation with Markov Chains (W. J. Stewart, Ed.), Kluwer, 1995.

PDes Publications 587

[190] S. K. Shrivastava, L. V. Mancini and B. Randell, "The Duality of Fault­Tolerant System Structures", Software Practice and Experience, 23 (7), pp.773-98, 1993.

[191] A. Steininger and J. Reisinger, "Integral Design of Hardware and Operating System for a DCCS", in Proc. 10th IFAC Workshop on Distributed Computer Control Systems, (Semmering, Austria), Pergamon Press, 1991.

[192] L. Strigini, "Considerations on Current Research Issues in Software Safety", Reliability Engineering and System Safety, 43 (2), pp.I77-88, 1994.

[193] L. Strigini, A. Bondavalli and L. Simoncini, "Data-Flow like Languages for Designing Dependable Real-Time Control Systems", in Proc. 10th IFAC Workshop on Distributed Computer Control Systems, (Semmering, Austria), 1991.

[194] L. Strigini and F. Di Giandomenico, "Flexible Schemes for Application-Level Fault Tolerance", in Proc. 10th Symp. on Reliable Distributed Systems, (Pis a, Italy), pp.86-95, IEEE Computer Society Press, 1991.

[195] P. Thevenod-Fosse, "On the Efficiency of Statistical Testing with respect to Software Structural Test Criteria", in Proc. IFIP Working Conference on Approving Software Products, (Garmisch-Partenkirchen, FRG), pp.29-42, North Holland, 1990.

[196] P. Thevenod-Fosse, "From Random Testing of Hardware to Statistical Testing of Software", in Proc. COMP-EURO'91, (Bologna, Italy), pp.200-7, 1991.

[197] P. Thevenod-Fosse, c. Mazuet and Y. Crouzet, "On Statistical Testing of Synchronous Data Flow Programs", in Proc. 1st European Dependable Computing Conference (EDCC-I), (Berlin, Germany), pp.250-67, 1994.

[198] P. Thevenod-Fosse and H. Waeselynck, "An Investigation of Statistical Software Testing", Journal of Software Testing, Verification and Reliability, I (2), pp.5-25, July-September 1991.

[199] P. Thevenod-Fosse and H. Waeselynck, "On Functional Statistical Testing Designed from Software Behavior Models", in Dependable Computing for Critical Applications 3 (DCCA-3) (C. E. Landwehr, B. Randell and L. Simoncini, Eds.), Dependable Computing and Fault-Tolerant Systems, 8, (A. Avizienis,. H. Kopetz and J. C. Laprie, Eds.), pp.3-28, Springer-Verlag, Vienna, 1993.

[200] P. Thevenod-Fosse and H. Waeselynck, "Statemate Applied to Statistical Software Testing", in Proc. 1993 ACM Int. Symposium on Software Testing and Analysis (ISSTA), (Cambridge, USA), pp.99-109, 1993.

[201] P. Thevenod-Fosse, H. Waeselynck and Y. Crouzet, "An Experimental Study on Software Structural Testing: Deterministic versus random input generation", in Proc. 21st IEEE Int. Symposium on Fault-Tolerant Computing (FTCS-2 I), (Montreal), pp.4l0-7, 1991.

[202] H. Waese\ynck and P. Thevenod-Fosse, "An Experimentation with Statistical Testing", in Proc. 2nd European Int. Conference on Software Testing, Analysis & Review (EuroSTAR'94), (Bruxelles, Belgium), 1994.

588 PDes Publications

[203] 1. Xu, "The t/(n-l)-Diagnosability and its Applications to Fault Tolerance", in Proc. 21st Int. Symp. on Fault-Tolerant Computing (FTCS-2J), (Montreal), pp.496-503, IEEE Computer Society Press, 1991.

[204] 1. Xu and S. Huang, "Sequentially t-Diagnosable Systems: A characterization and its applications", IEEE Trans. Computers, C-44 (2) 1995.

[205] 1. Xu, B. Randell, A. Romanovsky, C. M. F. Rubira, R. 1. Stroud and Z. Wu, "Fault Tolerance in Concurrent Object-Oriented Software through Coordinated Error Recovery", in Proc. 25th Int. Symp. Fault-Tolerant Computing (FTCS-25), (Los Angeles), IEEE Computer Society Press, 1995.

[206] 1. Xu, B. Randell, C. M. F. Rubira and R. 1. Stroud, "Toward an Object­Oriented Approach to Software Fault Tolerance", in Fault-Tolerant Parallel and Distributed Systems (D. R. Avresky, Ed.), IEEE Computer Society Press, 1994.

[207] R. Zainlinger, "Building Interfaces for CASE Environments: An object­oriented interaction model and its application", in Proc. IFlP Int. Conj on Human Factors in Information Systems Analysis and Design, (Scharding, Austria), pp.65-80, 1990.

[208] R. Zainlinger and G. Pospischil, "DIAMOND: An object-oriented graphics library for software development environments", in Proc. Autumn 1990 EUUG Conj, (Nice, France), pp.157-66, 1990.

ESPRIT Basic Research Series

J. W. Lloyd (Ed.): Computational Logic. Symposium Proceedings, Brussels, November 1990. XI, 211 pages. 1990

E. Klein, F. Veltman (Eds.): Natural Language and Speech. Symposium Proceedings, Brussels, November 1991. VIII, 192 pages. 1991

G. Gambosi, M. Scholl, H.-W. Six (Eds.): Geographic Database Manage­ment System. Workshop Proceedings, Capri, May 1991. XII, 320 pages. 1992

R. Kassing (Ed.): Scanning Microscopy. Symposium Proceedings, Wetzlar, October 1990. X, 207 pages. 1992

G. A. Orban, H.-H. Nagel (Eds.): Artificial and Biological Vision Systems. XII, 389 pages. 1992

S. D. Smith, R. F. Neale (Eds.): Optical Information Technology. State-of­the-Art Report. XIV, 369 pages. 1993

Ph. Lalanne, P. Chavel (Eds.): Perspectives for Parallel Optical Interconnects. XIV, 417 pages. 1993

D. Vernon (Ed.): Computer Vision: Craft, Engineering, and Science. Workshop Proceedings, Killarney, September 1991. XIII, 96 pages. 1994

E. Montseny, J. Frau (Eds.): Computer Vision: Specialized Processors for Real-Time Image Analysis. Workshop Proceedings, Barcelona, September 1991. X, 216 pages. 1994

J. L. Crowley, H. I. Christensen (Eds.): Vision as Process. Basic Research on Computer Vision Systems. VIII, 432 pages. 1995

B. Randell, J.-C. Laprie, H. Kopetz, B. Littlewood (Eds.): Predictably Dependable Computing Systems. XIX, 588 pages. 1995