Driscoll, K.; Hall, B.; Paulitsch, M.; Zumsteg, P.; and Sivencrona, H.: The
Real Byzantine Generals.Proceedings of the Digital Avionics Systems
, 2004, pp. 61-71.

Bergin, C.: Faulty MDM removed. May 18 2008.

Bergin, C.: STS-126: Super smooth endeavor easing through the countdown. NASA, November 13 2008.

Kopetz, H.; and Grünsteidl, G.: TTP-A time triggered protocol for
automotive applications, Inst. für Technische Informatik, Technische
Universit, 1992.

Gruenbacher, H.: Fault Injection for TTA. Deliverable 5.1-5.5 Combined Report
IST 1999 10748, Carinthia Tech Institute, 2002.

Sivencrona, H.; Johannessen, P.; Persson, M.; and Torin, J.: Heavy-ion Fault
Injection in the Time-triggered Communication Protocol. Proc. 1st Latin
American Symposium on Dependable Computing LNCS 2847
, 2003, pp. pp.

Pfeifer, H.; Schwier, D.; and von Henke, F. W.: Formal Verification for Time
Triggered Clock Synchronization. Proc. 7th IFIP International Working
Conference on Dependable Computing for Critical Applications
, 1999.

Ademaj, A.: Slightly-Off-Specification Failures in the Time Triggered
Architecture. 7th IEEE Int. Workshop on High Level Design Validation and
, 2002.

Osder, S.: Chronological overview of past avionic flight control system
reliability in military and commercial operations. AGARD-AG-224 ,
P. R. Kurzhals, ed., NATO Research and Technology Organisation, vol. 224, Jan
1977, pp. 2-1-2-17. Available from NTIS HC A16/MF A01.

Osder, S.: Generic Faults and Architecture Deisgn Considerations in Flight
Critical Systems. AIAA Journal Of Guidance, vol. 6, no. 2,
March-April 1983, pp. 65-71.

+Revision History