[1]	Driscoll, K.; Hall, B.; Paulitsch, M.; Zumsteg, P.; and Sivencrona, H.: The Real Byzantine Generals.Proceedings of the Digital Avionics Systems Conference , 2004, pp. 61-71.
[2]	Bergin, C.: Faulty MDM removed. May 18 2008. URL http://www.nasaspaceflight.com/2008/05/sts-124-frr-debate-outstanding-issues-faulty-mdm-removed.
[3]	Bergin, C.: STS-126: Super smooth endeavor easing through the countdown. NASA Spaceflight.com, November 13 2008. URL http://www.nasaspaceflight.com/2008/11/sts-126-endeavour-easing-through-countdown.
[4]	Kopetz, H.; and Grünsteidl, G.: TTP-A time triggered protocol for automotive applications, Inst. für Technische Informatik, Technische Universit, 1992.
[5]	Gruenbacher, H.: Fault Injection for TTA. Deliverable 5.1-5.5 Combined Report IST 1999 10748, Carinthia Tech Institute, 2002. URL http://www3.cti.ac.at/fit/.
[6]	Sivencrona, H.; Johannessen, P.; Persson, M.; and Torin, J.: Heavy-ion Fault Injection in the Time-triggered Communication Protocol. Proc. 1st Latin American Symposium on Dependable Computing LNCS 2847 , 2003, pp. pp. 69-80.
[7]	Pfeifer, H.; Schwier, D.; and von Henke, F. W.: Formal Verification for Time Triggered Clock Synchronization. Proc. 7th IFIP International Working Conference on Dependable Computing for Critical Applications , 1999.
[8]	Ademaj, A.: Slightly-Off-Specification Failures in the Time Triggered Architecture. 7th IEEE Int. Workshop on High Level Design Validation and Test , 2002.
[9]	Osder, S.: Chronological overview of past avionic flight control system reliability in military and commercial operations. AGARD-AG-224 , P. R. Kurzhals, ed., NATO Research and Technology Organisation, vol. 224, Jan 1977, pp. 2-1-2-17. Available from NTIS HC A16/MF A01.
[10]	Osder, S.: Generic Faults and Architecture Deisgn Considerations in Flight Critical Systems. AIAA Journal Of Guidance, vol. 6, no. 2, March-April 1983, pp. 65-71.