[5] GARRO A,GROB J,RICHTER M R,et al.Reliability analy-sis of an Attitude Determination and Control System (ADCS) through the RAMSAS method[J].Journal of Computational Science,2014,5(3): 439-449.
[6] TU X J,XU J R,WU Q,et al.Modeling and reliability evaluation of avionics clouds based on AADL and GSPN[C]//Digital Avionics Systems Conference(DASC), 2013 IEEE/AIAA 32nd.New York: IEEE,2013: 8C1-1- 8C1-11.
[7] REISIG W.Understanding Petri nets: modeling techniques, analysis methods,case studies hardcover[M].Berlin: Springer,2013.
[8] LARS G,HAN J.A comparative study into architecture-based safety evaluation methodologies using AADL′s error annex and failure propagation models[C]//High Assurance Systems Engineering Symposium,New York: IEEE, 2008: 283-292.
[10] RUGINA A E,KANOUN K,KA-NICHE M.A system dependability modeling framework using AADL and GSPNs[C]//LNCS 4615: Architecture Dependable System IV.Berlin,Heidelberg: Springer-Verlag,2007: 14-38.
[13] DINGLE N,KNOTTLT W J,SUTO T.PIPE2: a tool for the performance evaluation of generalised stochastic Petri nets[J].ACM Sigmetrics Performance Evaluation Review, 2009,36(4): 34-39.
[14] ZIMMERMANN A.Modeling and evaluation of stochastic Petri nets with TimeNET 4.1[C]//The 6th International Conference on Performance Evaluation Methodologies and Tools (VALUETOOLS), New York: IEEE,2012: 54-63.
[15] KOPETZ H.Fault containment and error detection in the time-triggered architecture[C]//The 6th International Symposium on Autonomous Decentralized Systems,New York: IEEE,2003: 139-146.