Algirdas Avzienis and Yutao HeJ.-C. Fabre and F. Salles and M. Rodriguez Moreno and J. ArlatDouglas W. Caldwell and David A. RennelsChristof Fetzer and Flaviu CristianS. Bensalem and P. Caspi and C. Parent-Vigouroux and C. DumasLaurent Andriantsiferana and Brahim Ghribi and Luigi LogrippoA. Fantechi and S. Gnesi and L. SeminiChetan Sabnis and Michel Cukier and Jennifer Ren and Paul Rubel and William H. Sanders and David E. Bakken and David KarrShivakant Mishra and Sudha M. KunturHermann Kopetz and Dietmar MillingerHolger pfeifer and Detlef Schwier and Friedrich W. von HenkeD. Essame and J. Arlat and D. PowellR.J. Martinez and P.J. Gil and G. Martin and C. Perez and J.J. SerranoBen L. Di VitoMatthew M. Wilding and David S. Hardin and David A. GreveBruno Dutertre and Victoria StavridouI. Mura and A. Bondavalli and X. Zang and K.S. TrivediDivya Prasad and John McDermidA. Burns and S. Punnekkat and L. Strigini and D.R. WrightLorenzo Alvisi and Dahlia Malkhi and Evelyn Pierce and Michael ReiterYves Deswarte

Foreword	p. xi
Organizers	p. xii
Assessment of COTS Components
Microprocessor Entomology: A Taxonomy of Design Faults in COTS Microprocessors	p. 3
Assessment of COTS Microkernels by Fault Injection	p. 25
Coping with COTS
Minimalist Recovery Techniques for Single Event Effects in Spaceborne Microcontrollers	p. 47
Building Fault-Tolerant Hardware Clocks from COTS Components	p. 67
Formal Methods
A Methodology for Proving Control Systems with Lustre and PVS	p. 89
Prototyping and Formal Requirement Validation of GPRS: A Mobile Data Packet Radio Service for GSM	p. 109
Formal Description and Validation for an Integrity Policy Supporting Multiple Levels of Criticality	p. 129
Distributed Systems
Proteus: A Flexible Infrastructure to Implement Adaptive Fault Tolerance in AQuA	p. 149
Improving Performance of Atomic Broadcast Protocols using the Newsmonger Technique	p. 169
Time-Triggered Architecture
The Transparent Implementation of Fault Tolerance in the Time-Triggered Architecture	p. 191
Formal Verification for Time-Triggered Clock Synchronization	p. 207
Fault Tolerance and Safety
PADRE: A Protocol for Asymmetric Duplex REdundancy	p. 229
Experimental Validation of High-Speed Fault-Tolerant Systems using Physical Fault Injection	p. 249
Models of Partitioning for Integrated Modular Avionics
A Model of Cooperative Noninterference for Integrated Modular Avionics	p. 269
Invariant Performance: A Statement of Task Isolation Useful for Embedded Application Integration	p. 287
A Model of Noninterference for Integrating Mixed-Criticality Software Components	p. 301
Dependability Evaluation
Dependability Modeling and Evaluation of Phased Mission Systems: A DSPN Approach	p. 319
Dependability Evaluation using a Multi-Criteria Decision Analysis Procedure	p. 339
Probabilistic Guarantees
Probabilistic Scheduling Guarantees for Fault-Tolerant Real-Time Systems	p. 361
Fault Detection for Byzantine Quorum Systems	p. 379
Panel: Certification and Assessment of Critical Systems
Dependable Computing System Evaluation Criteria: SQUALE Proposal	p. 397