{"id":"https://openalex.org/W7124465262","doi":"https://doi.org/10.1109/tse.2026.3654819","title":"Safety Analysis of Over-the-Air Updates for CPS: A Contract-Driven Approach","display_name":"Safety Analysis of Over-the-Air Updates for CPS: A Contract-Driven Approach","publication_year":2026,"publication_date":"2026-01-16","ids":{"openalex":"https://openalex.org/W7124465262","doi":"https://doi.org/10.1109/tse.2026.3654819"},"language":null,"primary_location":{"id":"doi:10.1109/tse.2026.3654819","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2026.3654819","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tse.2026.3654819","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5122322284","display_name":"Nunzio Marco Bisceglia","orcid":null},"institutions":[{"id":"https://openalex.org/I11039511","display_name":"University of Bergamo","ror":"https://ror.org/02mbd5571","country_code":"IT","type":"education","lineage":["https://openalex.org/I11039511"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Nunzio Marco Bisceglia","raw_affiliation_strings":["University of Bergamo, Bergamo, Italy"],"raw_orcid":"https://orcid.org/0009-0000-7152-1389","affiliations":[{"raw_affiliation_string":"University of Bergamo, Bergamo, Italy","institution_ids":["https://openalex.org/I11039511"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119327509","display_name":"Aurora Francesca Zanenga","orcid":null},"institutions":[{"id":"https://openalex.org/I11039511","display_name":"University of Bergamo","ror":"https://ror.org/02mbd5571","country_code":"IT","type":"education","lineage":["https://openalex.org/I11039511"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Aurora Francesca Zanenga","raw_affiliation_strings":["University of Bergamo, Bergamo, Italy"],"raw_orcid":"https://orcid.org/0009-0008-0655-8335","affiliations":[{"raw_affiliation_string":"University of Bergamo, Bergamo, Italy","institution_ids":["https://openalex.org/I11039511"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070230511","display_name":"Mehrnoosh Askarpour","orcid":"https://orcid.org/0000-0001-6526-2544"},"institutions":[{"id":"https://openalex.org/I867584213","display_name":"General Motors (Canada)","ror":"https://ror.org/04vd6qx78","country_code":"CA","type":"company","lineage":["https://openalex.org/I118136607","https://openalex.org/I867584213"]},{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mehrnoosh Askarpour","raw_affiliation_strings":["General Motors Canada, McMaster University, Hamilton, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6526-2544","affiliations":[{"raw_affiliation_string":"General Motors Canada, McMaster University, Hamilton, Canada","institution_ids":["https://openalex.org/I867584213","https://openalex.org/I98251732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012917345","display_name":"Sahar Kokaly","orcid":"https://orcid.org/0009-0000-5348-2240"},"institutions":[{"id":"https://openalex.org/I867584213","display_name":"General Motors (Canada)","ror":"https://ror.org/04vd6qx78","country_code":"CA","type":"company","lineage":["https://openalex.org/I118136607","https://openalex.org/I867584213"]},{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Sahar Kokaly","raw_affiliation_strings":["General Motors Canada, McMaster University, Hamilton, Canada"],"raw_orcid":"https://orcid.org/0009-0000-5348-2240","affiliations":[{"raw_affiliation_string":"General Motors Canada, McMaster University, Hamilton, Canada","institution_ids":["https://openalex.org/I867584213","https://openalex.org/I98251732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123230540","display_name":"Ramesh S","orcid":null},"institutions":[{"id":"https://openalex.org/I118136607","display_name":"General Motors (United States)","ror":"https://ror.org/05addee68","country_code":"US","type":"company","lineage":["https://openalex.org/I118136607"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Ramesh","raw_affiliation_strings":["General Motors, Warren, MI, USA"],"raw_orcid":"https://orcid.org/0000-0002-8501-7447","affiliations":[{"raw_affiliation_string":"General Motors, Warren, MI, USA","institution_ids":["https://openalex.org/I118136607"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082153164","display_name":"M. Chechik","orcid":null},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Marsha Chechik","raw_affiliation_strings":["University of Toronto, Toronto, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6301-3517","affiliations":[{"raw_affiliation_string":"University of Toronto, Toronto, Canada","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018466538","display_name":"Claudio Menghi","orcid":"https://orcid.org/0000-0001-5303-8481"},"institutions":[{"id":"https://openalex.org/I11039511","display_name":"University of Bergamo","ror":"https://ror.org/02mbd5571","country_code":"IT","type":"education","lineage":["https://openalex.org/I11039511"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Claudio Menghi","raw_affiliation_strings":["University of Bergamo, Bergamo, Italy"],"raw_orcid":"https://orcid.org/0000-0001-5303-8481","affiliations":[{"raw_affiliation_string":"University of Bergamo, Bergamo, Italy","institution_ids":["https://openalex.org/I11039511"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":{"value":2645,"currency":"USD","value_usd":2645},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03445387,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"52","issue":"3","first_page":"889","last_page":"907"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.6949999928474426,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.6949999928474426,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.0966000035405159,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.06549999862909317,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.6377999782562256},{"id":"https://openalex.org/keywords/component-based-software-engineering","display_name":"Component-based software engineering","score":0.5400999784469604},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.5252000093460083},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5116999745368958},{"id":"https://openalex.org/keywords/software-framework","display_name":"Software framework","score":0.4323999881744385},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.430400013923645},{"id":"https://openalex.org/keywords/software-architecture","display_name":"Software architecture","score":0.428600013256073},{"id":"https://openalex.org/keywords/software-verification","display_name":"Software verification","score":0.40689998865127563}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8278999924659729},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.6377999782562256},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.5400999784469604},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.5252000093460083},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5116999745368958},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4603999853134155},{"id":"https://openalex.org/C76518257","wikidata":"https://www.wikidata.org/wiki/Q271680","display_name":"Software framework","level":5,"score":0.4323999881744385},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.430400013923645},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.428600013256073},{"id":"https://openalex.org/C33054407","wikidata":"https://www.wikidata.org/wiki/Q6504747","display_name":"Software verification","level":5,"score":0.40689998865127563},{"id":"https://openalex.org/C48002344","wikidata":"https://www.wikidata.org/wiki/Q2919644","display_name":"Verification and validation","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3522000014781952},{"id":"https://openalex.org/C154488198","wikidata":"https://www.wikidata.org/wiki/Q1335007","display_name":"Embedded software","level":3,"score":0.3447999954223633},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.3181999921798706},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.29980000853538513},{"id":"https://openalex.org/C109905503","wikidata":"https://www.wikidata.org/wiki/Q4828920","display_name":"Avionics software","level":5,"score":0.2930999994277954},{"id":"https://openalex.org/C526921623","wikidata":"https://www.wikidata.org/wiki/Q190117","display_name":"Automotive industry","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2797999978065491},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C201515116","wikidata":"https://www.wikidata.org/wiki/Q7554363","display_name":"Software sizing","level":5,"score":0.2533000111579895}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tse.2026.3654819","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2026.3654819","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tse.2026.3654819","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2026.3654819","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":74,"referenced_works":["https://openalex.org/W67120322","https://openalex.org/W122354569","https://openalex.org/W142385736","https://openalex.org/W159772184","https://openalex.org/W1547304883","https://openalex.org/W1555593767","https://openalex.org/W1574504537","https://openalex.org/W1592656068","https://openalex.org/W1933146504","https://openalex.org/W1970488655","https://openalex.org/W1975255815","https://openalex.org/W1991698050","https://openalex.org/W1994451575","https://openalex.org/W1995008247","https://openalex.org/W2002644257","https://openalex.org/W2016206563","https://openalex.org/W2034102118","https://openalex.org/W2039568153","https://openalex.org/W2050779443","https://openalex.org/W2057397849","https://openalex.org/W2077099824","https://openalex.org/W2084477406","https://openalex.org/W2090551028","https://openalex.org/W2104783741","https://openalex.org/W2109233982","https://openalex.org/W2109525524","https://openalex.org/W2113453155","https://openalex.org/W2129501751","https://openalex.org/W2130025446","https://openalex.org/W2134908243","https://openalex.org/W2135947211","https://openalex.org/W2148106163","https://openalex.org/W2163119090","https://openalex.org/W2169134334","https://openalex.org/W2170747189","https://openalex.org/W2172028106","https://openalex.org/W2261578473","https://openalex.org/W2304000253","https://openalex.org/W2395382078","https://openalex.org/W2484728957","https://openalex.org/W2493732967","https://openalex.org/W2497121448","https://openalex.org/W2522009427","https://openalex.org/W2551192623","https://openalex.org/W2570597537","https://openalex.org/W2796049347","https://openalex.org/W2885880873","https://openalex.org/W2912904668","https://openalex.org/W2948911651","https://openalex.org/W2962927158","https://openalex.org/W2966914448","https://openalex.org/W2967844381","https://openalex.org/W2974614300","https://openalex.org/W2997137015","https://openalex.org/W3085399729","https://openalex.org/W3092311360","https://openalex.org/W3099509737","https://openalex.org/W3104969655","https://openalex.org/W3105178636","https://openalex.org/W3126217067","https://openalex.org/W3161324927","https://openalex.org/W3174244922","https://openalex.org/W3188410362","https://openalex.org/W4230839296","https://openalex.org/W4232648225","https://openalex.org/W4252355914","https://openalex.org/W4382655661","https://openalex.org/W4384302752","https://openalex.org/W4391301233","https://openalex.org/W4402339755","https://openalex.org/W4403935764","https://openalex.org/W4404482918","https://openalex.org/W4406522308","https://openalex.org/W4413267855"],"related_works":[],"abstract_inverted_index":{"Over-the-air":[0],"(OTA)":[1],"updates":[2,37,62,267],"are":[3,25,72,168],"becoming":[4],"a":[5,21,93,184,231,237,311],"standard":[6],"practice":[7],"for":[8,96,188,321],"upgrading":[9],"Cyber-Physical":[10,261],"Systems":[11],"(CPS)":[12],"software,":[13],"allowing":[14],"software":[15,43,64,69,118,130,232],"systems":[16],"to":[17,40,63,74,205,216,242,287,313],"be":[18],"modified":[19],"through":[20],"wireless":[22],"network.":[23],"They":[24],"beneficial":[26],"in":[27,32,272],"several":[28],"contexts.":[29],"For":[30],"example,":[31],"the":[33,48,56,84,87,99,113,129,155,159,164,190,194,207,218,244,257,280,289,292,297,301],"automotive":[34],"domain,":[35],"OTA":[36,102,135,156,266,285,305,316],"enable":[38,214],"manufacturers":[39],"update":[41,136,157,286],"vehicle":[42],"without":[44,77,141],"physical":[45],"access.":[46],"However,":[47],"considerable":[49],"number":[50],"of":[51,86,101,116,161,174,193,209,248,274,291,303],"products":[52],"(e.g.,":[53],"vehicles":[54],"within":[55,223],"fleet)":[57],"and":[58,61,120,150,197,246,268,278],"frequent":[59],"changes":[60],"components":[65,192],"can":[66,137],"generate":[67],"many":[68],"configurations":[70],"that":[71,153,177,234,239],"impossible":[73],"analyze":[75,314],"beforehand":[76],"any":[78,143],"automated":[79],"support.":[80],"This":[81,90],"problem":[82],"hampers":[83],"verification":[85,122],"system\u2019s":[88],"safety.":[89],"paper":[91],"proposes":[92],"contract-driven":[94],"framework":[95,105,149],"reasoning":[97,111],"about":[98,112],"safety":[100,144,293,302],"updates.":[103,306],"Our":[104],"supports":[106],"(a)contract":[107],"composition,":[108],"which":[109,125],"enables":[110,240],"behavior":[114],"composition":[115],"different":[117,191],"components,":[119,211],"(b)":[121],"ofcomponent":[123],"substitutability,":[124],"allows":[126],"checking":[127],"if":[128,154],"component":[131,140],"deployed":[132],"by":[133,255],"an":[134,172],"replace":[138],"another":[139],"generating":[142],"breach.We":[145],"rigorously":[146],"define":[147],"our":[148,175,228,253],"formally":[151],"prove":[152],"ensures":[158],"satisfaction":[160],"its":[162],"contract,":[163],"system":[165,195,219],"(safety)":[166],"properties":[167],"preserved.":[169],"We":[170,200,226,251,263,276],"propose":[171,201],"instance":[173],"solution":[176,229,254],"targets":[178],"CPS":[179,210],"designed":[180],"with":[181],"Simulink\u00aeSystem":[182],"Composer,":[183],"widely":[185],"used":[186],"tool":[187,238],"modeling":[189],"architecture":[196],"their":[198,224],"interaction.":[199],"using":[202,221],"Simulink\u00aeRequirements":[203],"Tables":[204],"express":[206],"contracts":[208],"as":[212,230],"they":[213],"engineers":[215,241],"model":[217],"requirements":[220],"pre/post-conditions":[222],"Simulink\u00aemodels.":[225],"implemented":[227],"prototype":[233],"extends":[235],"THEANO,":[236],"verify":[243],"consistency":[245],"completeness":[247],"Requirements":[249],"Tables.":[250],"evaluated":[252],"considering":[256],"Ten":[258],"Lockheed":[259],"Martin":[260],"Problems.":[262],"defined":[264],"20":[265],"effectively":[269],"identified":[270],"issues":[271],"9":[273],"them.":[275],"analyzed":[277],"fixed":[279],"problems,":[281,298],"inspecting":[282],"each":[283,315],"unsafe":[284],"understand":[288],"causes":[290],"breaches.":[294],"After":[295],"fixing":[296],"THEANO":[299,307],"confirmed":[300],"all":[304],"required":[308],"less":[309],"than":[310],"minute":[312],"update,":[317],"making":[318],"it":[319],"practical":[320],"industrial":[322],"applications.":[323]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-01-17T00:00:00"}