, Iso 26262 -road vehicles -functional safety, 2018.

. Iso/wd, PAS 21448 -road vehicles -safety of the intended functionality, 2019.

A. Abdulkhaleq and S. Wagner, Integrated Safety Analysis Using Systems-Theoretic Process Analysis and Software Model Checking, Computer Safety, Reliability, and Security, pp.121-134, 2015.

A. Abdulkhaleq, S. Wagner, D. Lammering, H. Boehmert, and P. Blueher, Using STPA in compliance with ISO 26262 for developing a safe architecture for fully automated vehicles, 2017.

B. Dhaminda, E. Abeywickrama, and . Ovaska, Reflexive and evolutional digital service ecosystems with models at runtime, CEUR Workshop Proceedings, pp.184-192, 2017.

R. Abrams and A. Kurtz, Joshua brown, who died in selfdriving accident, tested limits of his tesla. The New York Times, 2016.

R. Alami, R. Chatila, S. Fleury, M. Ghallab, and F. Ingrand, An architecture for autonomy, The International Journal of Robotics Research, vol.17, issue.4, pp.315-337, 1998.
URL : https://hal.archives-ouvertes.fr/hal-00123273

N. Alaya, M. Sadok-ben-yahia, and . Lamolle, What makes ontology reasoning so arduous?: Unveiling the key ontological features, Proceedings of the 5th International Conference on Web Intelligence, Mining and Semantics, WIMS '15, vol.4, 2015.

J. S. Albus, Outline for a theory of intelligence, IEEE Transactions on Systems, Man, and Cybernetics, vol.21, issue.3, pp.473-509, 1991.

H. James-s-albus, E. R. Huang, K. Messina, M. Murphy, A. Juberts et al., 4d/rcs version 2.0: A reference model architecture for unmanned vehicle systems, NIST Interagency/Internal Report, p.6910, 2002.

T. Amorim, D. Ratasich, G. Macher, A. Ruiz, D. Schneider et al., Runtime safety assurance for adaptive cyber-physical systems: ConSerts M and ontology-based runtime reconfiguration applied to an automotive case study, Solutions for Cyber-Physical Systems Ubiquity, pp.137-168, 2018.

P. J. Antsaklis, K. M. Passino, and S. J. Wang, Towards intelligent autonomous control systems: Architecture and fundamental issues, Journal of Intelligent and Robotic Systems, vol.1, issue.4, pp.315-342, 1989.

A. Armand, Situation Understanding and Risk Assessment Framework for Preventive Driver Assistance. IV'14, 2016.
URL : https://hal.archives-ouvertes.fr/tel-01421917

A. Armand, D. Filliat, and J. Ibañez-guzmán, Ontology-based context awareness for driving assistance systems, 2014 IEEE Intelligent Vehicles Symposium Proceedings, pp.227-233, 2014.
URL : https://hal.archives-ouvertes.fr/hal-01012078

U. Aßmann, S. Götz, J. Jézéquel, B. Morin, and M. Trapp, A Reference Architecture and Roadmap for Models@run.time Systems, pp.1-18, 2014.

K. J. Åström and B. Wittenmark, Adaptive Control: Second Edition, 2013.

A. Avizienis, J. Laprie, B. Randell, and C. Landwehr, Basic concepts and taxonomy of dependable and secure computing, IEEE Transactions on, vol.1, issue.1, pp.11-33, 2004.

G. Bagschik, T. Menzel, and M. Maurer, Ontology based scene creation for the development of automated vehicles. CoRR, abs/1704.01006, 2017.

G. Bagschik, T. Stolte, and M. Maurer, Safety analysis based on systems theory applied to an unmanned protective vehicle, Procedia Engineering, vol.179, pp.13-15, 2016.

G. Bagschik, M. Nolte, S. Ernst, and M. Maurer, A system's perspective towards an architecture framework for safe automated vehicles, 2018.

A. Balakrishnan, A. G. Puranic, X. Qin, A. Dokhanchi, J. V. Deshmukh et al., Specifying and evaluating quality metrics for vision-based perception systems, 2019 Design, Automation & Test in Europe Conference & Exhibition (DATE), 2019.

C. Basarke, C. Berger, and B. Rumpe, Software & systems engineering process and tools for the development of autonomous driving intelligence. CoRR, abs/1409, vol.7121, 2014.

S. Behere, Architecting autonomous automotive systems: With an emphasis on cooperative driving, 2013.

S. Behere and M. Törngren, A functional reference architecture for autonomous driving. Information and Software Technology, vol.73, pp.136-150, 2016.

S. Behere and M. Törngren, Systems Engineering and Architecting for Intelligent Autonomous Systems, vol.13, pp.313-351

, , 2017.

S. Behere, F. Asplund, A. Söderberg, and M. Törngren, Architecture challenges for intelligent autonomous machines, vol.13, pp.1669-1681, 2016.

N. Bencomo, R. France, H. C. Betty, U. Cheng, and . Aãmann, Mod-els@run.time: Foundations, Applications, and Roadmaps. Lecture Notes in Computer Science 8378 Programming and Software Engineering, 2014.

C. Berger and B. Rumpe, Engineering autonomous driving software. Experience from the DARPA Urban Challenge, pp.243-271, 2012.

D. Bissell, Automation interrupted: How autonomous vehicle accidents transform the material politics of automation, Political Geography, vol.65, pp.57-66, 2018.

, National Transport Safety Board. Preliminary report highway hwy19fh008, 2019.

R. P. Bonasso, R. J. Firby, E. Gat, D. Kortenkamp, D. P. Miller et al., Experiences with an architecture for intelligent, reactive agents, Journal of Experimental & Theoretical Artificial Intelligence, vol.9, issue.2-3, pp.237-256, 1997.

N. E. Boudette, Despite high hopes, self-driving cars are 'way in the future'. The New York Times, 2019.

R. Brooks, A robust layered control system for a mobile robot, IEEE Journal on Robotics and Automation, vol.2, issue.1, pp.14-23, 1986.

L. Buoncompagni, A. Capitanelli, and F. Mastrogiovanni, A ROS multi-ontology references services: OWL reasoners and application prototyping issues. CoRR, abs/1706.10151, 2017.

. Ca-dmv, Reports of Traffic Accidents Involving an Autonomous Vehicle -OL316, 2019.

. Ca-dmv, Reports of Traffic Accidents Involving an Autonomous Vehicle -OL316, 2019.

H. C. Betty, K. I. Cheng, M. Eder, L. Gogolla, M. Grunske et al., Using Models at Runtime to Address Assurance for Self-Adaptive Systems, pp.101-136, 2014.

I. Colwell, B. Phan, S. Saleem, R. Salay, and K. Czarnecki, An automated vehicle safety concept based on runtime restriction of the operational design domain, IEEE Intelligent Vehicles Symposium (IV), pp.1910-1917, 2018.

. Sae-on, Road Automated Vehicle Standards Committee et al. Taxonomy and definitions for terms related to on-road motor vehicle automated driving systems, 2014.

. Sae-on-road, Automated Vehicle Standards Committee et al. Taxonomy and definitions for terms related to on-road motor vehicle automated driving systems, 2016.

. Sae-on-road, Automated Vehicle Standards Committee et al. Taxonomy and definitions for terms related to on-road motor vehicle automated driving systems, 2018.

S. A. Cook, K. Hsing-hua-fan, P. Pennar, and . Sundaram, Building behavioral competency into stpa process models for automated driving systems, 2018.

Ö. ?. Ta?, F. Kuhnt, J. M. Zöllner, and C. Stiller, Functional system architectures towards fully automated driving, 2016 IEEE Intelligent Vehicles Symposium (IV), pp.304-309, 2016.

R. Cuer, Démarche de conception sûre de la Supervision de la fonction de Conduite Autonome, Eric Automatique Lyon, 2018.

C. Diop, G. Dugué, C. Chassot, E. Exposito, and J. Gomez, QoS-aware and autonomic-oriented multi-path TCP extensions for mobile and multimedia applications, International Journal of Pervasive Computing and Communications, vol.8, issue.4, pp.306-328, 2012.

N. Dragoni, S. Giallorenzo, A. Lluch-lafuente, M. Mazzara, F. Montesi et al., Microservices: yesterday, today, and tomorrow. CoRR, abs/1606.04036, 2016.
URL : https://hal.archives-ouvertes.fr/hal-01631455

H. Durrant-whyte, A critical review of the state-of-the-art in autonomous land vehicle systems and technology, Sandia report, vol.200, 2001.

Y. Emzivat, Safety System Architecture for the Design of Dependable and Adaptable Autonomous Vehicles, 2018.

Y. Emzivat, J. Ibanez-guzman, H. Illy, P. Martinet, and O. H. Roux, A formal approach for the design of a dependable perception system for autonomous vehicles, 21st International Conference on Intelligent Transportation Systems (ITSC), 2018.
URL : https://hal.archives-ouvertes.fr/hal-01966844

F. Favarò, S. Eurich, and N. Nader, Autonomous vehicles' disengagements: Trends, triggers, and regulatory limitations, Accident Analysis & Prevention, vol.110, pp.136-148, 2018.

D. Firesmith, Common concepts underlying safety, security, and survivability engineering, 2003.

D. Firesmith, A taxonomy of safety-related requirements, Proceedings of the International Workshop on Requirements for High Assurance Systems. International Workshop on High Assurance Systems (RHAS'05), 2005.

. Fiveai, Certification of highly automated vehicles for use on uk roads: Creating an industry-wide framework for safety, 2019.

. Ford, A matter of trust fords approach to developing self-driving vehicles. techreport, Ford, 2018.

M. Fowler and J. Lewis, Microservices: a definition of this new architectural term, 2014.

L. Fraade-blanar, M. S. Blumenthal, J. M. Anderson, and N. Kalra, Measuring automated vehicle safety: Forging a framework, 2018.

L. Fridman, Elon musk: Tesla autopilot | artificial intelligence (ai) podcast, 2019.

E. Gamma, Design patterns: elements of reusable object-oriented software, 1995.

T. M. Gasser, C. Arzt, M. Ayoubi, A. Bartels, J. Eier et al., Jürgen Schwarz, Wolfgang Vogt, and Projektgruppe Rechtsfolgen zunehmender Fahrzeugautomatisierung. Rechtsfolgen zunehmender fahrzeugautomatisierung (bast-bericht f 83). techreport vol, vol.83, 2012.

E. Gat, Integrating planning and reacting in a heterogeneous asynchronous architecture for controlling real-world mobile robots, Proceedings of the Tenth National Conference on Artificial Intelligence, AAAI'92, pp.809-815

, 2018 self-driving safety report, General Motors, 2018.

X. Geng, H. Liang, B. Yu, P. Zhao, L. He et al., A scenario-adaptive driving behavior prediction approach to urban autonomous driving, Applied Sciences, vol.7, p.426, 2017.

S. Geyer, M. Baltzer, B. Franz, S. Hakuli, M. Kauer et al., Concept and development of a unified ontology for generating test and use-case catalogues for assisted and automated vehicle guidance, IET Intelligent Transport Systems, vol.8, issue.3, pp.183-189, 2014.

S. Gibbs, Crash involving self-driving google car injures three employees. The Guardian, 2015.

S. Gibbs, Tesla model s cleared by auto safety regulator after fatal autopilot crash. The Guardian, 2017.

H. Giese, N. Bencomo, L. Pasquale, A. J. Ramirez, P. Inverardi et al., Living with Uncertainty in the Age of Runtime Models, pp.47-100, 2014.

A. Haller, K. Janowicz, J. D. Simon, M. Cox, K. Lefrançois et al., The modular ssn ontology: A joint w3c and ogc standard specifying the semantics of sensors, observations, sampling, and actuation, Semantic Web, pp.1-24, 2018.
URL : https://hal.archives-ouvertes.fr/hal-01885335

C. Hubmann, M. Becker, D. Althoff, D. Lenz, and C. Stiller, Decision making for autonomous driving considering interaction and uncertain prediction of surrounding vehicles, 2017 IEEE Intelligent Vehicles Symposium (IV), pp.1671-1678, 2017.

C. Markus, J. A. Huebscher, and . Mccann, A survey of autonomic computing -degrees, models, and applications, ACM Computing Surveys (CSUR), vol.40, issue.3, p.7, 2008.

J. Ibañez-guzmán, C. Laugier, J. Yoder, and S. Thrun, Autonomous Driving: Context and State-of-the-Art, pp.1271-1310, 2012.

J. Kaplan, R. Glon, S. Edelstein, and L. Chang, Deadly uber crash was 'entirely avoidable' had the driver not been watching hulu. Digital Trends, 2018.

R. Johansson, J. Nilsson, C. Bergenhem, and S. Behere, Jörgen Tryggvesson, Stig Ursing, Andreas Söderberg, Martin Törngren, and Fredrik Warg. Functional Safety and Evolvable Architectures for Autonomy, pp.547-560, 2017.

N. Kalra and S. M. Paddock, Driving to safety: How many miles of driving would it take to demonstrate autonomous vehicle reliability? Technical report, RAND Corporation, 2016.

A. Kane, O. Chowdhury, A. Datta, and P. Koopman, A case study on runtime monitoring of an autonomous research vehicle (arv) system, Runtime Verification, pp.102-117, 2015.

V. Kaznov, J. Svahn, P. Roos, F. Asplund, S. Behere et al., Architecture and Safety for Autonomous Heavy Vehicles: ARCHER, pp.571-581, 2017.

J. Kephart, C. Chess, R. Boutilier, W. E. Das, and . Walsh, An architectural blueprint for autonomic computing, 2006.

R. Koh-dzul, M. Vargas-santiago, C. Diop, E. Exposito, and F. Moo-mena, A smart diagnostic model for an autonomic service bus based on a probabilistic reasoning approach, 2013 IEEE 10th International Conference on Ubiquitous Intelligence and Computing and 2013 IEEE 10th International Conference on Autonomic and Trusted Computing, pp.416-421, 2013.

P. Koopman and M. Wagner, Autonomous vehicle safety: An interdisciplinary challenge, IEEE Intelligent Transportation Systems Magazine, vol.9, issue.1, pp.90-96, 2017.

P. Koopman, An Overview of Draft UL 4600: Standard for Safety for the Evaluation of Autonomous Products. Medium, 2019.

P. Koopman, Autonomous vehicles: Safety validation and edge case testing, 2018.

P. Koopman, The big picture for self-driving car safety, 2019.

P. Koopman and F. Fratrik, How many operational design domains, objects, and events?, Safe AI 2019: AAAI Workshop on Artificial Intelligence Safety, 2019.

P. Koopman and M. Wagner, Toward a framework for highly automated vehicle safety validation, SAE Technical Paper, 2018.

P. Koopman, A. Kane, and J. Black, Credible autonomy safety argumentation, 2019.

P. Koopman, B. Osyk, and J. Weast, Autonomous vehicles meet the physical world: RSS, variability, uncertainty, and proving safety, Lecture Notes in Computer Science, pp.245-253, 2019.

J. Krafcik, Waymo one: The next step on our self-driving journey. Medium, 2018.

J. E. Laird, A. Newell, and P. S. Rosenbloom, Soar: An architecture for general intelligence, Artificial Intelligence, vol.33, issue.1, pp.1-64, 1987.

A. Edward and . Lee, Cyber physical systems: Design challenges, 11th IEEE International Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC), pp.363-369, 2008.

S. Lefèvre, Risk estimation at road intersections for connected vehicle safety applications, vol.10, p.2012

S. Lefèvre, C. Laugier, and J. Ibañez-guzmán, Risk assessment at road intersections: Comparing intention and expectation, 2012 IEEE Intelligent Vehicles Symposium, pp.165-171, 2012.

S. Lefèvre, D. Vasquez, and C. Laugier, A survey on motion prediction and risk assessment for intelligent vehicles, ROBOMECH Journal, vol.1, issue.1, 2014.

N. Leveson, A systems approach to risk management through leading safety indicators, Reliability Engineering & System Safety, vol.136, pp.17-34, 2015.

N. Leveson, Engineering a safer and more secure world, 2018.

. Nancy-g-leveson, Safeware: System Safety and Computers, 1995.

N. G. Leveson, An approach to designing safe embedded software, Embedded Software, pp.15-29, 2002.

N. G. Leveson, Engineering a Safer World -Systems Thinking Applied to Safety, 2012.

. Engineering_a_safer_world and . Pdf,

N. G. Leveson and J. P. Thomas, STPA Handbook. MIT Partnership for a Systems Approach to Safety, 2018.

N. G. Leveson, J. P. Thomas, and M. Stpa-primer, MIT Partnership for a Systems Approach to Safety (PSAS), 2015. URL sunnyday

M. Luckcuck, M. Farrell, L. Dennis, C. Dixon, and M. Fisher, Formal Specification and Verification of Autonomous Robotic Systems: A Survey, 2018.

J. Lygeros, D. N. Godbole, and M. E. Broucke, Design of an extended architecture for degraded modes of operation of ivhs, American Control Conference, Proceedings of the 1995, vol.5, pp.3592-3596, 1995.

T. Michael, L. Fisher-martin, and . Abbott, The Art of Scalability, 2015.

M. E. Bouzouraa, . Mba-siyuan-liu, . Bs, Y. Ma, and D. Wang, Aptiv Services US

A. Daimler and . Llc, Continental Teves AG & Co oHG

B. V. Here-global, Infineon Technologies AG; Intel; Volkswagen AG, 2019.

A. , Intelligent control: A sketch of the theory, Journal of Intelligent and Robotic Systems, vol.2, issue.2, pp.97-107, 1989.

H. Monkhouse, I. Habli, J. Mcdermid, S. Khastgir, and G. Dhadyalla, Why functional safety experts worry about automotive systems having increasing autonomy, 2017 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computed, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation, pp.1-6, 2017.

A. Hausi, L. Müller, M. Brien, B. Klein, ;. Wood et al., Autonomic computing, 2006.

, Preliminary statement of policy concerning automated vehicles. techreport, NHSTA, 2013.

, Automated driving systems 2.0: A vision for safety, 2017.

M. Nolte, G. Bagschik, I. Jatzkowski, T. Stolte, A. Reschka et al., Towards a skill-and ability-based development process for self-aware automated road vehicles, 2017.

M. Ojdanic, Systematic literature review of safety-related challenges for autonomous systems in safety-critical applications, 2019.

O. Sean and . Kane, Tesla defends Autopilot after fatal Model X crash. The Verge, 2018.

O. Sean and . Kane, Tesla hit with another lawsuit over a fatal autopilot crash

K. Pierce, Udot makes safety upgrades after autonomous shuttle accident injures man in salt lake city. KSL News Radio, 2019.

H. Porav and P. Newman, Imminent collision mitigation with reinforcement learning and vision. CoRR, abs/1901.00898, 2019.

. Path and . Program, Peer review of behavioral competencies for avs. techreport, 2016.

M. Quigley, B. Gerkey, K. Conley, J. Faust, T. Foote et al., ROS: an open-source Robot Operating System, ICRA Workshop on Open Source Software, vol.3, 2009.

A. Ramaswamy, B. Monsuez, and A. Tapus, An extensible model-based framework for robotics software development, 2017 First IEEE International Conference on Robotic Computing (IRC), pp.73-76, 2017.

A. Rasouli and J. K. Tsotsos, Autonomous vehicles that interact with pedestrians: A survey of theory and practice. CoRR, abs/1805.11773, 2018.

T. Raste, H. Bã-¶hmert, A. , and A. Houry, Fallback strategy for automated driving using stpa, 3rd European STAMP Workshop, 2015.

A. Raymond, Utah driverless shuttle mishap doesn't slow 76-year-old state employee, Deseret News Utah, 2019.

A. Reschka, G. Bagschik, S. Ulbrich, M. Nolte, and M. Maurer, Ability and skill graphs for system modeling, online monitoring, and decision support for vehicle guidance systems, 2015 IEEE Intelligent Vehicles Symposium (IV), pp.933-939, 2015.

A. Reschka and M. Maurer, Conditions for a safe state of automated road vehicles. it -Information Technology, vol.57, 2015.

A. Reschka, J. R. Böhmer, T. Nothdurft, P. Hecker, B. Lichte et al., A surveillance and safety system based on performance criteria and functional degradation for an autonomous vehicle, 15th International IEEE Conference on Intelligent Transportation Systems, pp.237-242, 2012.

, Ul 4600: The first comprehensive safety standard for autonomous products, 2019.

D. Rodrigues, R. De-melo-pires, E. A. Marconato, C. Areias, J. C. Cunha et al., Service-oriented architectures for a flexible and safe use of unmanned aerial vehicles, IEEE Intelligent Transportation Systems Magazine, vol.9, issue.1, pp.97-109, 2017.

. Pascal, Consultant) Roques. Systems Architecture Modeling with the Arcadia Method, 2017.

D. Rumsfeld, Known and Unknown: A Memoir. Penguin Group USA, 2011.

G. Sabaliauskaite, L. S. Liew, and J. Cui, Integrating autonomous vehicle safety and security analysis using stpa method and the six-step model, International Journal on Advances in Security, vol.11, pp.160-169, 2018.

R. Salay, R. Queiroz, and K. Czarnecki, An analysis of iso 26262: Using machine learning safely in automotive software, ArXiv, 2017.

J. Schlatow, M. Moostl, R. Ernst, M. Nolte, I. Jatzkowski et al., Self-awareness in autonomous automotive systems, Design, Automation Test in Europe Conference Exhibition (DATE, pp.1050-1055, 2017.

D. Schneider and M. Trapp, B-space: dynamic management and assurance of open systems of systems, Journal of Internet Services and Applications, vol.9, issue.1, p.15, 2018.

S. Shalev-shwartz, S. Shammah, and A. Shashua, Safe, multi-agent, reinforcement learning for autonomous driving, 2016.

S. Shalev-shwartz, S. Shammah, and A. Shashua, On a formal model of safe and scalable self-driving cars. CoRR, abs/1708.06374, 2017.

J. Sifakis, System design in the era of iot -meeting the autonomy challenge, Proceedings of the 1st International Workshop on Methods and Tools for Rigorous System Design, Thessaloniki, vol.272, pp.1-22, 2018.

J. Sifakis, Autonomous systems -an architectural characterization, Models, Languages, and Tools for Concurrent and Distributed Programming, pp.388-410, 2019.

R. G. Simmons, Structured control for autonomous robots, IEEE Transactions on Robotics and Automation, vol.10, issue.1, pp.34-43, 1994.

S. Singh, Critical reasons for crashes investigated in the national motor vehicle crash causation survey. (traffic safety facts crash stats. report no. dot hs 812 115). techreport, 2015.

I. Stoica, D. Song, A. Raluca, D. A. Popa, M. W. Patterson et al., A berkeley View of Systems Challenges for ai, 2017.

A. Sardar-muhammad-sulaman, M. Beer, M. Felderer, and . Höst, Comparison of the fmea and stpa safety analysis methods-a case study, Software Quality Journal, 2017.

P. Tetlow, J. Z. Pan, D. Oberle, E. Wallace, M. Uschold et al., Ontology driven architectures and potential uses of the semantic web in systems and software engineering, 2006.

R. Kristinn and . Thórisson, A new constructivist AI: From manual methods to selfconstructive systems, Atlantis Thinking Machines, pp.145-171, 2012.

E. Thorn, S. Kimmel, and M. Chaka, A framework for automated driving system testable cases and scenarios. techreport, U.S. Department of Transportation, National Highway Traffic Safety Administration, 2018.

D. Topham, G. Ford, D. Ward, C. Zott, and P. Mortara, Vehicle probe use cases and test scenarios. resreport, SAFESPOT, 2006.

-. Vehicle_probe_use_case and . Pdf,

M. Törngren, X. Zhang, N. Mohan, M. Becker, X. Tao et al., Architecting safety supervisors for high levels of automated driving, the 21st IEEE Internal Conference on Intelligent Transportation Systems, 2018.

M. Trapp and D. Schneider, Safety Assurance of Open Adaptive Systems -A Survey, pp.279-318, 2014.

S. Ulbrich, T. Menzel, A. Reschka, F. Schuldt, and M. Maurer, Defining and substantiating the terms scene, situation, and scenario for automated driving, IEEE 18th International Conference on Intelligent Transportation Systems, pp.982-988, 2015.

Q. Van-eikema and . Hommes, Assessment of safety standards for automotive electronic control systems, 2016.

A. Mark and . Vernacchia, Gm presentation for introducing stamp/stpa tools into standards, 2018.

D. Vernon, Artificial cognitive systems: A primer, 2014.

T. Vogel and H. Giese, Model-Driven Engineering of Self-Adaptive Software with EUREMA, 2018.

W. Wachenfeld, H. Winner, J. C. Gerdes, B. Lenz, M. Maurer et al., Use Cases for Autonomous Driving, pp.9-37, 2016.

. Waymo, Waymo safety report -on the road to fully self-driving. techreport, Waymo, Google, 2017.

. Waymo, Waymo safety report -on the road to fully self-driving. techreport, Waymo, Google, 2018.

R. Wei, J. Reich, T. Kelly, and S. Gerasimou, On the transition from design time to runtime model-based assurance cases, vol.10, 2018.

R. Wei, T. P. Kelly, X. Dai, S. Zhao, and R. Hawkins, Model based system assurance using the structured assurance case metamodel, Journal of Systems and Software, vol.154, pp.211-233, 2019.

R. White and H. Christensen, Robot Operating System (ROS), vol.707, pp.285-307, 2017.

D. Wittmann, C. Wang, and M. Lienkamp, Definition and identification of system boundaries of highly automated driving, 2015.

L. Zhao, R. Ichise, S. Mita, and Y. Sasaki, Core ontologies for safe autonomous driving, International Semantic Web Conference, 2015.

L. Zhao, R. Ichise, T. Yoshikawa, T. Naito, T. Kakinami et al., Ontology-based decision making on uncontrolled intersections and narrow roads, 2015 IEEE Intelligent Vehicles Symposium (IV), pp.83-88, 2015.

C. Ziegler, A google self-driving car caused a crash for the first time. The Verge, 2016.