@conference{SST2024,
title = {Making Smart Systems Safe and Secure: Caveats and Blueprints from the Automotive Industry},
author = {Milan Z. Bjelica},
doi = {10.1109/SST61991.2024.10755316},
isbn = {979-8-3503-8639-4},
year = {2024},
date = {2024-10-17},
booktitle = {2024 International Conference on Smart Systems and Technologies (SST)},
publisher = {IEEE},
abstract = {Smart systems and technologies continue to proliferate across industry domains. The introduction of digital technologies and complex software in the consumer industries, such as the Internet or media distribution, was a success story. However, the introduction of software-defined approaches in safety
and security-critical industries, such as smart cities, factories or mobility, presents many caveats. In the
talk, we are dissecting the blueprints for safe and secure developments in the automotive industry, applied to automated and autonomous driving. The audience would be offered a comprehensible overview
of how modern standards, such as ASPICE, ISO 26262 and ISO 21434 can be applied in companies to construct a compelling safety and security case for road vehicles and their items. Caveats and key challenges
around software complexity will be presented, giving ideas on how to bridge the gap between the agility
and somewhat ad-hoc practices of present-day software engineers, with the rigor required to deliver safe
and secure solutions.
},
howpublished = {M32},
keywords = {automotive, consumer electronics, cybersecurity, functional safety},
pubstate = {published},
tppubtype = {conference}
}

@conference{ICCE2024,
title = {Designing a safe autonomous vehicle computer - where we are, where we should be and a hands-on example},
author = {Milan Z. Bjelica},
url = {https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10444258},
doi = {10.1109/ICCE59016.2024.10444258},
isbn = {979-8-3503-2413-6},
year = {2024},
date = {2024-01-05},
booktitle = {2024 IEEE International Conference on Consumer Electronics (ICCE)},
publisher = {IEEE},
abstract = {In the last two years, we have witnessed the increased push to legislators to approve the robotaxi vehicles in several cities in the USA for commercial use, with two permits Issued, and one revoked. The endeavor to proliferate self-driving vehicles proves to be very hard, since the technology stack required, dominated by software, presents extreme challenges In safety critical design and certification according to practices laid out in ISO 26262 and ISO 21448 SOTIF. In this tutorial we would contrast the due diligence in automotive functional safety with the real-world design challenges and what has been deployed on roads. We would discuss legal debates around the technology shortcomings following the first lawsuits regarding the casualties caused by the car autopilots. Finally, we would work out in a hands-on example a process of designing a safe autonomous vehicle computer for a traffic jam pilot function, witnessing all the challenges first hand.},
howpublished = {M32},
keywords = {ADAS, automotive, functional safety},
pubstate = {published},
tppubtype = {conference}
}

@article{BjelicaITSM2023a,
title = {Reliability of Self-Driving Cars: When Can We Remove the Safety Driver?},
author = {Milan Z. Bjelica and Bojan Mrazovac},
url = {https://ieeexplore.ieee.org/document/10056924},
doi = {10.1109/mits.2023.3244271},
issn = {1939-1390},
year = {2023},
date = {2023-07-01},
journal = {IEEE Intelligent Transportation Systems Magazine},
volume = {15},
number = {4},
pages = {46-54},
publisher = {Institute of Electrical and Electronics Engineers (IEEE)},
abstract = {Self-driving cars and other vehicles are being increasingly demonstrated, released, and deployed on roads. Yet only a handful of special-case vehicles have obtained a permit to go fully driverless, and our passenger cars still require drivers at the steering wheel to correct the car if something goes wrong. Safety drivers, which operate autonomous vehicles in testing phases, upon occasions were unable to correct the faulty behavior of their vehicles, inducing accidents and, unfortunately, casualties. This article proposes a method to analyze the reliability of autonomous vehicles applying the classical reliability theory and software reliability growth models (SRGMs). This method is then applied to real-world data to get some predictions on what is really needed to safely remove the driver and go fully driverless.},
howpublished = {M21},
keywords = {automotive, functional safety, reliability},
pubstate = {published},
tppubtype = {article}
}

@book{BjelicaSpringer2023,
title = {Systems, Functions and Safety: A Flipped Approach to Design for Safety},
author = {Milan Z. Bjelica },
url = {https://link.springer.com/book/10.1007/978-3-031-15823-0},
doi = {10.1007/978-3-031-15823-0},
isbn = {978-3-031-15822-3},
year = {2023},
date = {2023-03-01},
volume = {1},
number = {1},
publisher = {Springer International Publishing},
abstract = {This textbook provides up-to-date content in the fields of system engineering, system safety and functional safety, with up-to-date examples from the automotive, industrial and aerospace domains, with respect to the growing complexity of the field and the increased utilization of complex hardware and software in vehicle designs. The book covers practical functional safety insights concerning the required standards (e.g. IEC 61508, IEC 62061, ISO 13849, ISO 26262), but also inherent system safety process as a key factor towards the mitigation of systematic faults. Readers will be equipped with a broad understanding of safety and functional safety, with balanced theoretical and practical views in this area.

The book covers the specific topics of introduction to system engineering, overall system safety and its relation to functional safety. Functional safety is introduced in all the required concepts, terminology and safety analysis methods. Basic fault-tolerance concepts are covered, including the design considerations to achieve functional safety. The book also gives an introduction to the required system safety processes and the applications of relevant functional safety standards.},
howpublished = {M11},
keywords = {automotive, functional safety},
pubstate = {published},
tppubtype = {book}
}

@article{BjelicaITSM2023b,
title = {Human-Centric Role in Self-Driving Vehicles: Can Human Driving Perception Change the Flavor of Safety Features?},
author = {Bojan Mrazovac and Milan Z. Bjelica},
url = {https://ieeexplore.ieee.org/document/9773320},
doi = {10.1109/mits.2022.3169597},
issn = {1939-1390},
year = {2023},
date = {2023-01-01},
journal = {IEEE Intelligent Transportation Systems Magazine},
volume = {15},
number = {1},
pages = {117-125},
publisher = {Institute of Electrical and Electronics Engineers (IEEE)},
abstract = {Autonomous vehicles are expected to generate significant revenues for the global economy in the next decade. Recently, industry experts warned that autonomous vehicles are losing momentum. Self-driving is stalling. Fusing human sentiment and driving perception into a holistic approach to the development of human-centric autonomous vehicles could regain the market’s trust. In this article, we try to explain why the traditional approach to self-driving vehicles, which focuses only on perfecting vehicle performance, sends engineers back to the whiteboard.},
howpublished = {M21},
keywords = {automotive, functional safety, human detection},
pubstate = {published},
tppubtype = {article}
}

@conference{ZINC2022b,
title = {Safety done right: Systems, Software, Standards and Attitudes},
author = {Bogdan Pavković and Vladimir Marinković and Dragana Đorđević-Čegar and Milan Z. Bjelica},
doi = {10.1109/ZINC55034.2022.9840691},
isbn = {978-1-6654-8374-2},
year = {2022},
date = {2022-05-25},
booktitle = {2022 IEEE Zooming Innovation in Consumer Technologies Conference (ZINC)},
abstract = {In this panel, we discuss the common pitfalls with new developments and solutions in safety-critical industries. Those industries are now increasingly getting digitized and starting to depend on complex hardware/software/mechanical configurations, often with centralized control by a computer. What should newcomers know when embarking on projects in autonomous mobility, Industry 4.0 and other disciplines? How to create safe solutions? Which role is played by hardware and software designs there? What about the standards and the required compliances? What about attitudes and understanding of safety in the teams?
},
howpublished = {M32},
keywords = {automotive, functional safety, safety culture},
pubstate = {published},
tppubtype = {conference}
}

@mastersthesis{2021fh,
title = {Reliability Estimation for a Central Vehicle Computer with Upgradeable Software Components},
author = {Milan Z. Bjelica},
editor = {Peter Krebs},
year = {2021},
date = {2021-06-11},
address = {Vienna, Austria},
school = {University of Applied Sciences - FH CampusWien},
keywords = {automotive, functional safety, reliability},
pubstate = {published},
tppubtype = {mastersthesis}
}

@conference{ecbs2021,
title = {My Big, Fat, Safe Software Stack: Functional Safety for Complex Software for Next-Generation Vehicles},
author = {Milan Z. Bjelica},
doi = {10.1145/3459960.3461563},
isbn = {978-1-4503-9057-6},
year = {2021},
date = {2021-05-27},
booktitle = {ECBS 2021: 7th Conference on the Engineering of Computer Based Systems},
publisher = {ACM},
abstract = {I used to be enthusiastic about software. I liked clever, modular architectures; design patterns made for extensibility; virtualized, multi-application runtimes; seamless software updates; reusability in the harsh hardware-accelerated environments. And then, I was summoned to the automotive arena, which was in a desperate need for a centralized processing, artificial intelligence algorithms, service-oriented architectures and a fat software stack for the next-generation vehicles. It seemed like a dream job… at first. Only until I realized that to keep a promise I now need to adhere to the harsh world of reliability, safety and processes. This is a story of my software stack and me travelling, unscathed, following the challenging functional safety and reliability trail.

In the keynote, I would give an initial proposal of a reliability estimation method for a Central Vehicle Computer which is dominated by software. The method would first address hardware reliability through the definition of key components, component failure rates and reliability block diagrams, which are based on current proposals of Central Vehicle Computer architectures with dual and triple redundancy, available in industry and research. Then, key software components are identified and positioned, with appropriate classification. Where appropriate, reliability of such components is estimated by means of test statistics obtained from field-trials and laboratory experiments, and also by applying software reliability growth models. Through a combined, flexible approach, inability of identifying systematic faults in modern software algorithms which are based on big data and artificial intelligence (AI) would be addressed, emphasizing the software upgrades as mandatory routine which shall be regularly performed. Finally, I would attempt to propose a common formula for easy reliability calculation in early safety case setup phases.},
howpublished = {M32},
note = {Keynote},
keywords = {automotive, functional safety, software framework},
pubstate = {published},
tppubtype = {conference}
}

@conference{icce20202,
title = {Proposal for graphics sharing in a mixed criticality automotive digital cockpit},
author = {Milan Z. Manić and Milica Z. Ponoš and Milan Z. Bjelica and Dragan Samardžija},
doi = {10.1109/ICCE46568.2020.9212310},
isbn = {978-1-7281-5186-1},
year = {2020},
date = {2020-01-04},
booktitle = {2020 IEEE International Conference on Consumer Electronics (ICCE)},
publisher = {IEEE},
abstract = {In this paper, we present the concept of multilayer cross-platform graphics sharing in the automotive digital cockpit. Considering that automobiles today have around 150 ECUs (engine control units), managing all these ECUs is becoming a challenging task. For example, there is a controller (System on Chip - SoC) for every display in an automobile. This SoC is used for content rendering and data processing. The number of ECUs can be lowered by using SoCs with a hypervisor. A hypervisor is a concept that enables us to run two operating systems on one SoC in real-time. The content from both operating systems can be rendered and presented in the same display output. The proposed system consists of one SoC with two operating systems running on a hypervisor. With this proposed solution, we were able to simultaneously render content from both operating systems on one display output. The proposed solution also covers the rendering of media content on display that is hosted on a different operating system and therefore enables mixed criticality where safety-critical information, such as those presented in the cluster, are presented with no interference with the non-critical operations, such as media rendering. We also evaluate safety concerns and system performance when content is rendered simultaneously on both operating systems.},
howpublished = {M33},
keywords = {automotive, functional safety, ieeexplore, infotainment, software framework},
pubstate = {published},
tppubtype = {conference}
}