[1] [1] FEILER P H,GLUCH D P.Model-based engineering with AADL［M］.Boston:Addison-Wesley,2012:196-204.

[2] [2] MCINTYRE M D W,SEBRING D L.Integrated fault-tole-rant air data inertial reference system:US,5297052［P］.1994-03-22.

[3] [3] ARINC Aeronautical Radio.ARINC 653P1-3 Avionics application software standard interface Part 1,Required ser-vices ［S］.［S.l.］:ARINC,2010.

[4] [4] ABDELWAHED S,KARSAI G.Notions of diagnosability for timed failure propagation graphs［C］//IEEE Systems Readiness Technology,Anaheim:IEEE Conference,2006:643-648.

[5] [5] ABDELWAHED S,KARSAI G,MAHADEVAN N,et al.Practical considerations in systems diagnosis using timed failure propagation graph models［J］.IEEE Transactions on Instrumentation and Measurement,2009,58(2):240-247.

[6] [6] Aviation Occurrence Report.In-flight upset event 240 km north-west of Perth,WABoeing Company 777-200,9M-MRG［R］.Canberra:Australian Transport Safety Bureau,2005.