Assumption coverage under different failure modes in the time-triggered architecture | IEEE Conference Publication | IEEE Xplore