Integrated Modular Avionics — A View on Safe Partitioning

Avionics systems are conventionally designed using a federated architecture. The system is partitioned into a number of physically separated black boxes, each of which is then treated as a separate subsystem. Integrity requirements are often defined at this level of resolution, with each black box being given an integrity requirement based on its most critical function.