##article.return## Testing the Interrupted Update: A Fault-Injection Method for Verifying Recovery in Automotive Over-the-Air Software Updates Download Download PDF