Dependability of fault-tolerant systems-explicit modeling of the interactions between hardware and software components

Kanoun, Karama; Borrel, M.

doi:10.1109/ipds.1996.540226

Cited by 14 publications

(7 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Any representation claiming to realistically model the system must take this interaction into consideration. Coincident errors have been considered and modelled for predicting system reliability in [1,8,9,21,25,29,34].…”

Section: Predicting Reliability Using Stochastic Formalismsmentioning

confidence: 99%

Assessment of High Integrity Software Components for Completeness, Consistency, Fault-Tolerance, and Reliability

Kim

Jerath

Sheldon

2003

Component-Based Software Quality

View full text Add to dashboard Cite

Abstract. The use of formal model based (FMB) methods to evaluate the quality of components is an important research area. Except for a growing number of exceptions, FMB methods are still not really used in practice. This chapter presents two case studies that illustrate the value of FMB approaches for developing and evaluating componentbased software. In the first study, Zed (or Z) and Statecharts are used to evaluate (a priori) the software requirement specification of a Guidance Control System for completeness, consistency and fault-tolerance. The second study evaluates (post-priori) the reliability of a complex vehicle system using Stochastic Activity Networks (SANs). The FMB approach presented here provides further evidence that such methods can indeed be useful by showing how these two different industrial strength systems were assessed and the results. Clearly, future investigations of this nature will help to convince software system developers using component based approaches that such FMB methods should be considered as a valuable tool toward improving the software product lifecycle (quality, schedule and cost).

show abstract

Section: Predicting Reliability Using Stochastic Formalismsmentioning

confidence: 99%

Assessment of High Integrity Software Components for Completeness, Consistency, Fault-Tolerance, and Reliability

Kim

Jerath

Sheldon

2003

Component-Based Software Quality

View full text Add to dashboard Cite

show abstract

“…To assist re-usability, we defined rules for constructing the GSPNs of the blocks. Together with the conventional rules of GSPNs, these rules allow a) for an easy interfacing of the dependency nets -a prerequisite for modularity, hierarchical modeling and re-usability, b) controlling the token creation and absorption in order to generate from the beginning nets that are bounded [1][2][3] . The main rules are summarized hereafter.…”

Section: Gspn Constructionmentioning

confidence: 99%

“…Due to space limitations and to the complexity of the dependency nets [2] , only the error propagation net is shown in Figure 5 (this is the smallest and easiest one). It is initialized via the entry place Prop after firing of transition 1-d h (non detected error) or of transition 1-p h (an error due to a temporary fault) in the hardware net.…”

Section: Gspn Constructionmentioning

confidence: 99%

Availability of CAUTRA, a subset of the French air traffic control system

Kanoun

Borrel

Morteveille³

et al. 1999

IEEE Trans. Comput.

Self Cite

View full text Add to dashboard Cite

The aim of our work is to provide a quantified means helping in the definition of a new architecture for CAUTRA, a subset of the French Air Traffic Control system. In this paper we define a set of alternative architectures, give some elements for constructing their dependability models and compare their availability. Modeling is carried out following a modular and systematic approach, based on the derivation of block models at a high level of abstraction. In a second step, the blocks are replaced by their equivalent Generalized Stochastic Petri Nets to build up the detailed model of the architecture. The evaluations performed permit identification of a subset of architectures whose availability meets the dependability requirements and also identification of the best architecture among this subset.

show abstract

“…Several methods have been proposed for the modular construction of quantitative evaluation models, either based on SPNs or their offspring's (see e.g. [17,22]) or based on Markov chains [14].…”

Section: Related Workmentioning

confidence: 99%

“…For the dependability modeling of fault-tolerant systems, multiple and complex interactions between system components have to be explicitly considered because of the dependencies induced by component failures and repairs. When the number of components is not very 4 high and the number of interactions is limited, the model can be obtained by composition of the component models with their interactions as in [17,22]. When these numbers increase, alternative approaches, such as the incremental approach proposed in [9], are needed to handle progressively the complexity of the resulting model.…”

Section: Related Workmentioning

confidence: 99%

Dependability evaluation of an air traffic control computing system

Fota¹,

Kaâniche

Kanoun

1999

Performance Evaluation

View full text Add to dashboard Cite

As air traffic over France is growing rapidly, the existing Air Traffic Control (ATC) system has to evolve to satisfy the increasing demand. The selection of the new automated computing system (denoted CAUTRA) is based, among other things, on dependability evaluation. This paper is devoted to the dependability evaluation of the CAUTRA, however, emphasis is put on a subset: the Regional Control Center (RCC). Starting from the analysis of the impact of CAUTRA failures on air traffic safety, five levels of service degradation are defined for the global system grading the effects of these failures on the service delivered to the controllers to ensure traffic safety. The RCC failure modes leading to these degradation levels are then defined and evaluated using stochastic Petri nets. The modeling approach consists in modeling the system as a set of modules interconnected via coupling mechanisms. The system model is constructed in several steps according to an incremental approach. Each step integrates the failure and recovery assumptions of an additional component and updates the model of the previous step by accounting for the impact of the new component on the behavior of those already included in the model. The application of this approach to the CAUTRA allowed us to analyze several configurations of the CAUTRA architecture and to identify improvement areas to minimize the impact of CAUTRA failures on air traffic safety.

show abstract

Dependability of fault-tolerant systems-explicit modeling of the interactions between hardware and software components

Cited by 14 publications

References 13 publications

Assessment of High Integrity Software Components for Completeness, Consistency, Fault-Tolerance, and Reliability

Assessment of High Integrity Software Components for Completeness, Consistency, Fault-Tolerance, and Reliability

Availability of CAUTRA, a subset of the French air traffic control system

Dependability evaluation of an air traffic control computing system

Contact Info

Product

Resources

About