Robust Mixed-Criticality Systems

TY - JOUR

T1 - Robust Mixed-Criticality Systems

AU - Burns, Alan

AU - Davis, Robert Ian

AU - Baruah, Sanjoy

AU - Bate, Iain John

N1 - © 2018 IEEE. This is an author-produced version of the published paper. Uploaded in accordance with the publisher’s self-archiving policy. Further copying may not be permitted; contact the publisher for details

PY - 2018/10/1

Y1 - 2018/10/1

N2 - Certification authorities require correctness and survivability. In the temporal domain this requires a convincing argument that all deadlines will be met under error free conditions, and that when certain defined errors occur the behaviour of the system is still predictable and safe. This means that occasional execution-time overruns should be tolerated and where more severe errors occurlevels of graceful degradation should be supported. With mixed-criticality systems, fault tolerance must be criticality aware, i.e. some tasks should degrade less than others. In this paper a quantitative notion of robustness is defined, and it is shown how fixed priority-based task scheduling can be structured to maximise the likelihood of a system remaining fail operational or fail robust (the latter implying that an occasional job may be skipped if all other deadlines are met). Analysis is developed for fail operational and fail robust behaviour, optimal priority ordering is addressed and an experimental evaluation is described. Overall, the approach presented allows robustness to be balanced against schedulability. A designer would thus be able to explore the design space so defined.

AB - Certification authorities require correctness and survivability. In the temporal domain this requires a convincing argument that all deadlines will be met under error free conditions, and that when certain defined errors occur the behaviour of the system is still predictable and safe. This means that occasional execution-time overruns should be tolerated and where more severe errors occurlevels of graceful degradation should be supported. With mixed-criticality systems, fault tolerance must be criticality aware, i.e. some tasks should degrade less than others. In this paper a quantitative notion of robustness is defined, and it is shown how fixed priority-based task scheduling can be structured to maximise the likelihood of a system remaining fail operational or fail robust (the latter implying that an occasional job may be skipped if all other deadlines are met). Analysis is developed for fail operational and fail robust behaviour, optimal priority ordering is addressed and an experimental evaluation is described. Overall, the approach presented allows robustness to be balanced against schedulability. A designer would thus be able to explore the design space so defined.

KW - fault tolerance

KW - mixed criticality

KW - Real-time systems

UR - https://www-users.cs.york.ac.uk/~robdavis/

UR - https://www-users.cs.york.ac.uk/~robdavis/papers/ToCRobustMCS.pdf

U2 - 10.1109/TC.2018.2831227

DO - 10.1109/TC.2018.2831227

M3 - Article

SN - 0018-9340

VL - 67

SP - 1478

EP - 1491

JO - IEEE Transactions on Computers

JF - IEEE Transactions on Computers

IS - 10

ER -