Design diversity: an approach to fault tolerance of design faults

ABSTRACT

Diversity of design is discussed as a means to attain fault tolerance with respect to latent design faults in software and hardware. Some potential advantages of this approach in software versus a single design protected by fault avoidance (verification, validation, and proofs) are presented. An extension to design fault tolerance in VLSI circuits is identified. The results of earlier experimental studies are reviewed, and new results of a specification-oriented multiversion software experiment are summarized.

REFERENCES

• 1: Anderson, E. R., F. C. Belz, and E. K. Blum. "SEMANOL(73), A Metalanguage for Programming the Semantics of Programming Languages." Acta Informatica 6, 109--131.
• 2: Avizienis, A., and L. Chen. "On the Implementation of N-version Programming for Software Fault-Tolerance During Execution." Proceedings of COMPSAC 77, (First IEEE-CS International Computer Software and Application Conference), 1977, 1949--155.
• 3: Avizienis, A. "An Experimental Self-Repairing Computer," Information Processing 1968, (Proceedings of the 1968 Congress of the International Federation for Information Processing, Edinburgh, Scotland). Amsterdam: North Holland Publishing Co., 1969, pp. 872--877.
• 4: A. Avizienis , G. C. Gilley , F. P. Mathur , D. A. Rennels , J. A. Rohr , D. K. Rubin, The STAR (Self-Testing And Repairing) Computer: An Investigation of the Theory and Practice of Fault-Tolerant Computer Design, IEEE Transactions on Computers, v.20 n.11, p.1312-1321, November 1971 [doi>10.1109/T-C.1971.223133]
• 5: Algirdas Avižienis, Fault-tolerance and fault-intolerance: Complementary approaches to reliable computing, Proceedings of the international conference on Reliable software, p.458-464, April 21-23, 1975, Los Angeles, California
• 6: Avizienis, A., "Fault-Tolerant Computing: Progress, Problems, and Prospects." Information Processing 77, Proceedings of the IFIP Congress 1977. Toronto, August 8--12, 1977, p. 405--420.
• 7: Avizienis, A., "Fault-Tolerance: The Survival Attribute of Digital Systems." Proceedings of the IEEE, 66, (1978), pp. 1109--1125.
• 8: Avizienis, A. "The Four-Universe Information System Model for Fault-Tolerance." Digest FTCS-12: The 1982 International Symposium on Fault-Tolerant Computing, Santa Monica, CA, June 1982.
• 9: Biggerstaff, T. J., "The Unified Design Specification System (UDSS)." Proceedings on Specifications for Reliable Software, April 79, 104--118.
• 10: Stephen H. Caine , E. Kent Gordon, PDL: a tool for software design, Proceedings of the May 19-22, 1975, national computer conference and exposition, May 19-22, 1975, Anaheim, California [doi>10.1145/1499949.1499995]
• 11: Chen, L., and A. Avizienis. "N-Version Programming: A Fault-tolerance Approach to Reliability of Software Operation," Digest FTCS-8, Toulouse, France, June 1978, pp. 3--9.
• 12: Chen, L. "Improving Software Reliability by N-version Programming." UCLA Computer Science Department Technical Report, UCLA-ENG-7843, University of California, Los Angeles, 1978.
• 13: Hartmut Ehrig , Hans-Jörg Kreowski , Herbert Weber, Algebraic specification schemes for data base systems, Proceedings of the fourth international conference on Very Large Data Bases, p.427-440, September 13-15, 1978, West Berlin, Germany
• 14: Elmendorf, W. R. "Fault-Tolerant Programming." Proceedings of the 1972 International Symposium on Fault-Tolerant Computing, June 1972, 79--83.
• 15: Fischler, M. A., et. al., "Distinct Software: An Approach to Reliable Computing" Proc. 2nd USA-Japan Computer Conference, Tokyo, Japn, 1975, 1--7.
• 16: Granarov, A., J. Arlat, and A. Avizienis. "On the Performance of Software Fault-Tolerance Stategies." Digest of the 1980 International Symposium on Fault-Tolerant Computing, Kyoto, Japan, October 1--3, 1980, pp. 251--253.
• 17: Girard, E. and J. C. Rault. "A Programming Technique for Software Reliability." Proceedings of the 1973 IEEE Symposium on Computer Software Reliability, 44--50.
• 18: Gmeiner, L., and U. Voges. "Software Diversity in Reactor Protection Systems: An Experiment." IFAC Workshop SAFECOMP 1979, Stuttgart, May 16-18, 1979.
• 19: Goguen, J. A., and J. J. Tardo, "An introduction to OBJ", Proc. Specifications for Reliable Software, April 1979, 170--189.
• 20: Goldberg, J., "SIFT: A Provable Fault-Tolerant Computer for Aircraft Flight Control", Information Processing 80 (Proceedings of the IFIP Congress 1980, Tokyo, Japan), pp. 151--156.
• 21: Hopkins, A. L., Jr. et. al., "FTMP---A Highly Reliable Fault-Tolerant Multiprocessor for Aircraft", Proc. IEEE, vol. 66, no. 10, Oct. 1978, pp. 1221--1239.
• 22: John Patrick Joseph Kelly, Specification of fault-tolerant multi-version software: experimental studies of a design diversity approach, University of California, Los Angeles, 1982
• 23: Kelly, J. P. J., and A. Avizienis, "A Specification-Oriented Multi-Version Software Experiment" IEEE 1983 FTCS 13th Annual International Symposium Fault-Tolerant Computing, pp. 120--126.
• 24: K. H. Kim , C. V. Ramamoorthy, Failure-tolerant parallel programming and its supporting system architecture, Proceedings of the June 7-10, 1976, national computer conference and exposition, June 07-10, 1976, New York, New York [doi>10.1145/1499799.1499860]
• 25: Kopetz, H., "Software Redundancy in Real Time Systems." Proc. IFIP Congress 1974, 182--186.
• 26: Wegner, P., (ed.), B. H. Liskov, and V. Berzins. "An Appraisal of Program Specifications," In Research Directions in Software Technology. Cambridge, Mass.: MIT Press, 1979.
• 27: Long, A. B., C. V. Ramamoorthy, et al. "A Methodology for Development and Validation of Critical Software for Nuclear Power Plants." Proc. COMPSAC 77 (IEEE-CS Int. Computer Software & Applications Conf.), 620--626.
• 28: Morrison, P., and E. Morrison, (eds.) Charles Babbage and His Calculating Engines, New York: Dover, 1961, p. 177.
• 29: Popek, G. et al., "LOCUS---A Network Transparent, High Reliability Distributed System," The UCLA Computer Science Department Quarterly, 9, (1981), pp. 75--88.
• 30: Randell, B. "System Structure for Software Fault-Tolerance." IEEE Transactions on Software Engineering, SE-1, (1975), pp. 220--232.
• 31: Riddle, W. E. et al., "Abstract Monitor Types." Proceedings on Specifications for Reliable Software, April 1979, pp. 126--138.
• 32: Robinson, L., and O. Roubine. "SPECIAL---A Specification and Assertion Language." SRI Technical Report, CSL-46, January 1977.
• 33: Toy, W. N. "Fault-Tolerant Design of Local ESS Processors." Proceedings of the IEEE, 66, (1978), pp. 1126--1145.
• 34: U. Voges, Aspects of design, test and validation of the software for a computerized reactor protection system, Proceedings of the 2nd international conference on Software engineering, p.606-610, October 13-15, 1976, San Francisco, California, United States