Robust Mixed-Criticality Systems

Certification authorities require correctness and survivability. In the temporal domain this requires a convincing argument that all deadlines will be met under error free conditions, and that when certain defined errors occur the behaviour of the system is still predictable and safe. This means that occasional execution-time overruns should be tolerated and where more severe errors occur levels of graceful degradation should be supported. With mixed-criticality systems, fault tolerance must be criticality aware, i.e. some tasks should degrade less than others. In this paper a quantitative notion of robustness is defined, and it is shown how fixed priority-based task scheduling can be structured to maximise the likelihood of a system remaining fail operational or fail robust (the latter implying that an occasional job may be skipped if all other deadlines are met). Analysis is developed for fail operational and fail robust behaviour, optimal priority ordering is addressed and an experimental evaluation is described. Overall, the approach presented allows robustness to be balanced against schedulability. A designer would thus be able to explore the design space so defined

On the tailoring of CAST-32A certification guidance to real COTS multicore architectures

The use of Commercial Off-The-Shelf (COTS) multicores in real-time industry is on the rise due to multicores' potential performance increase and energy reduction. Yet, the unpredictable impact on timing of contention in shared hardware resources challenges certification. Furthermore, most safety certification standards target single-core architectures and do not provide explicit guidance for multicore processors. Recently, however, CAST-32A has been presented providing guidance for software planning, development and verification in multicores. In this paper, from a theoretical level, we provide a detailed review of CAST-32A objectives and the difficulty of reaching them under current COTS multicore design trends; at experimental level, we assess the difficulties of the application of CAST-32A to a real multicore processor, the NXP P4080.This work has been partially supported by the Spanish Ministry of Economy and Competitiveness (MINECO) under grant TIN2015-65316-P and the HiPEAC Network of Excellence. Jaume Abella has been partially supported by the MINECO under Ramon y Cajal grant RYC-2013-14717.Peer ReviewedPostprint (author's final draft

Testing the SOC hypothesis for the magnetosphere

As noted by Chang, the hypothesis of Self-Organised Criticality provides a theoretical framework in which the low dimensionality seen in magnetospheric indices can be combined with the scaling seen in their power spectra and the recently-observed plasma bursty bulk flows. As such, it has considerable appeal, describing the aspects of the magnetospheric fuelling:storage:release cycle which are generic to slowly-driven, interaction-dominated, thresholded systems rather than unique to the magnetosphere. In consequence, several recent numerical "sandpile" algorithms have been used with a view to comparison with magnetospheric observables. However, demonstration of SOC in the magnetosphere will require further work in the definition of a set of observable properties which are the unique "fingerprint" of SOC. This is because, for example, a scale-free power spectrum admits several possible explanations other than SOC. A more subtle problem is important for both simulations and data analysis when dealing with multiscale and hence broadband phenomena such as SOC. This is that finite length systems such as the magnetosphere or magnetotail will by definition give information over a small range of orders of magnitude, and so scaling will tend to be narrowband. Here we develop a simple framework in which previous descriptions of magnetospheric dynamics can be described and contrasted. We then review existing observations which are indicative of SOC, and ask if they are sufficient to demonstrate it unambiguously, and if not, what new observations need to be made?Comment: 29 pages, 0 figures. Based on invited talk at Spring American Geophysical Union Meeting, 1999. Journal of Atmospheric and Solar Terrestrial Physics, in pres

Molecular motors robustly drive active gels to a critically connected state

Living systems often exhibit internal driving: active, molecular processes drive nonequilibrium phenomena such as metabolism or migration. Active gels constitute a fascinating class of internally driven matter, where molecular motors exert localized stresses inside polymer networks. There is evidence that network crosslinking is required to allow motors to induce macroscopic contraction. Yet a quantitative understanding of how network connectivity enables contraction is lacking. Here we show experimentally that myosin motors contract crosslinked actin polymer networks to clusters with a scale-free size distribution. This critical behavior occurs over an unexpectedly broad range of crosslink concentrations. To understand this robustness, we develop a quantitative model of contractile networks that takes into account network restructuring: motors reduce connectivity by forcing crosslinks to unbind. Paradoxically, to coordinate global contractions, motor activity should be low. Otherwise, motors drive initially well-connected networks to a critical state where ruptures form across the entire network.Comment: Main text: 21 pages, 5 figures. Supplementary Information: 13 pages, 8 figure