The SIFT hardware/software systems. Volume 1: A detailed description

This report contains a detailed description of the software implemented fault-tolerant computer's operating system and hardware subsystems. The Software Implemented Fault-Tolerant (SIFT) computer system was developed as an experimental vehicle for fault-tolerant systems research. The SIFT effort began with broad, in-depth studies stating the reliability and processing requirements for digital computers which would, in the aircraft of the 1990's, control flight-critical functions

Model reduction by trimming for a class of semi-Markov reliability models and the corresponding error bound

Semi-Markov processes have proved to be an effective and convenient tool to construct models of systems that achieve reliability by redundancy and reconfiguration. These models are able to depict complex system architectures and to capture the dynamics of fault arrival and system recovery. A disadvantage of this approach is that the models can be extremely large, which poses both a model and a computational problem. Techniques are needed to reduce the model size. Because these systems are used in critical applications where failure can be expensive, there must be an analytically derived bound for the error produced by the model reduction technique. A model reduction technique called trimming is presented that can be applied to a popular class of systems. Automatic model generation programs were written to help the reliability analyst produce models of complex systems. This method, trimming, is easy to implement and the error bound easy to compute. Hence, the method lends itself to inclusion in an automatic model generator

Measurement of SIFT operating system overhead

The overhead of the software implemented fault tolerance (SIFT) operating system was measured. Several versions of the operating system evolved. Each version represents different strategies employed to improve the measured performance. Three of these versions are analyzed. The internal data structures of the operating systems are discussed. The overhead of the SIFT operating system was found to be of two types: vote overhead and executive task overhead. Both types of overhead were found to be significant in all versions of the system. Improvements substantially reduced this overhead; even with these improvements, the operating system consumed well over 50% of the available processing time

A technique for evaluating the application of the pin-level stuck-at fault model to VLSI circuits

Accurate fault models are required to conduct the experiments defined in validation methodologies for highly reliable fault-tolerant computers (e.g., computers with a probability of failure of 10 to the -9 for a 10-hour mission). Described is a technique by which a researcher can evaluate the capability of the pin-level stuck-at fault model to simulate true error behavior symptoms in very large scale integrated (VLSI) digital circuits. The technique is based on a statistical comparison of the error behavior resulting from faults applied at the pin-level of and internal to a VLSI circuit. As an example of an application of the technique, the error behavior of a microprocessor simulation subjected to internal stuck-at faults is compared with the error behavior which results from pin-level stuck-at faults. The error behavior is characterized by the time between errors and the duration of errors. Based on this example data, the pin-level stuck-at fault model is found to deliver less than ideal performance. However, with respect to the class of faults which cause a system crash, the pin-level, stuck-at fault model is found to provide a good modeling capability

Experimental validation of clock synchronization algorithms

The objective of this work is to validate mathematically derived clock synchronization theories and their associated algorithms through experiment. Two theories are considered, the Interactive Convergence Clock Synchronization Algorithm and the Midpoint Algorithm. Special clock circuitry was designed and built so that several operating conditions and failure modes (including malicious failures) could be tested. Both theories are shown to predict conservative upper bounds (i.e., measured values of clock skew were always less than the theory prediction). Insight gained during experimentation led to alternative derivations of the theories. These new theories accurately predict the behavior of the clock system. It is found that a 100 percent penalty is paid to tolerate worst-case failures. It is also shown that under optimal conditions (with minimum error and no failures) the clock skew can be as much as three clock ticks. Clock skew grows to six clock ticks when failures are present. Finally, it is concluded that one cannot rely solely on test procedures or theoretical analysis to predict worst-case conditions

Advanced techniques in reliability model representation and solution

The current tendency of flight control system designs is towards increased integration of applications and increased distribution of computational elements. The reliability analysis of such systems is difficult because subsystem interactions are increasingly interdependent. Researchers at NASA Langley Research Center have been working for several years to extend the capability of Markov modeling techniques to address these problems. This effort has been focused in the areas of increased model abstraction and increased computational capability. The reliability model generator (RMG) is a software tool that uses as input a graphical object-oriented block diagram of the system. RMG uses a failure-effects algorithm to produce the reliability model from the graphical description. The ASSURE software tool is a parallel processing program that uses the semi-Markov unreliability range evaluator (SURE) solution technique and the abstract semi-Markov specification interface to the SURE tool (ASSIST) modeling language. A failure modes-effects simulation is used by ASSURE. These tools were used to analyze a significant portion of a complex flight control system. The successful combination of the power of graphical representation, automated model generation, and parallel computation leads to the conclusion that distributed fault-tolerant system architectures can now be analyzed

Design and optimization of a compact laser-driven proton beamline

Laser-accelerated protons, generated by irradiating a solid target with a short, energetic laser pulse at high intensity (I > 1018W·cm-2), represent a complementary if not outperforming source compared to conventional accelerators, due to their intrinsic features, such as high beam charge and short bunch duration. However, the broadband energy spectrum of these proton sources is a bottleneck that precludes their use in applications requiring a more reduced energy spread. Consequently, in recent times strong effort has been put to overcome these limits and to develop laser-driven proton beamlines with low energy spread. In this paper, we report on beam dynamics simulations aiming at optimizing a laser-driven beamline - i.e. a laser-based proton source coupled to conventional magnetic beam manipulation devices - producing protons with a reduced energy spread, usable for applications. The energy range of investigation goes from 2 to 20 MeV, i.e. the typical proton energies that can be routinely obtained using commercial TW-power class laser systems. Our beamline design is capable of reducing the energy spread below 20%, still keeping the overall transmission efficiency around 1% and producing a proton spot-size in the range of 10 mm2. We briefly discuss the results in the context of applications in the domain of Cultural Heritage

L'anima, il triangolo e la virtù. Sulla figura del paragone implicito nel Menone di Platone

I dialoghi di Platone possono essere considerati i documenti più importanti dello straordinario potere mimetico della scrittura visiva, una scrittura, cioè, capace di “far vedere”, capace di disegnare immagini usando soltanto parole. Grazie anche alla grande lezione del teatro attico, Platone rende spettatori i suoi lettori, i quali, leggendo i dialoghi, vedono non solo i personaggi parlanti, ma, grazie al potere visivo della scrittura mimetica, vedono anche ciò di cui i personaggi parlano. Sono molti i dispositivi retorici messi in atto da Platone scrittore per rendere possibile tale resa visiva della filosofia. In questo testo porto un esempio, tratto dal Menone, del potere visivo del paragone implicito. Con l’espressione “paragone implicito” intendo riferirmi a quello speciale tipo di paragone che non è esplicitamente e compiutamente presentato dal testo, ma che il testo si limita ad evocare e che, una volta evocato, concorre a determinare il formarsi dell’immagine