Formal Availability Analysis using Theorem Proving

Availability analysis is used to assess the possible failures and their restoration process for a given system. This analysis involves the calculation of instantaneous and steady-state availabilities of the individual system components and the usage of this information along with the commonly used availability modeling techniques, such as Availability Block Diagrams (ABD) and Fault Trees (FTs) to determine the system-level availability. Traditionally, availability analyses are conducted using paper-and-pencil methods and simulation tools but they cannot ascertain absolute correctness due to their inaccuracy limitations. As a complementary approach, we propose to use the higher-order-logic theorem prover HOL4 to conduct the availability analysis of safety-critical systems. For this purpose, we present a higher-order-logic formalization of instantaneous and steady-state availability, ABD configurations and generic unavailability FT gates. For illustration purposes, these formalizations are utilized to conduct formal availability analysis of a satellite solar array, which is used as the main source of power for the Dong Fang Hong-3 (DFH-3) satellite.Comment: 16 pages. arXiv admin note: text overlap with arXiv:1505.0264

On the Behaviour of General-Purpose Applications on Cloud Storages

Managing data over cloud infrastructures raises novel challenges with respect to existing and well studied approaches such as ACID and long running transactions. One of the main requirements is to provide availability and partition tolerance in a scenario with replicas and distributed control. This comes at the price of a weaker consistency, usually called eventual consistency. These weak memory models have proved to be suitable in a number of scenarios, such as the analysis of large data with Map-Reduce. However, due to the widespread availability of cloud infrastructures, weak storages are used not only by specialised applications but also by general purpose applications. We provide a formal approach, based on process calculi, to reason about the behaviour of programs that rely on cloud stores. For instance, one can check that the composition of a process with a cloud store ensures `strong' properties through a wise usage of asynchronous message-passing

Making Operation-based CRDTs Operation-based

Conflict-free Replicated Datatypes can simplify the design of predictable eventual consistency. They can be classified into state-based or operation-based. Operation-based approaches have the potential for allowing compact designs in both the sent message and the object state size, but cur- rent approaches are still far from this objective. Here we explore the design space for operation-based solutions, and we leverage the interaction with the middleware by offering a technique that delivers very compact solutions, while only broadcasting operation names and arguments.(undefined)(undefined

Automated Validation of State-Based Client-Centric Isolation with TLA ⁺

Clear consistency guarantees on data are paramount for the design and implementation of distributed systems. When implementing distributed applications, developers require approaches to verify the data consistency guarantees of an implementation choice. Crooks et al. define a state-based and client-centric model of database isolation. This paper formalizes this state-based model in, reproduces their examples and shows how to model check runtime traces and algorithms with this formalization. The formalized model in enables semi-automatic model checking for different implementation alternatives for transactional operations and allows checking of conformance to isolation levels. We reproduce examples of the original paper and confirm the isolation guarantees of the combination of the well-known 2-phase locking and 2-phase commit algorithms. Using model checking this formalization can also help finding bugs in incorrect specifications. This improves feasibility of automated checking of isolation guarantees in synthesized synchronization implementations and it provides an environment for experimenting with new designs.</p

RAD59 and RAD1 cooperate in translocation formation by single-strand annealing in Saccharomyces cerevisiae

Studies in the budding yeast, Saccharomyces cerevisiae, have demonstrated that a substantial fraction of double-strand break repair following acute radiation exposure involves homologous recombination between repetitive genomic elements. We have previously described an assay in S. cerevisiae that allows us to model how repair of multiple breaks leads to the formation of chromosomal translocations by single-strand annealing (SSA) and found that Rad59, a paralog of the single-stranded DNA annealing protein Rad52, is critically important in this process. We have constructed several rad59 missense alleles to study its function more closely. Characterization of these mutants revealed proportional defects in both translocation formation and spontaneous direct-repeat recombination, which is also thought to occur by SSA. Combining the rad59 missense alleles with a null allele of RAD1, which encodes a subunit of a nuclease required for the removal of non-homologous tails from annealed intermediates, substantially suppressed the low frequency of translocations observed in rad1-null single mutants. These data suggest that at least one role of Rad59 in translocation formation by SSA is supporting the machinery required for cleavage of non-homologous tails

Having a lot of a good thing: multiple important group memberships as a source of self-esteem.

Copyright: © 2015 Jetten et al. This is an open access article distributed under the terms of the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are creditedMembership in important social groups can promote a positive identity. We propose and test an identity resource model in which personal self-esteem is boosted by membership in additional important social groups. Belonging to multiple important group memberships predicts personal self-esteem in children (Study 1a), older adults (Study 1b), and former residents of a homeless shelter (Study 1c). Study 2 shows that the effects of multiple important group memberships on personal self-esteem are not reducible to number of interpersonal ties. Studies 3a and 3b provide longitudinal evidence that multiple important group memberships predict personal self-esteem over time. Studies 4 and 5 show that collective self-esteem mediates this effect, suggesting that membership in multiple important groups boosts personal self-esteem because people take pride in, and derive meaning from, important group memberships. Discussion focuses on when and why important group memberships act as a social resource that fuels personal self-esteem.This study was supported by 1. Australian Research Council Future Fellowship (FT110100238) awarded to Jolanda Jetten (see http://www.arc.gov.au) 2. Australian Research Council Linkage Grant (LP110200437) to Jolanda Jetten and Genevieve Dingle (see http://www.arc.gov.au) 3. support from the Canadian Institute for Advanced Research Social Interactions, Identity and Well-Being Program to Nyla Branscombe, S. Alexander Haslam, and Catherine Haslam (see http://www.cifar.ca)

Automatic Analysis of Consistency Properties of Distributed Transaction Systems in Maude

Many transaction systems distribute, partition, and replicate their data for scalability, availability, and fault tolerance. However, observing and maintaining strong consistency of distributed and partially replicated data leads to high transaction latencies. Since different applications require different consistency guarantees, there is a plethora of consistency properties---from weak ones such as read atomicity through various forms of snapshot isolation to stronger serializability properties---and distributed transaction systems (DTSs) guaranteeing such properties. This paper presents a general framework for formally specifying a DTS in Maude, and formalizes in Maude nine common consistency properties for DTSs so defined. Furthermore, we provide a fully automated method for analyzing whether the DTS satisfies the desired property for all initial states up to given bounds on system parameters. This is based on automatically recording relevant history during a Maude run and defining the consistency properties on such histories. To the best of our knowledge, this is the first time that model checking of all these properties in a unified, systematic manner is investigated. We have implemented a tool that automates our method, and use it to model check state-of-the-art DTSs such as P-Store, RAMP, Walter, Jessy, and ROLA.Ope

Key indicators to track current progress and future ambition of the Paris Agreement

Current emission pledges to the Paris Agreement appear insufficient to hold the global average temperature increase to well below 2 °C above pre-industrial levels. Yet, details are missing on how to track progress towards the â € Paris goal', inform the five-yearly â € global stocktake', and increase the ambition of Nationally Determined Contributions (NDCs). We develop a nested structure of key indicators to track progress through time. Global emissions track aggregated progress, country-level decompositions track emerging trends that link directly to NDCs, and technology diffusion indicates future reductions. We find the recent slowdown in global emissions growth is due to reduced growth in coal use since 2011, primarily in China and secondarily in the United States. The slowdown is projected to continue in 2016, with global CO 2 emissions from fossil fuels and industry similar to the 2015 level of 36 GtCO 2. Explosive and policy-driven growth in wind and solar has contributed to the global emissions slowdown, but has been less important than economic factors and energy efficiency. We show that many key indicators are currently broadly consistent with emission scenarios that keep temperatures below 2 °C, but the continued lack of large-scale carbon capture and storage threatens 2030 targets and the longer-term Paris ambition of net-zero emissions