Proactive resilience through architectural hybridization

In a recent work, we have shown that it is not possible to dependably build any type of distributed f fault or intrusiontolerant system under the asynchronous model. This result follows from the fact that in an asynchronous environment one cannot guarantee that the system terminates its execution before the occurrence of more than the assumed number of faults. Some systems resorted to proactive recovery as a way to address this problem, by attempting to ensure that no more than f faults ever occur: nodes are periodically rejuvenated to remove the effects of faults or malicious attacks. However, asynchronous systems with proactive recovery also suffer from the same problem. In fact, proactive recovery protocols usually require stronger assumptions (e.g., synchrony, security) than the system that is proactively recovered. To solve this contradiction, we work with a hybrid distributed system model. We propose proactive resilience as a new and more resilient approach to proactive recover...

• Type: Conference
• Year: 2006
• Where: SAC
• Authors: Paulo Sousa, Nuno Ferreira Neves, Paulo Veríssimo
• Keywords: Applied Computing, Operating Systems, Proactive Recovery, Proactive Resilience, SAC 2006