Surviving sensor network software faults

Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles Pub Date : 2009-10-11 DOI:10.1145/1629575.1629598

Yang Chen, O. Gnawali, Maria A. Kazandjieva, P. Levis, J. Regehr

{"title":"Surviving sensor network software faults","authors":"Yang Chen, O. Gnawali, Maria A. Kazandjieva, P. Levis, J. Regehr","doi":"10.1145/1629575.1629598","DOIUrl":null,"url":null,"abstract":"We describe Neutron, a version of the TinyOS operating system that efficiently recovers from memory safety bugs. Where existing schemes reboot an entire node on an error, Neutron's compiler and runtime extensions divide programs into recovery units and reboot only the faulting unit. The TinyOS kernel itself is a recovery unit: a kernel safety violation appears to applications as the processor being unavailable for 10-20 milliseconds.\n Neutron further minimizes safety violation cost by supporting \"precious\" state that persists across reboots. Application data, time synchronization state, and routing tables can all be declared as precious. Neutron's reboot sequence conservatively checks that precious state is not the source of a fault before preserving it. Together, recovery units and precious state allow Neutron to reduce a safety violation's cost to time synchronization by 94% and to a routing protocol by 99.5%. Neutron also protects applications from losing data. Neutron provides this recovery on the very limited resources of a tiny, low-power microcontroller.","PeriodicalId":20672,"journal":{"name":"Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2009-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"59","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/1629575.1629598","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 59

Abstract

We describe Neutron, a version of the TinyOS operating system that efficiently recovers from memory safety bugs. Where existing schemes reboot an entire node on an error, Neutron's compiler and runtime extensions divide programs into recovery units and reboot only the faulting unit. The TinyOS kernel itself is a recovery unit: a kernel safety violation appears to applications as the processor being unavailable for 10-20 milliseconds. Neutron further minimizes safety violation cost by supporting "precious" state that persists across reboots. Application data, time synchronization state, and routing tables can all be declared as precious. Neutron's reboot sequence conservatively checks that precious state is not the source of a fault before preserving it. Together, recovery units and precious state allow Neutron to reduce a safety violation's cost to time synchronization by 94% and to a routing protocol by 99.5%. Neutron also protects applications from losing data. Neutron provides this recovery on the very limited resources of a tiny, low-power microcontroller.

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

幸存的传感器网络软件故障

我们介绍了Neutron，这是TinyOS操作系统的一个版本，可以有效地从内存安全漏洞中恢复。现有的方案在出现错误时重新启动整个节点，而Neutron的编译器和运行时扩展将程序划分为恢复单元，只重新启动故障单元。TinyOS内核本身是一个恢复单元:当处理器在10-20毫秒内不可用时，应用程序就会出现内核安全违规。Neutron通过支持在重启过程中持续存在的“珍贵”状态，进一步将安全违规成本降至最低。应用程序数据、时间同步状态和路由表都可以声明为宝贵的。Neutron的重启序列在保存珍贵的状态之前，会保守地检查它是不是故障的来源。恢复单元和珍贵状态使Neutron能够将违反安全的时间同步成本降低94%，将违反路由协议的成本降低99.5%。Neutron还可以防止应用程序丢失数据。Neutron在非常有限的微型低功耗微控制器资源上提供这种恢复。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles

自引率

0.00%

发文量