Basic Concepts and Taxonomy of Dependable and Secure Computing.¶
Avizienis, A., Laprie, J., Randell, B., & Landwehr, C. (2004). Basic Concepts and Taxonomy of Dependable and Secure Computing. IEEE Transactions on Dependable and Secure Computing, 1(1), 11-33.
Cited by¶
8 citations across 8 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Circuit Breaker
- The pattern answers a recurring problem that appears wherever flows can cascade: how does a system stop a fault in one part from cascading into ruin of the whole, when there is no time for deliberation and the safest move is to break the connection first and ask questions later?
This sourceFoundational dependability taxonomy: defines fault prevention/tolerance/removal/forecasting and the error-detection-and-recovery (locate / isolate the error / reconfigure / restart) means of stopping a fault from propagating to system-wide failure.
- The pattern answers a recurring problem that appears wherever flows can cascade: how does a system stop a fault in one part from cascading into ruin of the whole, when there is no time for deliberation and the safest move is to break the connection first and ask questions later?
- Diversification
- Software and security: N-version programming reduces common-mode bugs through independently developed implementations; defence in depth layers controls with uncorrelated failure modes.
This sourceDefines design diversity (N-version programming) and common-mode failure in dependable systems.
- Software and security: N-version programming reduces common-mode bugs through independently developed implementations; defence in depth layers controls with uncorrelated failure modes.
- Fallback Path
- A fallback path is a maintained alternative route that carries a function when the preferred route cannot, entering service on a declared condition and delivering a stated floor rather than the full measure of performance.
This sourceDefines fault handling by reconfiguration onto non-failed components, and separately defines degraded modes of service in which the specification names reduced levels — slow service, limited service, emergency service — that the system signals to its users.
- A fallback path is a maintained alternative route that carries a function when the preferred route cannot, entering service on a declared condition and delivering a stated floor rather than the full measure of performance.
- Fault Tolerance
- A common failure is choosing the wrong boundary (continuing to serve under faults that require shutdown; or shutting down when graceful degradation was acceptable), producing either incorrect behavior or unnecessary downtime
This sourceCanonical dependability taxonomy defining failure-response modes, including fail-safe (halt to a safe state) versus graceful degradation (reduced service), and the design choice between them.
- A common failure is choosing the wrong boundary (continuing to serve under faults that require shutdown; or shutting down when graceful degradation was acceptable), producing either incorrect behavior or unnecessary downtime
- Functional Redundancy (Degeneracy)
- As Avizienis, Laprie, Randell, and Landwehr (2004) make explicit in their dependability taxonomy, common-mode and common-cause failures are the dominant threat to nominally redundant systems: designers shape redundancy by maximizing independence — geographically separated data centers, mechanically and hydraulically diverse control lines, phylogenetically distinct species in an ecological guild.
This sourceAuthoritative dependability taxonomy formalizing common-cause/common-mode failures as the dominant threat to redundant systems; directly supports the failure-mode-decorrelation framing.
- As Avizienis, Laprie, Randell, and Landwehr (2004) make explicit in their dependability taxonomy, common-mode and common-cause failures are the dominant threat to nominally redundant systems: designers shape redundancy by maximizing independence — geographically separated data centers, mechanically and hydraulically diverse control lines, phylogenetically distinct species in an ecological guild.
- Redundancy
- Multiple configurations exist, each with distinct failure-coverage and cost trade-offs: active-active (all copies operate, any one suffices); active-standby (primary operates, standby takes over on failure); diverse-redundancy (different implementations of the same function, reducing common-mode failures); voting (majority among copies determines output)
This sourceAuthoritative taxonomy of dependability that formalizes common-cause and common-mode failures as the dominant threat to redundant systems and frames redundancy engineering as failure-mode decorrelation.
- Multiple configurations exist, each with distinct failure-coverage and cost trade-offs: active-active (all copies operate, any one suffices); active-standby (primary operates, standby takes over on failure); diverse-redundancy (different implementations of the same function, reducing common-mode failures); voting (majority among copies determines output)
- Substitutability
Mechanisms¶
- Reroute and Reentry Protocol
- Because the substitution is governed rather than improvised, the thin-file applicant reaches the same endpoint by a different admissible route — the system degrades gracefully
This sourceDefines partial service failure as a degraded mode that still provides a subset of needed services.
- Because the substitution is governed rather than improvised, the thin-file applicant reaches the same endpoint by a different admissible route — the system degrades gracefully
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:d8cea232568d · see in the full table