This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Availability of CAUTRA, a Subset of the French Air Traffic Control System
May 1999 (vol. 48 no. 5)
pp. 528-536

Abstract—The aim of our work is to provide a quantified means of helping in the definition of a new architecture for CAUTRA, a subset of the French Air Traffic Control system. In this paper, we define a set of alternative architectures, give some elements for constructing their dependability models, and compare their availability. Modeling is carried out following a modular and systematic approach, based on the derivation of block models at a high level of abstraction. In a second step, the blocks are replaced by their equivalent Generalized Stochastic Petri Nets to build up the detailed model of the architecture. The evaluations performed permit identification of a subset of architectures whose availability meets the dependability requirements and also identification of the best architecture among this subset.

[1] M. Borrel, “Interactions between Hardware and Software Components: Characterization, Formalization and Modeling—Application to CAUTRA Dependability,” PhD Dissertation (in French), INP, Toulouse, France, 1996.
[2] K. Kanoun and M. Borrel, “Dependability of Fault-Tolerant Systems—Explicit Modeling of the Interactions Between Hardware and Software Components,” Proc. Second IEEE Int'l Computer Performance and Dependability Symp. (IPDS), pp. 252-261, Urbana-Champaign, Ill., 1996.
[3] K. Kanoun, M. Borrel, T. Moreteveille, and A. Peytavin, “Modeling the Dependability of CAUTRA, a Subset of the French Air Traffic Control System,” Proc. 26th IEEE Int'l Symp. Fault-Tolerant Computing (FTCS26), pp. 106-115, Sendai, Japan, 1996. Reduced version of LAAS-report 95515.
[4] A. Avizienis and D.E. Ball, “On the Achievement of a High Dependable and Fault-Tolerant Air Traffic Control System,” Computer, vol. 20, pp. 84-90, 1987.
[5] V.R. Hunt and G.V. Kloster, “The Federal Aviation Administration's Advanced Automation Program,” Computer, vol. 20, pp. 14-17, 1987.
[6] F. Cristian, B. Dancey, and J. Dehn, “Fault Tolerance in the Advanced Automation System,” Proc. 20th IEEE Int'l Symp. Fault-Tolerant Computing, p. 617, Newcastle, U.K., 1990.
[7] E. Amadio, P. Iaboni, M. Lamanna, and P. Mariano, “Implementation of High Availability Mechanisms in the Air Traffic Control SIRS System,” Proc. 24th IEEE Int'l Symp. Fault-Tolerant Computing, pp. 134-136, Austin, Tex., 1994.
[8] J.M. Garot and T. Hawker, “Evaluating Proposed Architectures for the FAA's Advanced Automation System,” Computer, vol. 20, pp. 33-45, 1987.
[9] N. Fota, M. Kâaniche, and K. Kanoun, “Dependability Evaluation of an Air Traffic Control System” Proc. Third IEEE Int'l Computer Performance&Dependability Symp. (IPDS), pp. 206-215, Durham, N.C., 1998.
[10] C. Chen, H. Asada, Y. Kakuda, and T. Kikuno, “Comparison of Hybrid Modular Redundant Multiprocessor Systems with Respect to Performabilities,” Proc. 23rd IEEE Int'l Symp. Fault-Tolerant Computing, pp. 66-75, Toulouse, France, 1993.
[11] G.E. Stark, “Dependability Evaluation of Integrated Hardware/Software Systems,” IEEE Trans. Reliability, vol. 36, pp. 440-444, 1987.
[12] P.I. Pignal, “An Analysis of Hardware and Software Availability Exemplified on the IBM3725 Communication Controller,” IBM J. Research and Development, vol. 32, pp. 268-278, 1988.
[13] J.F. Meyer, K.H. Muralidhar, and W.H. Sanders, “Performability of a Token Network under Transient Fault Conditions,” Proc. 19th IEEE Int'l Symp. Fault-Tolerant Computing, pp. 175-182, Chicago, 1989.
[14] J.K. Muppala, A. Sathaye, R. Howe, and K.S. Trivedi, “Dependability Modeling of a Heterogeneous VAXcluster System Using Stochastic Reward Nets,” Hardware and Software Fault Tolerance in Parallel Computing Systems, D.R. Avresky, ed., pp. 33-59, 1992.
[15] K.H. Prodromides and W.H. Sanders, “Performability Evaluation of CSMA/CD&CSMA/DCR Protocols under Transient Fault Conditions,” IEEE Trans. Reliability, vol. 42, no. 1, pp. 116-127, 1993.
[16] L.A. Tomek and K.S. Trivedi, “Analysis Using Stochastic Reward Nets,” Software Fault Tolerance, M. Lyu, ed., pp. 138-165. J. Wiley, 1995.
[17] J.F. Meyer and W.H. Sanders, “Reduced Base Model Construction Methods for Stochastic Activity Networks,” IEEE J. Selected Areas in Comm., vol. 9, no. 1, pp. 25–36, Jan. 1991.
[18] A. Costes, C. Landrault, and J.-C. Laprie, “Reliability and Availability Models for Maintained Systems Featuring Hardware Failures and Design Faults,” IEEE Trans. Computers, vol. 27, pp. 548-560, 1978.
[19] J.-C. Laprie, C. Béounes, M. Kaâniche, and K. Kanoun, “The Transformation Approach to Modeling and Evaluation of Reliability and Availability Growth of Systems” Proc. 20th IEEE Int'l Symp. Fault-Tolerant Computing, pp. 364-371, Newcastle, U.K., 1990.
[20] J.-C. Laprie and K. Kanoun,“X-ware reliability and availability modelling” IEEE Trans. Software Engineering, vol. 18, no. 2, pp. 130-147, 1992.
[21] J.B. Dugan and M. Lyu, “System-Level Reliability and Sensitivity Analysis for Three Fault-Tolerant Architectures,” Proc. Fourth IFIP Int'l Conf. Dependable Computing for Critical Applications, pp. 295-307, San Diego, Calif., 1994.
[22] J.-C. Laprie, “Dependability Evaluation of Software Systems in Operation,” IEEE Trans. Software Eng., vol. 10, pp. 701-714, 1984.
[23] I. Lee and R.K. Iyer, “Faults, Symptoms, and Software Fault Tolerance in Tandem GUARDIAN90 Operating System,” Proc. 23rd IEEE Int'l Symp. Fault-Tolerant Computing (FTCS23), pp. 20-29, Toulouse, France 1993.
[24] C. Béounes, M. Aguéra, J. Arlat, S. Bachman, C. Bourdeau, J.E. Doucet, K. Kanoun, J.-C. Laprie, S. Metge, J. Moreira de Souza, D. Powell, and P. Spiesser, “SURF2: A Program for Dependability Evaluation of Complex Hardware and Software Systems” Proc. 23rd IEEE Int'l Symp. Fault-Tolerant Computing, pp. 668-673, Toulouse, France, 1993.
[25] H.H. Ammar, Y.F. Huang, and R.W. Liu, “Hierarchical Models for Systems Reliability, Maintainability, and Availability,” IEEE Trans. Circuits and Systems, vol. 34, pp. 629-638, 1987.
[26] G. Chiola, S. Donatelli, and G. Franceschinis, "GSPNs versus SPNs: What is the Actual Role of Immediate Transitions? Proc. Fourth Int'l Workshop Petri Nets and Performance Models, pp. 20-31,Melbourne, Australia, IEEE CS Press, Dec. 1991.
[27] J.F. Meyer and W.H. Sanders, “Specification and Construction of Performability Models,” Proc. Int'l Workshop Performability Modeling of Computer and Comm. Systems, pp. 1-32, Mont Saint Michel, France, 1993.
[28] A. Bobbio and K. Trivedi, “An Aggregation Technique for the Transient Analysis of Stiff Markov Chains,” IEEE Trans. Computers, vol. 35, pp. 803-814, 1986.

Index Terms:
Dependability modeling, generalized stochastic Petri Nets, Markov chains, model composition.
Citation:
Karama Kanoun, Marie Borrel, Thierry Morteveille, Alain Peytavin, "Availability of CAUTRA, a Subset of the French Air Traffic Control System," IEEE Transactions on Computers, vol. 48, no. 5, pp. 528-536, May 1999, doi:10.1109/12.769435
Usage of this product signifies your acceptance of the Terms of Use.