Mars Rover — Spirit Linux and Windows

Mars Rover - Spirit

Linux and Windows do not Stabilize

Self-Stabilization

Self-Stabilization

Token Passing

Token Passing: Faults

Is Self-Stabilization a Toy?

Stabilization Stack

Implementation Bottleneck

Periodic Reset Monitor

Up to now

Basic Directions

Assumptions

Tailored Kernel

Tiny SOS Scheduler

Sketch of Proof

Talk Outline

The Gap.

Trivial Example

Stabilization Preserving Compiler – a closer look

The Transformation

Talk Outline

Fault Model Reflecting Reality

Middleware Architecture

Monitor-Restarter for Process and Subsystem

Towards Robust Software

Our Contribution

Our Contribution Cont.

External Monitoring

Talk Conclusions

Virtualization

Terminology

Terminology, Cont.

Self-Stabilization

Self-Stabilization, Cont.

Example: Token Passing Algorithm

Token Passing: Self Stabilization

Rootkit Activity – Current State of Art

Rootkit Activity – Current State of Art

Rootkit Activity – Current State of Art

Rootkit Activity – Current State of Art

Rootkit Activity – Current State of Art

Reload system from ROM upon a hardware timer signal

Existing Infrastructure

Existing Infrastructure

Our Architecture: Watchdog

Our Architecture: Hardwarefacilitated integrity checking

Implementation: Employ external tools for examining VMs

Implementation: Employ external tools for examining VMs (cont)

Future Work

Future Work