naa a22 4500 510791220 CHVBK 20180411083320.0 cr unu---uuuuu 180411e20131201xx s 000 0 eng 10.1007/s11334-013-0215-x doi (NATIONALLICENCE)springer-10.1007/s11334-013-0215-x Deliberative, search-based mitigation strategies for model-based software health management [Elektronische Daten] [Nagabhushan Mahadevan, Abhishek Dubey, Daniel Balasubramanian, Gabor Karsai] Rising software complexity in aerospace systems makes them very difficult to analyze and prepare for all possible fault scenarios at design time; therefore, classical run-time fault tolerance techniques such as self-checking pairs and triple modular redundancy are used. However, several recent incidents have made it clear that existing software fault tolerance techniques alone are not sufficient. To improve system dependability, simpler, yet formally specified and verified run-time monitoring, diagnosis, and fault mitigation capabilities are needed. Such architectures are already in use for managing the health of vehicles and systems. Software health management is the application of these techniques to software systems. In this paper, we briefly describe the software health management techniques and architecture developed by our research group. The foundation of the architecture is a real-time component framework (built upon ARINC-653 platform services) that defines a model of computation for software components. Dedicated architectural elements: the Component Level Health Manager (CLHM) and System Level Health Manager (SLHM) provide the health management services: anomaly detection, fault source isolation, and fault mitigation. The SLHM includes a diagnosis engine that (1) uses a Timed Failure Propagation Graph (TFPG) model derived from the component assembly model, (2) reasons about cascading fault effects in the system, and (3) isolates the fault source component(s). Thereafter, the appropriate system-level mitigation action is taken. The main focus of this article is the description of the fault mitigation architecture that uses goal-based deliberative reasoning to determine the best mitigation actions for recovering the system from the identified failure mode. Springer-Verlag London, 2013 Software health management nationallicence Deliberative reasoning nationallicence Component-based software development nationallicence ARINC-653 nationallicence Mahadevan Nagabhushan Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut Dubey Abhishek Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut Balasubramanian Daniel Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut Karsai Gabor Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut Innovations in Systems and Software Engineering Springer London 9/4(2013-12-01), 293-318 1614-5046 9:4<293 2013 9 11334 https://doi.org/10.1007/s11334-013-0215-x text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s11334-013-0215-x text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Mahadevan Nagabhushan Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut NATIONALLICENCE 700 1- Dubey Abhishek Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut NATIONALLICENCE 700 1- Balasubramanian Daniel Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut NATIONALLICENCE 700 1- Karsai Gabor Department of Electrical Engineering and Computer Science, Institute for Software-Integrated Systems, Vanderbilt University, 37212, Nashville, TN, USA aut NATIONALLICENCE 773 0- Innovations in Systems and Software Engineering Springer London 9/4(2013-12-01), 293-318 1614-5046 9:4<293 2013 9 11334 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer