Filters








5,455 Hits in 8.6 sec

Using Crash Hoare logic for certifying the FSCQ file system

Haogang Chen, Daniel Ziegler, Tej Chajed, Adam Chlipala, M. Frans Kaashoek, Nickolai Zeldovich
2015 Proceedings of the 25th Symposium on Operating Systems Principles - SOSP '15  
FSCQ is the first file system with a machine-checkable proof (using the Coq proof assistant) that its implementation meets its specification and whose specification includes crashes.  ...  Using CHL, we developed, specified, and proved the correctness of the FSCQ file system.  ...  Proving that a file system is crash-safe is important, because it is otherwise hard for the file-system developer to ensure that the code correctly handles all possible points where a crash could occur  ... 
doi:10.1145/2815400.2815402 dblp:conf/sosp/ChenZCCKZ15 fatcat:sjbqajcixzg2hgdcqhhetqqtx4

Weakly Durable High-Performance Transactions [article]

Yun-Sheng Chang, Yu-Fang Chen, Hsiang-Shang Ko
2021 arXiv   pre-print
AciKV is a middle ground between systems that perform fast atomic operations, and ones that support transactions; this middle ground is useful as it provides similar performance to the former, while prevents  ...  Our key observation is that, because of the frequent use of synchronization primitives, systems with strong durability can hardly utilize the extremely high parallelism granted by modern storage devices  ...  consistent snapshot in a crash-safe manner.  ... 
arXiv:2110.01465v1 fatcat:2ldbqdoxrzctnceddczm2b77qy

The Rio file cache

Peter M. Chen, Wee Teck Ng, Subhachandra Chandra, Christopher Aycock, Gurushankar Rajamani, David Lowell
1996 Proceedings of the seventh international conference on Architectural support for programming languages and operating systems - ASPLOS-VII  
One of the fundamental limits to high-performance, high-reliability file systems is memory's vulnerability to system crashes.  ...  Reliable memory enables a system to achieve the best of both worlds: reliability equivalent to a write-through file cache, where every write is instantly safe, and performance equivalent to a pure write-back  ...  Reliability The key to Rio is reliability: can files in memory truly be made as safe from system crashes as files on disk?  ... 
doi:10.1145/237090.237154 dblp:conf/asplos/ChenNCARL96 fatcat:46pediy4fjdtrepcsreugndvku

The Rio file cache

Peter M. Chen, Wee Teck Ng, Subhachandra Chandra, Christopher Aycock, Gurushankar Rajamani, David Lowell
1996 ACM SIGOPS Operating Systems Review  
One of the fundamental limits to high-performance, high-reliability file systems is memory's vulnerability to system crashes.  ...  Reliable memory enables a system to achieve the best of both worlds: reliability equivalent to a write-through file cache, where every write is instantly safe, and performance equivalent to a pure write-back  ...  Reliability The key to Rio is reliability: can files in memory truly be made as safe from system crashes as files on disk?  ... 
doi:10.1145/248208.237154 fatcat:ilv55mzyxzbptb4okyt6phvhqi

The Rio file cache

Peter M. Chen, Wee Teck Ng, Subhachandra Chandra, Christopher Aycock, Gurushankar Rajamani, David Lowell
1996 SIGPLAN notices  
One of the fundamental limits to high-performance, high-reliability file systems is memory's vulnerability to system crashes.  ...  Reliable memory enables a system to achieve the best of both worlds: reliability equivalent to a write-through file cache, where every write is instantly safe, and performance equivalent to a pure write-back  ...  Reliability The key to Rio is reliability: can files in memory truly be made as safe from system crashes as files on disk?  ... 
doi:10.1145/248209.237154 fatcat:irps4esowjc4rozcud7z6nvwly

The design and verification of the Rio file cache

W.T. Ng, P.M. Chen
2001 IEEE transactions on computers  
This paper describes the systematic, quantitative process we used to design and verify the Rio file cache on Intel PCs running FreeBSD and the reliability and performance of the resulting system.  ...  The goal of the Rio (RAM I/O) file cache is to make ordinary main memory safe for persistent storage by enabling memory to survive operating system crashes.  ...  ACKNOWLEDGMENTS This research was supported in part by US National Science Foundation (NSF) grant MIP-9521386, AT&T Labs, the IBM University Partnership Program, and Intel Technology for Education 2000  ... 
doi:10.1109/12.919278 fatcat:o4b32ep6qvc6flvo7asp5dxlmm

WiscKey

Lanyue Lu, Thanumalayan Sankaranarayana Pillai, Hariharan Gopalakrishnan, Andrea C. Arpaci-Dusseau, Remzi H. Arpaci-Dusseau
2017 ACM Transactions on Storage  
We present WiscKey, a persistent LSM-tree-based key-value store with a performance-oriented data layout that separates keys from values to minimize I/O amplification.  ...  The design of WiscKey is highly SSD optimized, leveraging both the sequential and random performance characteristics of the device.  ...  We verify the crash consistency mechanisms of WiscKey by using the ALICE tool [45] ; the tool chooses and simulates a comprehensive set of system crashes that have a high probability of exposing inconsistency  ... 
doi:10.1145/3033273 fatcat:ylsdbtcl3vhvfoxtknludhny2i

Authenticated storage using small trusted hardware

Hsin-Jung Yang, Victor Costan, Nickolai Zeldovich, Srinivas Devadas
2013 Proceedings of the 2013 ACM workshop on Cloud computing security workshop - CCSW '13  
This paper proposes a new design for authenticating data storage using a small piece of high-performance trusted hardware attached to an untrusted server.  ...  Our design achieves high performance by parallelizing server-side authentication operations and permitting the untrusted server to maintain caches and schedule disk writes, while enforcing precise crash  ...  Then, readers can check the integrity of the file by using the file-verify key to verify the signed hash.  ... 
doi:10.1145/2517488.2517494 dblp:conf/ccs/YangCZD13 fatcat:jzxoep3dzvbjdovtsvr72zoari

Checking the Integrity of Transactional Mechanisms

Daniel Fryer, Mike Qin, Jack Sun, Kah Wai Lee, Angela Demke Brown, Ashvin Goel
2014 ACM Transactions on Storage  
Previously we showed that a runtime checker for the Ext3 file system can verify that metadata updates are consistent, helping detect corruption in metadata blocks at transaction commit time.  ...  Data corruption is the most common consequence of file-system bugs.  ...  We also thank Andrei Soltan for designing and implementing the metadata bitmap for the Ext3 file system.  ... 
doi:10.1145/2675113 fatcat:aedpo7zcjzae7blrhae673elf4

High Velocity Kernel File Systems with Bento [article]

Samantha Miller
2021 arXiv   pre-print
We implement a simple file system using Bento and show that it performs similarly to VFS-native ext4 on a variety of benchmarks and outperforms a FUSE version by 7x on 'git clone'.  ...  Existing approaches to high-velocity development of file systems for Linux have major downsides, such as the high performance penalty for FUSE file systems, slowing the deployment cycle for new file system  ...  We are using Bento for our own file system development, specifically to develop a basic, flexible file system in Rust that we call Bento-fs.  ... 
arXiv:2005.09723v3 fatcat:zrghwqpuordcxbtyu5ewix5xgu

Higher SLA satisfaction in datacenters with continuous VM placement constraints

Huynh Tu Dang, Fabien Hermenier
2013 Proceedings of the 9th Workshop on Hot Topics in Dependable Systems - HotDep '13  
We propose a Byzantine fault tolerant pub/sub system, on a tree-based overlay, tolerating a configurable number of failures in any part of the system, with minimal divergence from traditional pub/sub specifications  ...  However, modern file systems vary widely in such behavior, reducing the correctness and performance of applications. In this paper, we study application-level crash consistency.  ...  We thank the developers and users of SQLite and LevelDB for helping us understand their software in detail.  ... 
doi:10.1145/2524224.2524226 dblp:conf/hotdep/DangH13 fatcat:xe5soaxhengtxcufr5oahrxyoq

Using Lightweight Formal Methods to Validate a Key-Value Storage Node in Amazon S3

James Bornholt, Rajeev Joshi, Vytautas Astrauskas, Brendan Cully, Bernhard Kragl, Seth Markle, Kyle Sauri, Drew Schleit, Grant Slatton, Serdar Tasiran, Jacob Van Geffen, Andrew Warfield
2021 Proceedings of the ACM SIGOPS 28th Symposium on Operating Systems Principles CD-ROM  
By "lightweight formal methodsž we mean a pragmatic approach to verifying the correctness of a production storage node that is under ongoing feature development by a full-time engineering team.  ...  Our work has prevented 16 issues from reaching production, including subtle crash consistency and concurrency problems, and has been extended by non-formal-methods experts to check new features and properties  ...  Yggdrasil [49] is a "push-buttonž verified file system implementation that formalizes a refinement to define allowed states after a crash.  ... 
doi:10.1145/3477132.3483540 fatcat:gvgkb5wkvrcxvjjfr2pizrnq4u

Co-Design and Verification of an Available File System [chapter]

Mahsa Najafzadeh, Marc Shapiro, Patrick Eugster
2017 Lecture Notes in Computer Science  
In this paper, we describe a rigorous and general approach to navigating this trade-off by leveraging static verification tools that allow to verify different file system designs.  ...  Distributed file systems play a vital role in large-scale enterprise services.  ...  Section 3 presents and verifies a sequential specification of the file system. Section 4 does the same with a concurrent specification of the file system.  ... 
doi:10.1007/978-3-319-73721-8_17 fatcat:gpiwkdnl2jeincu667dnvt3oem

Impact of disk corruption on open-source DBMS

Sriram Subramanian, Yupu Zhang, Rajiv Vaidyanathan, Haryadi S. Gunawi, Andrea C. Arpaci-Dusseau, Remzi H. Arpaci-Dusseau, Jeffrey F. Naughton
2010 2010 IEEE 26th International Conference on Data Engineering (ICDE 2010)  
Through injecting faults into the MySQL DBMS, we find that in certain cases, corruption can greatly harm the system, leading to untimely crashes, data loss, or even incorrect results.  ...  To detect and repair corruption, a DBMS is typically equipped with an offline checker.  ...  Originally conceived to help file systems recover from untimely crashes, fsck has remained a useful tool to help the file system recover from unexpected corruption in file system metadata.  ... 
doi:10.1109/icde.2010.5447821 dblp:conf/icde/SubramanianZVGAAN10 fatcat:exoz3s7hujfmnn5y7gjdl3mafa

Finding Crash-Consistency Bugs with Bounded Black-Box Crash Testing [article]

Jayashree Mohan, Ashlie Martinez, Soujanya Ponnapalli, Pandian Raju, Vijay Chidambaram
2018 arXiv   pre-print
We present a new approach to testing file-system crash consistency: bounded black-box crash testing (B3). B3 tests the file system in a black-box manner using workloads of file-system operations.  ...  Our tools also found a crash-consistency bug in a verified file system, FSCQ. The new bugs result in severe consequences like broken rename atomicity and loss of persisted files.  ...  We are thankful to Amir Goldstein and Ted Ts'o who encouraged us in doing this work. We also thank the Chameleon Cloud team for providing a research cluster to test the workloads using CRASHMONKEY.  ... 
arXiv:1810.02904v1 fatcat:62ocv4sio5g23cd7ykbubwgnyu
« Previous Showing results 1 — 15 out of 5,455 results