{"title":"面向失败的设计:数字生态系统的软件挑战","authors":"Ian Somerville","doi":"10.1109/DEST.2007.371934","DOIUrl":null,"url":null,"abstract":"In dynamic computation ecosystems involving many different participants, a topdown approach to system dependability does not work. It is not possible to take a topdown approach to system design and implementation and to validate the resulting system against some specification. Rather, we have to assume that elements of the system will become unavailable at unpredictable times and that some elements may be unreliable. Instead of designing systems to avoid failure, we must re-orient our thinking and design systems so that we can tolerate failure and recover from failures when they occur. In this talk, I will discuss the challenges of designing for failure and will introduce research on responsibility modelling that provides information for failure recovery.","PeriodicalId":448012,"journal":{"name":"2007 Inaugural IEEE-IES Digital EcoSystems and Technologies Conference","volume":"37 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2007-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"6","resultStr":"{\"title\":\"Design for failure: Software challenges of digital ecosystems\",\"authors\":\"Ian Somerville\",\"doi\":\"10.1109/DEST.2007.371934\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In dynamic computation ecosystems involving many different participants, a topdown approach to system dependability does not work. It is not possible to take a topdown approach to system design and implementation and to validate the resulting system against some specification. Rather, we have to assume that elements of the system will become unavailable at unpredictable times and that some elements may be unreliable. Instead of designing systems to avoid failure, we must re-orient our thinking and design systems so that we can tolerate failure and recover from failures when they occur. In this talk, I will discuss the challenges of designing for failure and will introduce research on responsibility modelling that provides information for failure recovery.\",\"PeriodicalId\":448012,\"journal\":{\"name\":\"2007 Inaugural IEEE-IES Digital EcoSystems and Technologies Conference\",\"volume\":\"37 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2007-06-18\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"6\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2007 Inaugural IEEE-IES Digital EcoSystems and Technologies Conference\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/DEST.2007.371934\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2007 Inaugural IEEE-IES Digital EcoSystems and Technologies Conference","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/DEST.2007.371934","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Design for failure: Software challenges of digital ecosystems
In dynamic computation ecosystems involving many different participants, a topdown approach to system dependability does not work. It is not possible to take a topdown approach to system design and implementation and to validate the resulting system against some specification. Rather, we have to assume that elements of the system will become unavailable at unpredictable times and that some elements may be unreliable. Instead of designing systems to avoid failure, we must re-orient our thinking and design systems so that we can tolerate failure and recover from failures when they occur. In this talk, I will discuss the challenges of designing for failure and will introduce research on responsibility modelling that provides information for failure recovery.