防御对抗超出范围环境的事件触发系统
Defending Event-Triggered Systems against Out-of-Envelope Environments
AI总结：
本文研究了时间触发系统对超出范围环境的免疫性，并探讨了如何通过引入重要性概念来构建事件触发系统以防御中断风暴。
摘要：
实时系统的设计基于对它们将运行的环境条件的假设。我们称这种假设为安全操作范围。违反这些假设，即超出范围的环境，可能会危及实时系统的及时性和安全性，例如通过使系统超载而无法应对中断风暴。长期以来，关于哪种设计范式——时间触发还是事件触发——更稳健于此类行为存在长期争论。在本文中，我们研究了时间触发系统对超出范围行为的免疫性主张，以及如何构建事件触发系统以防御被中断风暴淹没。我们引入了重要性（独立于优先级和关键性）作为一种表达方式，即在环境设计假设不再成立时，哪些任务仍应被调度，并将其与混合关键性调度进行类比，并展示了事件触发系统如何防御对抗超出范围行为。
英文摘要：
The design of real-time systems is based on assumptions about environmental conditions in which they will operate. We call this their safe operational envelope. Violation of these assumptions, i.e., out-of-envelope environments, can jeopardize timeliness and safety of real-time systems, e.g., by overwhelming them with interrupt storms. A long-lasting debate has been going on over which design paradigm, the time- or event-triggered, is more robust against such behavior. In this work, we investigate the claim that time-triggered systems are immune against out-of-envelope behavior and how event-triggered systems can be constructed to defend against being overwhelmed by interrupt showers. We introduce importance (independently of priority and criticality) as a means to express which tasks should still be scheduled in case environmental design assumptions cease to hold, draw parallels to mixed-criticality scheduling, and demonstrate how event-triggered systems can defend against out-of-envelope behavior.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
