SEKE 2012 Proceedings - Knowledge Systems Institute

no faults are propagated to the trusted parts of the application.
The protocol between the trusted platform and the sandbox
platform brings considerable performance overhead, and the
correct functioning is based on a set of assumptions which may
not apply to some real applications as discussed in their own
work.
VII.
CONCLUSION
The OSGi framework provides support for the management
of component-based software. It is important for improving the
reliability of OSGi-based software to detect anomalies in the
granularity of component. This paper proposed a thread-tracing
method for monitoring components running in OSGi from the
perspectives of CPU utilization. Furthermore, control charts are
also employed to detect anomalous components online. The
experimental results demonstrate that our method is able to
monitor the CPU utilization in a high accuracy without
significant overhead, and can detect the anomalous components
effectively.
ACKNOWLEDGMENT
This work is supported by the National Grand Fundamental
Research 973 Program of China under Grant No.
2009CB320704, the National High Technology Research and
Development Program of China under Grant No.
2012AA011204, the National Natural Science Foundation of
China under Grant No.61173004 and the National Science and
Technology Major Project of China under Grant
No.2011ZX03002-002-01.
REFERENCES
[1] G. Heineman, B. Councill, et al., "Component-based software
engineering and the issue of trust," in Proceedings of the 22nd
international conference on Software engineering, Limerick, Ireland,
2000, pp.661-664.
[2] OSGi Alliance. Available: http://www.osgi.org/.
[3] OSGi Alliance. About the OSGi Service Platform. Revision 4.1.
http://www.osgi.org/wiki/uploads/Links/OSGiTechnicalWhitePaper.pdf,
2007.
[4] R. Pressman, D. Ince, Software engineering: a practitioner's approach:
McGraw-Hill New York, 2005.
[5] S. G. Swapna, “Architecture-Based Software Reliability Analysis:
Overview and Limitations,” IEEE Transactions on Dependable and
Secure Computing , vol. 4, no. 1, pp. 32-40, 2007.
[6] K. Heiko, “Performance evaluation of component-based software
systems: A survey,” Performance Evaluation, vol. 67, no. 8, pp. 634-658,
2010.
[7] W. Zhang, B. Yang, B. Jin, et al., “Performance Tuning for Application
Server OnceAS", in Proceedings of the Second international conference
on Parallel and Distributed Processing and Applications, vol. 3358, Eds.,
ed: Springer Berlin / Heidelberg, 2005, pp. 451-462.
[8] T. Miettinen, D. Pakkala,M. Hongisto, “A Method for the Resource
Monitoring of OSGi-based Software Components,” in Proceedings of
the 34th Euromicro Conference on Software Engineering and Advanced
Applications, Parma,Italy, 2008, pp. 100-107.
[9] G. A. Barnard, “Control Charts and Stochastic Processes,” Journal of the
Royal Statistical Society, vol. 21, no. 2, pp. 239-271, 1959.
[10] T.Wang, X. Zhou, J. Wei,W. Zhang, “Towards Runtime Plug-and-Play
Software,” in Proceedings of t he 10th International Conference on
Quality Software, Zhangjiajie, China, 2010, pp. 365-368.
[11] D. A. Menasce, “TPC-W: a benchmark for e-commerce,” IEEE Internet
Computing, IEEE, vol. 6, no. 3, pp. 83-87, 2002.
[12] S. Pertet, P. Narasimhan, “Causes of failure in web applications,”
Parallel Data L aboratory, Carnegie Mellon University, CMU-PDL-05-
109, 2005.
[13] P. Barham, A. Donnelly, R. Isaacs, et al., “Using magpie for request
extraction and workload modelling,” in Proceedings of t he 6th
conference on Symposium on Opearting Systems Design &
Implementation - Volume 6, San Francisco, CA, 2004, pp. 18-31.
[14] K. Yaghmour, M. R. Dagenais, “Measuring and characterizing system
behavior using kernel-level event logging,” in Proceedings of the annual
conference on USENIX Annual Technical Conference, San Diego,
California, 2000, pp. 2-15.
[15] B. M. Cantrill, M. W. Shapiro, A. H. Leventhal, “Dynamic
instrumentation of production systems,” in Proceedings of the annual
conference on USENIX Annual Technical Conference, Boston, MA,
2004, pp. 2-2.
[16] J. Hulaas, W. Binder, “Program transformations for portable CPU
accounting and control in Java,” in Proceedings of the ACM SIGPLAN
symposium on Partial evaluation and semantics-based program
manipulation, Verona, Italy, 2004, pp. 169-177.
[17] M. A. Munawar, P. A. S. Ward, “A comparative study of pairwise
regression techniques for problem determination,” in Proceedings of the
international conference of the center for advanced studies on
collaborative research. NY, USA, ACM, 2007, pp.152-166.
[18] G. Jiang, H. Chen, Y. Kenji, “Modeling and Tracking of Transaction
Flow Dynamics for Fault Detection in Complex Systems,” IEEE
Transactions on Dependable and Secure Computing, vol. 3, no. 4, 2006,
pp. 312-326.
[19] Z. Guo, G. Jiang, H. Chen, et al., “Tracking Probabilistic Correlation of
Monitoring Data for Fault Detection in Complex Systems,” in
Proceedings of the 36th international conference on Dependable Systems
and Networks. Philadelphia, PA, IEEE, 2006. pp. 259-268.
[20] K. Gama, D. Donsez, "A Self-healing Component Sandbox for
Untrustworthy Third Party Code Execution", In Proceedings of the 13th
International Symposium on Component-Based Software Engineering.
Springer-Verlag, Berlin, Heidelberg, 2010. pp. 130-149.
[21] V. Chandola, A. Banerjee and V. Kumar, "Anomaly detection: A
survey," ACM Comput. Surv., vol. 41, pp. 1-58, 2009.
[22] JVMTI, http://java.sun.com/j2se/1.5.0/docs/guide/jvmti/.
[23] IBM Tivoli, http://www.cdwg.com/content/brands/ibm/tivoli.aspx.
[24] HP OpenView, http://www.osalt.com/openview-network-node-manager.
[25] J. Dean, D. Grove and C. Chambers, "Optimization of object-oriented
programs using static class hierarchy analysis," the 9th European
Conference on Object-Oriented Programming. Aarhus, Denmark, 7–11
August, 1995. Springer. pp. 77-101.
193