17.04.2015 Views

DARPA ULTRALOG Final Report - Industrial and Manufacturing ...

DARPA ULTRALOG Final Report - Industrial and Manufacturing ...

DARPA ULTRALOG Final Report - Industrial and Manufacturing ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Manuscript for IEEE Transactions on Automatic Control 6<br />

tasks as well as tasks from predecessor components) <strong>and</strong> then sends it to successor components.<br />

We denote the number of root tasks of component i as rt i . Fig. 1 shows an example network<br />

composed of four components. Each of A 1 <strong>and</strong> A 2 has 100 root tasks. A 3 <strong>and</strong> A 4 have no root<br />

tasks but they have 200 <strong>and</strong> 100 tasks respectively from the corresponding predecessors.<br />

<br />

<br />

A 1<br />

A 3<br />

100<br />

0<br />

<br />

A 2 A 4<br />

100<br />

0<br />

Fig. 1. An example network<br />

3.2 Control action<br />

A component can use one of alternative algorithms to process a task. Different alternatives<br />

trade off CPU time <strong>and</strong> value of solution with more CPU time resulting in higher solution value.<br />

As one can find optimal mixed alternatives, a component has a monotonically increasing convex<br />

function, say value function, with CPU time as a function of value. We call the value in the<br />

function as value mode that a component can select as its decision variable. A value function is<br />

defined with three elements as<br />

〈 f i ( vi<br />

), vi(min),<br />

vi(max)〉<br />

as shown in Fig. 1. This function indicates<br />

that component i’s expected CPU time 2 to process a task is f i (v i ) with a value mode v i <strong>and</strong> v i(min) ≤<br />

v i ≤ v i(max) . We assume that components cannot change the mode for a task in process.<br />

3.3 Stress environment<br />

Survivability stresses such as malicious attacks <strong>and</strong> accidental failures, affect the system by<br />

directly consuming resources or indirectly invoking defense mechanisms as remedies. For<br />

2 The distribution of CPU time can be arbitrary though we use only expected CPU time.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!