Operating System Contribution to Composable Timing Behaviour in High-Integrity Real-Time Systems

The development of High-Integrity Real-Time Systems has a high footprint in terms of human, material and schedule costs. Factoring functional, reusable logic in the application favors incremental development and contains costs. Yet, achieving incrementality in the timing behavior is a much harder problem. Complex features at all levels of the execution stack, aimed to boost average-case performance, exhibit timing behavior highly dependent on execution history, which wrecks time composability and incrementaility with it. Our goal here is to restitute time composability to the execution stack, working bottom up across it. We first characterize time composability without making assumptions on the system architecture or the software deployment to it. Later, we focus on the role played by the real-time operating system in our pursuit. Initially we consider single-core processors and, becoming less permissive on the admissible hardware features, we devise solutions that restore a convincing degree of time composability. To show what can be done for real, we developed TiCOS, an ARINC-compliant kernel, and re-designed ORK+, a kernel for Ada Ravenscar runtimes. In that work, we added support for limited-preemption to ORK+, an absolute premiere in the landscape of real-word kernels. Our implementation allows resource sharing to co-exist with limited-preemptive scheduling, which extends state of the art. We then turn our attention to multicore architectures, first considering partitioned systems, for which we achieve results close to those obtained for single-core processors. Subsequently, we shy away from the over-provision of those systems and consider less restrictive uses of homogeneous multiprocessors, where the scheduling algorithm is key to high schedulable utilization. To that end we single out RUN, a promising baseline, and extend it to SPRINT, which supports sporadic task sets, hence matches real-world industrial needs better. To corroborate our results we present findings from real-world case studies from avionic industry.

Serial conditional discrimination and temporal bisection in rats selectively lesioned in the dentate gyrus

In positive serial conditional discrimination, animals respond during a target stimulus when it is preceded by a feature stimulus, but they do not respond when the same target stimulus is presented alone. Moreover, the feature and target stimuli are separated from each other by an empty interval. The present work aimed to investigate if two durations (4 or 16s) of the same feature stimulus (light) could modulate the operant responses of rats to different levers (A and B) during a 5-s target stimulus (tone). In the present study, lever A was associated with the 4-s light, and lever B was associated with the 16-s light. A 5-s empty interval was included between the light and the tone. In the same training procedure, the rats were also presented with the 5-s tone without the preceding light stimuli. In these trials, the responses were not reinforced. We evaluated the hippocampal involvement of these behavioral processes by selectively lesioning the dentate gyrus with colchicine. Once trained, the rats were submitted to a test using probe trials without reinforcement. They were presented with intermediate durations of the feature stimulus (light) to obtain a temporal bisection curve recorded during the exposure to the target stimuli. The rats from both groups learned to respond with high rates during tones preceded by light and with low rates during tones presented alone, which indicated acquisition of the serial conditional discrimination. The rats were able to discriminate between the 4- and 16-s lights by correctly choosing lever A or B. In the test, the temporal bisection curves from both experimental groups showed a bisection point at the arithmetic mean between 4 and 16s. Such processes were not impaired by the dentate gyrus lesion. Thus, our results showed that different durations of a feature stimulus could result in conditional properties. However, this processing did not appear to depend on the dentate gyrus alone. (C) 2011 Published by Elsevier B.V.

Dimensioning and worst-case analysis of cluster-tree sensor networks

Modeling the fundamental performance limits of Wireless Sensor Networks (WSNs) is of paramount importance to understand their behavior under the worst-case conditions and to make the appropriate design choices. This is particular relevant for time-sensitive WSN applications, where the timing behavior of the network protocols (message transmission must respect deadlines) impacts on the correct operation of these applications. In that direction this paper contributes with a methodology based on Network Calculus, which enables quick and efficient worst-case dimensioning of static or even dynamically changing cluster-tree WSNs where the data sink can either be static or mobile. We propose closed-form recurrent expressions for computing the worst-case end-to-end delays, buffering and bandwidth requirements across any source-destination path in a cluster-tree WSN. We show how to apply our methodology to the case of IEEE 802.15.4/ZigBee cluster-tree WSNs. Finally, we demonstrate the validity and analyze the accuracy of our methodology through a comprehensive experimental study using commercially available technology, namely TelosB motes running TinyOS.

Communication Middleware for Distributed Hard Real-Time Systems in Java

Distributed real-time embedded systems are becoming increasingly important to society. More demands will be made on them and greater reliance will be placed on the delivery of their services. A relevant subset of them is high-integrity or hard real-time systems, where failure can cause loss of life, environmental harm, or significant financial loss. Additionally, the evolution of communication networks and paradigms as well as the necessity of demanding processing power and fault tolerance, motivated the interconnection between electronic devices; many of the communications have the possibility of transferring data at a high speed. The concept of distributed systems emerged as systems where different parts are executed on several nodes that interact with each other via a communication network. Java’s popularity, facilities and platform independence have made it an interesting language for the real-time and embedded community. This was the motivation for the development of RTSJ (Real-Time Specification for Java), which is a language extension intended to allow the development of real-time systems. The use of Java in the development of high-integrity systems requires strict development and testing techniques. However, RTJS includes a number of language features that are forbidden in such systems. In the context of the HIJA project, the HRTJ (Hard Real-Time Java) profile was developed to define a robust subset of the language that is amenable to static analysis for high-integrity system certification. Currently, a specification under the Java community process (JSR- 302) is being developed. Its purpose is to define those capabilities needed to create safety critical applications with Java technology called Safety Critical Java (SCJ). However, neither RTSJ nor its profiles provide facilities to develop distributed realtime applications. This is an important issue, as most of the current and future systems will be distributed. The Distributed RTSJ (DRTSJ) Expert Group was created under the Java community process (JSR-50) in order to define appropriate abstractions to overcome this problem. Currently there is no formal specification. The aim of this thesis is to develop a communication middleware that is suitable for the development of distributed hard real-time systems in Java, based on the integration between the RMI (Remote Method Invocation) model and the HRTJ profile. It has been designed and implemented keeping in mind the main requirements such as the predictability and reliability in the timing behavior and the resource usage. iThe design starts with the definition of a computational model which identifies among other things: the communication model, most appropriate underlying network protocols, the analysis model, and a subset of Java for hard real-time systems. In the design, the remote references are the basic means for building distributed applications which are associated with all non-functional parameters and resources needed to implement synchronous or asynchronous remote invocations with real-time attributes. The proposed middleware separates the resource allocation from the execution itself by defining two phases and a specific threading mechanism that guarantees a suitable timing behavior. It also includes mechanisms to monitor the functional and the timing behavior. It provides independence from network protocol defining a network interface and modules. The JRMP protocol was modified to include two phases, non-functional parameters, and message size optimizations. Although serialization is one of the fundamental operations to ensure proper data transmission, current implementations are not suitable for hard real-time systems and there are no alternatives. This thesis proposes a predictable serialization that introduces a new compiler to generate optimized code according to the computational model. The proposed solution has the advantage of allowing us to schedule the communications and to adjust the memory usage at compilation time. In order to validate the design and the implementation a demanding validation process was carried out with emphasis in the functional behavior, the memory usage, the processor usage (the end-to-end response time and the response time in each functional block) and the network usage (real consumption according to the calculated consumption). The results obtained in an industrial application developed by Thales Avionics (a Flight Management System) and in exhaustive tests show that the design and the prototype are reliable for industrial applications with strict timing requirements. Los sistemas empotrados y distribuidos de tiempo real son cada vez más importantes para la sociedad. Su demanda aumenta y cada vez más dependemos de los servicios que proporcionan. Los sistemas de alta integridad constituyen un subconjunto de gran importancia. Se caracterizan por que un fallo en su funcionamiento puede causar pérdida de vidas humanas, daños en el medio ambiente o cuantiosas pérdidas económicas. La necesidad de satisfacer requisitos temporales estrictos, hace más complejo su desarrollo. Mientras que los sistemas empotrados se sigan expandiendo en nuestra sociedad, es necesario garantizar un coste de desarrollo ajustado mediante el uso técnicas adecuadas en su diseño, mantenimiento y certificación. En concreto, se requiere una tecnología flexible e independiente del hardware. La evolución de las redes y paradigmas de comunicación, así como la necesidad de mayor potencia de cómputo y de tolerancia a fallos, ha motivado la interconexión de dispositivos electrónicos. Los mecanismos de comunicación permiten la transferencia de datos con alta velocidad de transmisión. En este contexto, el concepto de sistema distribuido ha emergido como sistemas donde sus componentes se ejecutan en varios nodos en paralelo y que interactúan entre ellos mediante redes de comunicaciones. Un concepto interesante son los sistemas de tiempo real neutrales respecto a la plataforma de ejecución. Se caracterizan por la falta de conocimiento de esta plataforma durante su diseño. Esta propiedad es relevante, por que conviene que se ejecuten en la mayor variedad de arquitecturas, tienen una vida media mayor de diez anos y el lugar ˜ donde se ejecutan puede variar. El lenguaje de programación Java es una buena base para el desarrollo de este tipo de sistemas. Por este motivo se ha creado RTSJ (Real-Time Specification for Java), que es una extensión del lenguaje para permitir el desarrollo de sistemas de tiempo real. Sin embargo, RTSJ no proporciona facilidades para el desarrollo de aplicaciones distribuidas de tiempo real. Es una limitación importante dado que la mayoría de los actuales y futuros sistemas serán distribuidos. El grupo DRTSJ (DistributedRTSJ) fue creado bajo el proceso de la comunidad de Java (JSR-50) con el fin de definir las abstracciones que aborden dicha limitación, pero en la actualidad aun no existe una especificacion formal. El objetivo de esta tesis es desarrollar un middleware de comunicaciones para el desarrollo de sistemas distribuidos de tiempo real en Java, basado en la integración entre el modelo de RMI (Remote Method Invocation) y el perfil HRTJ. Ha sido diseñado e implementado teniendo en cuenta los requisitos principales, como la predecibilidad y la confiabilidad del comportamiento temporal y el uso de recursos. El diseño parte de la definición de un modelo computacional el cual identifica entre otras cosas: el modelo de comunicaciones, los protocolos de red subyacentes más adecuados, el modelo de análisis, y un subconjunto de Java para sistemas de tiempo real crítico. En el diseño, las referencias remotas son el medio básico para construcción de aplicaciones distribuidas las cuales son asociadas a todos los parámetros no funcionales y los recursos necesarios para la ejecución de invocaciones remotas síncronas o asíncronas con atributos de tiempo real. El middleware propuesto separa la asignación de recursos de la propia ejecución definiendo dos fases y un mecanismo de hebras especifico que garantiza un comportamiento temporal adecuado. Además se ha incluido mecanismos para supervisar el comportamiento funcional y temporal. Se ha buscado independencia del protocolo de red definiendo una interfaz de red y módulos específicos. También se ha modificado el protocolo JRMP para incluir diferentes fases, parámetros no funcionales y optimizaciones de los tamaños de los mensajes. Aunque la serialización es una de las operaciones fundamentales para asegurar la adecuada transmisión de datos, las actuales implementaciones no son adecuadas para sistemas críticos y no hay alternativas. Este trabajo propone una serialización predecible que ha implicado el desarrollo de un nuevo compilador para la generación de código optimizado acorde al modelo computacional. La solución propuesta tiene la ventaja que en tiempo de compilación nos permite planificar las comunicaciones y ajustar el uso de memoria. Con el objetivo de validar el diseño e implementación se ha llevado a cabo un exigente proceso de validación con énfasis en: el comportamiento funcional, el uso de memoria, el uso del procesador (tiempo de respuesta de extremo a extremo y en cada uno de los bloques funcionales) y el uso de la red (consumo real conforme al estimado). Los buenos resultados obtenidos en una aplicación industrial desarrollada por Thales Avionics (un sistema de gestión de vuelo) y en las pruebas exhaustivas han demostrado que el diseño y el prototipo son fiables para aplicaciones industriales con estrictos requisitos temporales.

MINING AND VERIFICATION OF TEMPORAL EVENTS WITH APPLICATIONS IN COMPUTER MICRO-ARCHITECTURE RESEARCH

Computer simulation programs are essential tools for scientists and engineers to understand a particular system of interest. As expected, the complexity of the software increases with the depth of the model used. In addition to the exigent demands of software engineering, verification of simulation programs is especially challenging because the models represented are complex and ridden with unknowns that will be discovered by developers in an iterative process. To manage such complexity, advanced verification techniques for continually matching the intended model to the implemented model are necessary. Therefore, the main goal of this research work is to design a useful verification and validation framework that is able to identify model representation errors and is applicable to generic simulators. The framework that was developed and implemented consists of two parts. The first part is First-Order Logic Constraint Specification Language (FOLCSL) that enables users to specify the invariants of a model under consideration. From the first-order logic specification, the FOLCSL translator automatically synthesizes a verification program that reads the event trace generated by a simulator and signals whether all invariants are respected. The second part consists of mining the temporal flow of events using a newly developed representation called State Flow Temporal Analysis Graph (SFTAG). While the first part seeks an assurance of implementation correctness by checking that the model invariants hold, the second part derives an extended model of the implementation and hence enables a deeper understanding of what was implemented. The main application studied in this work is the validation of the timing behavior of micro-architecture simulators. The study includes SFTAGs generated for a wide set of benchmark programs and their analysis using several artificial intelligence algorithms. This work improves the computer architecture research and verification processes as shown by the case studies and experiments that have been conducted.

The effects of uncertainty about the timing of deals on consumer behavior

I examine the effects of uncertainty about the timing of de aIs (i.e. temporary price cuts or sales) on consumer behavior in a dynamic inventory model of consumer choice. I derive implications for purchase behavior and test them empirically, using two years of scanner data for soft drinks. I fmd that loyal consumers' decisions, both about the allocation of their purchases over time and the quantity to be purchased in a particular deal, are affected by the uncertainty about the timing of the deal for the product. Loyal consumers buy a higher fraction of their overall purchases during de ais as the uncertainty decreases. This effect increases with an increase in the product' s share of a given consumer' s purchase in the same category or if the consumer stockpiles (i.e., is a shopper). During a particular deal, loyal shoppers increase the quantity they purchase the more time that has passed since the previous de aI, and the higher the uncertainty about the deals' timing. For the non-Ioyal consumers these effects are not significant. These results hold for products that are frequently purchased, like soft-drinks and yogurt, but do not hold for less frequentIy purchased products, such as laundry detergents. The fmdings suggest that manufacturers and retailers should incorporate the effects of deals' timing on consumers' purchase' decisions when deriving optimal pricing strategies.

Visual timing and adaptive behavior in a road-crossing simulation study

In this road-crossing simulation study, we assessed both participant's ability to visually judge whether or not they could cross a road, and their adaptive walking behavior. To this end, participants were presented with a road inside the laboratory on which a bike approached with different velocities from different distances. Eight children aged 5-7, ten children aged 10-12, and ten adults were asked both to verbally judge whether they could cross the road, and to actually walk across the road if possible. The results indicated that the verbal judgments were not similar to judgments to actually cross the road. With respect to safety and accuracy of judgments, groups did not differ from each other, although the youngest group tended to be more cautious. All groups appeared to use a strategy to cross the road based both on the distance and the velocity of the approaching bike. Young children waited longer on the curb before crossing the road than older children and adults. All groups adjusted their crossing time to the time-to-arrival of the bike. These findings are discussed in relation to the ecological psychological approach and the putative dissociation between vision for perception (i.e. verbal judgment) and vision for action (i.e. actual crossing). (c) 2004 Elsevier Ltd. All rights reserved.

Disorganization and timing of motor behavior : insight from gesture impairments and movement patterns in schizophrenia

Background: Motor symptoms are frequent phenomena across the entire course of schizophrenia1. Some have argued that disorganized behavior was associated with aberrant motor behavior. We have studied the association of motor disturbances and disorganization in two projects focusing on the timing of movements. Method: In two studies, we assessed motor behavior and psychopathology. The first study applied a validated test of upper limb apraxia in 30 schizophrenia patients2,3. We used standardized video assessments of hand gestures by a blinded rater. The second study tested the stability of movement patterns using time series analysis in actigraphy data of 100 schizophrenia patients4. Both stability of movement patterns and the overall amount of movement were calculated from data of two hours with high degrees of social interaction comparable across the 100 subjects. Results: In total, 67% of the patients had gesture performance deficits3. Most frequently, they made spatial, temporal and body-part-as-object errors. Gesture performance relied on frontal lobe function2. Poor gesture performance was associated with increased disorganization scores. In the second study, we found disorganization to be predicted only by more irregular movement patterns irrespective of the overall amount of movement4. Conclusion : Both studies provide evidence for a link between aberrant timing of motor behavior and disorganization. Disturbed movement control seems critical for disorganized behavior in schizophrenia.

Effects of pubertal status and timing on externalizing behavior problems and anxious/depressed symptoms in a sample of adolescent girls of color

Empirical research has shown that pubertal development is closely linked with adolescent externalizing (e.g., aggressive) and internalizing (e.g., anxiety) problems. In most studies, pubertal timing, pubertal status, or both, are used to examine this link. The present study adds to the existing literature by examining the link between puberty and adolescent behavior problems in a sample of predominantly urban African American adolescent girls. One hundred and seventeen adolescent girls of color, aged 11-18 (M = 14.72 SD = 1.44), and their primary caregiver participated in this study. Sixty-eight percent were African American, 22.2 % were Hispanic/Latina, and 9.4% were Haitian. Among the Hispanic/Latina girls, 9.4% were Black Hispanic/Latina. Results showed that pubertal status and perceived pubertal timing (breasts) are better predictors of externalizing behavior problems than chronological age and quality of relationship with peers. No significant findings were found with anxious/depressed symptoms.

Tidal-amplitude rhythms of larval release: variable departure from presumed optimal timing among populations of the mottled shore crab

It is widely assumed that optimal timing of larval release is of major importance to offspring survival, but the extent to which environmental factors entrain synchronous reproductive rhythms in natural populations is not well known. We sampled the broods of ovigerous females of the common shore crab Pachygrapsus transversus at both sheltered and exposed rocky shores interspersed along a so-km coastline, during four different periods, to better assess inter-population differences of larval release timing and to test for the effect of wave action. Shore-specific patterns were consistent through time. Maximum release fell within 1 day around syzygies on all shores, which matched dates of maximum tidal amplitude. Within this very narrow range, populations at exposed shores anticipated hatching compared to those at sheltered areas, possibly due to mechanical stimulation by wave action. Average departures from syzygial release ranged consistently among shores from 2.4 to 3.3 days, but in this case we found no evidence for the effect of wave exposure. Therefore, processes varying at the scale of a few kilometres affect the precision of semilunar timing and may produce differences in the survival of recently hatched larvae. Understanding the underlying mechanisms causing departures from presumed optimal release timing is thus important for a more comprehensive evaluation of reproductive success of invertebrate populations.

Number of options in a movement sequence affects learners' behavior in a self-controlled practice condition

Self controlling practice implies a process of decision making which suggests that the options in a self controlled practice condition could affect learners The number of task components with no fixed position in a movement sequence may affect the (Nay learners self control their practice A 200 cm coincident timing track with 90 light emitting diodes (LEDs)-the first and the last LEDs being the warning and the target lights respectively was set so that the apparent speed of the light along the track was 1 33 m/sec Participants were required to touch six sensors sequentially the last one coincidently with the lighting of the tar get light (timing task) Group 1 (n=55) had only one constraint and were instructed to touch the sensors in any order except for the last sensor which had to be the one positioned close to the target light Group 2 (n=53) had three constraints the first two and the last sensor to be touched Both groups practiced the task until timing error was less than 30 msec on three consecutive trials There were no statistically significant differences between groups in the number of trials needed to reach the performance criterion but (a) participants in Group 2 created fewer sequences corn pared to Group 1 and (b) were more likely to use the same sequence throughout the learning process The number of options for a movement sequence affected the way learners self-controlled their practice but had no effect on the amount of practice to reach criterion performance.

Hitting a moving target: Perception and action in the timing of rapid interceptions

Different interceptive tasks and modes of interception (hitting or capturing) do not necessarily involve similar control processes. Control based on preprogramming of movement parameters is possible for actions with brief movement times but is now widely rejected; continuous perceptuomotor control models are preferred for all types of interception. The rejection of preprogrammed control and acceptance of continuous control is evaluated for the timing of rapidly executed, manual hitting actions. It is shown that a preprogrammed control model is capable of providing a convincing account of observed behavior patterns that avoids many of the arguments that have been raised against it. Prominent continuous perceptual control models are analyzed within a common framework and are shown to be interpretable as feedback control strategies. Although these models can explain observations of on-line adjustments to movement, they offer only post hoc explanations for observed behavior patterns in hitting tasks and are not directly supported by data. It is proposed that rapid manual hitting tasks make up a class of interceptions for which a preprogrammed strategy is adopted-a strategy that minimizes the role of visual feedback. Such a strategy is effective when the task demands a high degree of temporal accuracy.

Timing of Dose Relative to Sexual Intercourse Attempt in Previous Sildenafil Citrate Users Treated with Tadalafil: A Geographical Comparison from a Single Arm, Open-Label Study

Introduction. Previous research has demonstrated that sildenafil citrate users alter dosing-sexual attempt behavior when switched to tadalafil. The impact of geography and culture on sexual behavior with phosphodiesterase type 5 (PDE5) inhibitor treatment has not been fully investigated. Aim. To describe and compare the changes in dosing-sexual attempt behavior with sildenafil citrate vs. tadalafil treatment across four distinct geographies: Asia, Australia/New Zealand (ANZ), Central Eastern Europe/Middle East (CEE/ME), and Latin America (LA). Methods. Data from a single-arm, open-label clinical trial conducted in 21 countries from November 2002 to May 2004 were used in this analysis. Men with erectile dysfunction and a history of >= 6-week prior sildenafil citrate use continued sildenafil citrate treatment for 4 weeks then switched to tadalafil for 8 weeks. Dosing instructions were provided. Main Outcomes Measures. Timing of dose and sexual intercourse was assessed through patient diaries for the final 4 weeks of each treatment period. Results. A total of 2,760 men were enrolled: Asia 15.8%; ANZ 29.4%; CEE/ME 19.7%; LA 35.1%. The median time from dosing to intercourse was significantly increased during tadalafil treatment across all geographical regions; however, the magnitude of increase differed significantly by geography (P < 0.0001). The Asian cohort demonstrated the shortest duration between dosing and sexual intercourse attempts (irrespective of drug), and altered sexual behavior the least upon switching to tadalafil. The ANZ cohort demonstrated the longest duration between dosing and sexual intercourse attempts (irrespective of drug), and altered sexual behavior the most upon switching to tadalafil. Conclusion. Men with a history of established sildenafil citrate use alter their dose-attempt behavior when treated with tadalafil irrespective of geography. However, the extent to which sexual behavior alters is not uniform across geographical regions, suggesting that dosing instructions and duration of drug effectiveness, in combination with personal and cultural preferences, may determine sexual behavior with PDE5 inhibitor use. Rubio-Aurioles E, Glina S, Abdo CHN, Hernandez-Serrano R, Rampazzo C, Sotomayor M, West TM, Gallagher GL, and Lenero E. Timing of dose relative to sexual intercourse attempt in previous sildenafil citrate users treated with tadalafil: A geographical comparison from a single arm, open-label study. J Sex Med 2009;6:2836-2850.

Making sense of the experimental evidence on endogenous timing in duopoly markets

The prediction of asymmetric equilibria with Stackelberg outcomes is clearly the most frequent result in the endogenous timing literature. Several experiments have tried to validate this prediction empirically, but failed to find support for it. By contrast, the experiments find that simultaneous-move outcomes are modal and that behavior in endogenous timing games is quite heterogeneous. This paper generalizes Saloner’s (1987) and Hamilton and Slutsky’s (1990) endogenous timing games by assuming that players are averse to inequality in payoffs. We explore the theoretical implications of inequity aversion and compare them to the empirical evidence. We find that this explanation is able to organize most of the experimental evidence on endogenous timing games. However, inequity aversion is not able to explain delay in Hamilton and Slutsky’s endogenous timing games.

Job Insecurity and the Timing of Parenthood: A Comparison between Eastern and Western Germany

This article contributes to the ongoing debate on the economic deter- minants of fertility behavior by addressing the role of job insecurity in couples' intentions concerning parenthood and its timing. It starts from the hypothesis that cultural values moderate individuals' reactions to job insecurity and the way it is related to family formation. With a systematic thematic content analysis of a set of semi-structured interviews with childless men and women around the age of 30 in eastern and western Germany, we are able to show that there are substantial dif- ferences in the consequences of job insecurity on intentions to have a first child. In western Germany, a relatively secure job career is expected to precede family formation, and this sequence of transitions is rather rigid, whereas in eastern Germany job security and family formation are thought of and practiced as parallel investments. We suggest that the lack of convergence in family formation patterns between eastern and western Germany after the unification of the country in 1990 is partially related to different attitudes toward job insecurity in the two contexts.