Search papers, labs, and topics across Lattice.
This paper provides a novel causal characterization of metastable failures by identifying their roots in metastable faults, which are destabilizing cycles of interaction among system components that typically exhibit stabilizing behavior in isolation. The authors reveal that these failures occur when scheduling decisions allow destabilizing interactions to dominate, leading to self-sustaining negative behaviors. Through their methodology, they predict metastable failures and propose the design of metastable-fault-tolerant systems, validated across three distinct case studies.
Metastable failures can be traced back to hidden structural faults, revealing how scheduling decisions can inadvertently trigger self-sustaining system failures.
Metastable failures are hard to detect, prevent, and mitigate. During a metastable failure, a system exhibits self-sustaining bad behavior even in the absence of adversarial conditions. Prior work focuses on symptoms and has portrayed metastable failures as instances of self-sustaining overload. This characterization leaves the underlying failure causes and dynamics unknown, and does not account for metastable failures that do not manifest as overload. We present the first causal characterization of metastable failures by identifying their origin in metastable faults, i.e., structural destabilizing cycles of interaction among systems components that, in isolation, are stabilizing. Metastable failures arise when scheduling decisions let these destabilizing interactions gain the upper hand over the individual components' stabilizing tendencies. We then derive a methodology to predict metastable failures, and to build metastable-fault-tolerant (MFT) systems. We apply our methodology to three case studies, showcasing the generality of our results.