Abstract Single event upset （SEU） effect, caused by highly energized particles in aerospace, threatens the reliability and security of small satellites composed of commercialofftheshelves （COTS）. SEU induced contr...Abstract Single event upset （SEU） effect, caused by highly energized particles in aerospace, threatens the reliability and security of small satellites composed of commercialofftheshelves （COTS）. SEU induced control flow errors （CFEs） may cause unpredictable behavior or crashes of COTSbased small satellites. This paper proposes a generic softwarebased control flow checking technique （CFC） and bipartite graphbased control flow checking （BGCFC）. To simplify the types of illegal branches, it transforms the conventional control flow graph into the equivalent bipartite graph. It checks the legal ity of control flow at runtime by comparing a global signature with the expected value and introduces consecutive IDs and bitmaps to reduce the time and memory overhead. Theoretical analysis shows that BGCFC can detect all types of internode CFEs with constant time and memory overhead. Practical tests verify the result of theoretical analysis. Compared with previous techniques, BGCFC achieves the highest error detection rate, lower time and memory overhead; the composite result in evaluation fac tor shows that BGCFC is the most effective one among all these techniques. The results in both theory and practice verify the applicability of BGCFC for COTSbased small satellites.展开更多
This paper proposes a generic high-performance and low-time-overhead software control flow checking solution, graph-tree-based control flow checking （GTCFC） for space-borne commercial-off-the-shelf （COTS） processo...This paper proposes a generic high-performance and low-time-overhead software control flow checking solution, graph-tree-based control flow checking （GTCFC） for space-borne commercial-off-the-shelf （COTS） processors. A graph tree data structure with a topology similar to common trees is introduced to transform the control flow graphs of target programs. This together with design of IDs and signatures of its vertices and edges allows for an easy check of legality of actual branching during target program execution. As a result, the algorithm not only is capable of detecting all single and multiple branching errors with low latency and time overheads along with a linear-complexity space overhead, but also remains generic among arbitrary instruction sets and independent of any specific hardware. Tests of the algorithm using a COTS-processor-based onboard computer （OBC） of in-service ZDPS-1A pico-satellite products show that GTCFC can detect over 90% of the randomly injected and all-pattern-covering branching errors for different types of target programs, with performance and overheads consistent with the theoretical analysis; and beats well-established preeminent control flow checking algorithms in these dimensions. Furthermore, it is validated that GTCGC not only can be accommodated in pico-satellites conveniently with still sufficient system margins left, but also has the ability to minimize the risk of control flow errors being undetected in their space missions. Therefore, due to its effectiveness, efficiency, and compatibility, the GTCFC solution is ready for applications on COTS processors on pico-satellites in their real space missions.展开更多
In 2006,the National Meteorological Information Center （NMIC） of the China Meteorological Administration （CMA） developed its real-time quality control （QC） system of rawinsonde observations coming from the Globa...In 2006,the National Meteorological Information Center （NMIC） of the China Meteorological Administration （CMA） developed its real-time quality control （QC） system of rawinsonde observations coming from the Global Telecommunications System （GTS） and established the Global Upper-air Report Dataset,which,with the NMIC B01 format,is generally referred to as the B01 dataset and updated on a daily basis.However,when the B01 dataset is applied in climate analysis,some wind errors as well as some accurate values with incorrect error marks are found.To improve the quality and usefulness of Chinese rawinsonde wind observations,a new QC method （NewQC） is proposed in this paper.Different from the QC approach used for B01 datasets,the NewQC includes two vertical-wind-shear checks to analyze the vertical consistency of winds,in which the constant height level winds are used as reference data for the QC of mandatory pressure level winds.Different threshold values are adopted in the wind shear checks for different stations and different vertical levels.Several typical examples of QC of different error types by the new algorithm are shown and its performance with respect to 1980-2008 observational data is statistically evaluated.Compared with the radiosonde QC algorithms used in both the Meteorological Assimilation Data Ingest System （MADIS,http：//madis.noaa.gov/madis_raob_qc.html） of the National Oceanic and Atmospheric Administration （NOAA） and the B01 dataset,the NewQC shows higher accuracy and better reliability,particularly when used to judge successive observation errors.展开更多
基金support from the National Natural Science Foundation of Chinathe Fundamental Research Funds for the Central Universities of China
文摘Abstract Single event upset （SEU） effect, caused by highly energized particles in aerospace, threatens the reliability and security of small satellites composed of commercialofftheshelves （COTS）. SEU induced control flow errors （CFEs） may cause unpredictable behavior or crashes of COTSbased small satellites. This paper proposes a generic softwarebased control flow checking technique （CFC） and bipartite graphbased control flow checking （BGCFC）. To simplify the types of illegal branches, it transforms the conventional control flow graph into the equivalent bipartite graph. It checks the legal ity of control flow at runtime by comparing a global signature with the expected value and introduces consecutive IDs and bitmaps to reduce the time and memory overhead. Theoretical analysis shows that BGCFC can detect all types of internode CFEs with constant time and memory overhead. Practical tests verify the result of theoretical analysis. Compared with previous techniques, BGCFC achieves the highest error detection rate, lower time and memory overhead; the composite result in evaluation fac tor shows that BGCFC is the most effective one among all these techniques. The results in both theory and practice verify the applicability of BGCFC for COTSbased small satellites.
基金supported by National Natural Science Foundation of China (No. 60904090)
文摘This paper proposes a generic high-performance and low-time-overhead software control flow checking solution, graph-tree-based control flow checking （GTCFC） for space-borne commercial-off-the-shelf （COTS） processors. A graph tree data structure with a topology similar to common trees is introduced to transform the control flow graphs of target programs. This together with design of IDs and signatures of its vertices and edges allows for an easy check of legality of actual branching during target program execution. As a result, the algorithm not only is capable of detecting all single and multiple branching errors with low latency and time overheads along with a linear-complexity space overhead, but also remains generic among arbitrary instruction sets and independent of any specific hardware. Tests of the algorithm using a COTS-processor-based onboard computer （OBC） of in-service ZDPS-1A pico-satellite products show that GTCFC can detect over 90% of the randomly injected and all-pattern-covering branching errors for different types of target programs, with performance and overheads consistent with the theoretical analysis; and beats well-established preeminent control flow checking algorithms in these dimensions. Furthermore, it is validated that GTCGC not only can be accommodated in pico-satellites conveniently with still sufficient system margins left, but also has the ability to minimize the risk of control flow errors being undetected in their space missions. Therefore, due to its effectiveness, efficiency, and compatibility, the GTCFC solution is ready for applications on COTS processors on pico-satellites in their real space missions.
基金supported by the 973 project "Assessment, Assimilation, Recompilation and Applications of Fundamental and Thematic Climate Data Records" (Grant No.2010CB951600)the National Science and Technology Supporting Program of the 12th Five-Year Plan Period (Grant No.2012BAC22B00)the"Monitoring and Detection of Aerial Climate Change in China" project of the China Meteorological Administration (Grant No.GYHY200906014)
文摘In 2006,the National Meteorological Information Center （NMIC） of the China Meteorological Administration （CMA） developed its real-time quality control （QC） system of rawinsonde observations coming from the Global Telecommunications System （GTS） and established the Global Upper-air Report Dataset,which,with the NMIC B01 format,is generally referred to as the B01 dataset and updated on a daily basis.However,when the B01 dataset is applied in climate analysis,some wind errors as well as some accurate values with incorrect error marks are found.To improve the quality and usefulness of Chinese rawinsonde wind observations,a new QC method （NewQC） is proposed in this paper.Different from the QC approach used for B01 datasets,the NewQC includes two vertical-wind-shear checks to analyze the vertical consistency of winds,in which the constant height level winds are used as reference data for the QC of mandatory pressure level winds.Different threshold values are adopted in the wind shear checks for different stations and different vertical levels.Several typical examples of QC of different error types by the new algorithm are shown and its performance with respect to 1980-2008 observational data is statistically evaluated.Compared with the radiosonde QC algorithms used in both the Meteorological Assimilation Data Ingest System （MADIS,http：//madis.noaa.gov/madis_raob_qc.html） of the National Oceanic and Atmospheric Administration （NOAA） and the B01 dataset,the NewQC shows higher accuracy and better reliability,particularly when used to judge successive observation errors.
