Check out the new USENIX Web site.

Home About USENIX Events Membership Publications Students
9th Workshop on Hot Topics in Operating Systems (HotOS IX) — Abstract

Crash-Only Software

George Candea and Armando Fox, Stanford University


Crash-only programs crash safely and recover quickly. There is only one way to stop such software—by crashing it—and only one way to bring it up—by initiating recovery. Crash-only systems are built from crash-only components, and the use of transparent component-level retries hides intra-system component crashes from end users. In this paper we advocate a crash-only design for Internet systems, showing that it can lead to more reliable code, easier failure prevention, and faster, more effective recovery. We present ideas on how to build such crash-only Internet services, taking successful techniques to their logical extreme.
  • View the full text of this paper in HTML and PDF.
    The Proceedings are published as a collective work, © 2003 by the USENIX Association. All Rights Reserved. Rights to individual papers remain with the author or the author's employer. Permission is granted for the noncommercial reproduction of the complete work for educational or research purposes. USENIX acknowledges all trademarks within this paper.

  • If you need the latest Adobe Acrobat Reader, you can download it from Adobe's site.
To become a USENIX Member, please see our Membership Information.

?Need help? Use our Contacts page.

Last changed: 24 July 2003 aw
Technical Program
9th Workshop on Hot Topics in Operating Systems (HotOS IX) Home