一句话：通过故障注入实证分析 OpenStack 云管理系统中软件故障的影响、检测与传播，揭示故障常被静默扩散。
论文关注云管理系统中的残余软件缺陷可能引发长时间宕机、数据丢失等高严重度故障。作者在广泛使用的 OpenStack 云管理平台上开展故障注入实验，并从三方面分析故障影响：是否表现为 fail-stop、能否通过日志被及时检测与通知、以及故障如何在组件之间传播。结果显示，大多数故障未能被及时检测和告警，许多故障会随时间静默传播并跨越多个组件，说明现有运行时检查与故障隔离不足。作者据此呼吁加强运行时检查与故障遏制机制，以提升云管理系统的可靠性。
Cloud management systems provide abstractions and APIs for programmatically configuring cloud infrastructures. Unfortunately, residual software bugs in these systems can potentially lead to high-severity failures, such as prolonged outages and data losses. In this paper, we investigate the impact of failures in the context widespread OpenStack cloud management system, by performing fault injection and by analyzing the impact of the resulting failures in terms of fail-stop behavior, failure detection through logging, and failure propagation across components. The analysis points out that most of the failures are not timely detected and notified; moreover, many of these failures can silently propagate over time and through components of the cloud management system, which call for more thorough run-time checks and fault containment.
@inproceedings{paperbot5033,
title = {How bad can a bug get? an empirical analysis of software failures in the OpenStack cloud computing platform},
author = {Domenico Cotroneo and Luigi De Simone and Pietro Liguori and Roberto Natella and Nematollah Bidokhti},
booktitle = {FSE},
year = {2019},
doi = {10.1145/3338906.3338916}
}