PERFORM Performability Engineering Research Group

I. Modeling Theory and Algorithm Development

A Behavior-Based Process for Evaluating Availability Achievement Risk Using Stochastic Activity Networks.
S. T. Beaudet, T. Courtney, and W. H. Sanders. (05COU01)
Proceedings of the 52nd Annual Reliability and Maintainability Symposium (RAMS 2006), Newport Beach, California, January 23-26, 2006.

Implementing a Stochastic Process Algebra within the Möbius Modeling Framework.
G. Clark and W. H. Sanders. (01CLA02)
in Luca de Alfaro and Stephen Gilmore (Eds.), Process Algebra and Probabilistic Methods: Performance Modelling and Verification: Proceedings of the Joint International Workshop, PAPM-PROBMIV 2001, RWTH Aachen, Germany, September 12-14, 2001, Lecture Notes in Computer Science no. 2165, Berlin: Springer, 2001, pp. 200-215.

A Connection Formalism for the Solution of Large and Stiff Models.
D. Daly and W. H. Sanders. (00DAL01)
Proceedings of the 34th Annual Simulation Symposium, Seattle, WA, April 22-26, 2001, pp. 258-265.
Develops a class of connection formalisms for solving large and stiff models. These formalisms are applied to models that are decomposable into two submodels, only one of which depends on the other.

The Möbius Framework and Its Implementation.
D. D. Deavours, G. Clark, T. Courtney, D. Daly, S. Derisavi, J. M. Doyle, W. H. Sanders, and P. G. Webster. (01DEA05)
IEEE Transactions on Software Engineering vol. 28, no. 10, October 2002, pp. 956-969.

An Efficient Well-Specified Check.
D. D. Deavours and W. H. Sanders. (99DEA01)
Proceedings of PNPM'99: 8th International Workshop on Petri Nets and Performance Models, Zaragoza, Spain, September 8-10, 1999, pp. 124-133.
This paper shows that the definitions of "well-defined" and "well-specified" are the same. This yields a well-specified check that is far more efficient than previous well-specified algorithms.

The Möbius Execution Policy.
D. D. Deavours and W. H. Sanders. (01DEA02)
Proceedings of the 9th International Workshop on Petri Nets and Performance Models, Aachen, Germany, September 11-14, 2001, pp. 135-144.

Möbius: Framework and Atomic Models.
D. D. Deavours and W. H. Sanders. (01DEA01)
Proceedings of the 9th International Workshop on Petri Nets and Performance Models, Aachen, Germany, September 11-14, 2001, pp. 251-260.

Expected Impulse Rewards in Markov Regenerative Stochastic Petri Nets.
R. German, A. P. A. van Moorsel, M. A. Qureshi, and W. H. Sanders. (95GER01)
Application and Theory of Petri Nets, Proceedings of the 17th International Conference, Osaka, Japan, June 24-28, 1996, pp. 172-191 (ed. J. Billington and W. Reisig), Lecture Notes in Computer Science, Vol. 1091, Springer-Verlag, 1996.
Computes reward measures for Petri nets with general distributions. Furthermore, the method of supplementary variables is enhanced to derive transient solutions of models with general distributions.

Stochastic Activity Networks: Structure, Behavior, and Application.
J. F. Meyer, A. Movaghar, and W. H. Sanders. (85M01, available in hard copy)
Proceedings of the International Conference on Timed Petri Nets, Torino, Italy, July 1985, pp. 106-115.
Paper containing formal SAN definitions, as they existed in 1985.

Specification and Construction of Performability Models.
J. F. Meyer and W. H. Sanders. (93M01)
Proceedings of the Second International Workshop on Performability Modeling of Computer and Communication Systems, Mont Saint-Michel, France, June 28-30, 1993.
Overview of stochastic activity networks, performability variable, specification, and reduced base model construction. Good introductory paper.

Specification and Construction of Performability Models.
J. F. Meyer and W. H. Sanders. (96MEY01)
Chapter 9 of Performability Modelling: Techniques and Tools (edited by B. R. Haverkort, R. Marie, G. Rubino, and K. S. Trivedi), John Wiley & Sons, 2001, pp. 179-222.

Performability Modeling with Stochastic Activity Networks.
A. Movaghar and J. F. Meyer.
Proceedings of the 1984 Real-Time Systems Symposium, Austin, TX, December 1984, pp. 215-224.
Paper introducing stochastic activity networks. Contains an application to real-time systems.

Cooperative Research in Multi-Formalism, Multi-Solution Modeling: Opportunities and Challenges.
W. H. Sanders. (03SAN02)
Proceedings of ICALP 2003 Satellite Workshop on Stochastic Petri Nets and Related Formalisms (Universität Dortmund Research Report No. 780), Eindhoven, The Netherlands, June 28-29, 2003, p. 170.

The Importance of the Integration of Measures, Solution Types, and Application Domains in Modeling Schemes.
W. H. Sanders.
ICASE Workshop on Software Tools and Techniques for Performance and Reliability Estimation, Hampton, VA, June 17-18, 1993.

Integrated Frameworks for Multi-Level and Multi-Formalism Modeling.
W. H. Sanders. (99SAN01)
Proceedings of PNPM'99: 8th International Workshop on Petri Nets and Performance Models, Zaragoza, Spain, September 8-10, 1999, pp. 2-9.

Stochastic Methods for Dependability, Performability, and Security Evaluation.
W. H. Sanders. (04SAN01)
Proceedings of the 25th International Conference on Applications and Theory of Petri Nets 2004 (ICATPN 2004), Bologna, Italy, June 21-25, 2004. Lecture Notes in Computer Science, vol. 3099, Springer, p. 97.

Multi-formalism and Multi-solution-method Modeling Frameworks: The Möbius Approach.
W. H. Sanders, T. Courtney, D. Deavours, D. Daly, S. Derisavi, and V. Lam. (03SAN01)
Proceedings of the Symposium on Performance Evaluation - Stories and Perspectives, Vienna, Austria, December 5-6, 2003, pp. 241-256.

Performability Evaluation of Distributed Systems Using Stochastic Activity Networks.
W. H. Sanders and J. F. Meyer. (87S01, available in hard copy)
Proceedings of the International Workshop on Petri Nets and Performance Models, Madison, WI, August 1987, pp. 111-120.
Early paper describing the use of reward model solution methods and stochastic activity networks for performability evaluation.

Stochastic Activity Networks: Formal Definitions and Concepts.
W. H. Sanders and J. F. Meyer. (01SAN02)
in E. Brinksma, H. Hermanns, and J. P. Katoen (Eds.), Lectures on Formal Methods and Performance Analysis, First EEF/Euro Summer School on Trends in Computer Science, Berg en Dal, The Netherlands, July 3-7, 2000, Revised Lectures, Lecture Notes in Computer Science no. 2090, pp. 315-343. Berlin: Springer, 2001.

A Unified Approach for Specifying Measures of Performance, Dependability, and Performability.
W. H. Sanders and J. F. Meyer. (91S02)
Dependable Computing for Critical Applications, Vol. 4 of Dependable Computing and Fault-Tolerant Systems (ed. A. Avizienis, H. Kopetz, and J. Laprie), Springer-Verlag, 1991, pp. 215-237.
Theory behind reward variable specification, as implemented in UltraSAN. This paper lays the foundation for specifying performance, dependability, and performability variables as SAN-based reward variables, and it gives examples of specification of variables of each type.

Frameworks for Evaluating Discrete-Event Dynamic Systems.
B. P. Zeigler and W. H. Sanders. (93Z01, available in hard copy)
Discrete Event Dynamic Systems: Theory and Applications, vol. 3, no. 2/3, July 1993, pp. 113-118.
Discussion of the relationship of representation methods for discrete-event dynamic systems.

b. State Generation

Optimal State-Space Lumping in Markov Chains.
S. Derisavi, H. Hermanns, and W. H. Sanders. (02DER01)
Information Processing Letters, vol. 87, no. 6, September 30, 2003, pp. 309-315.

A Compositional Lumping Algorithm for Matrix Diagram Representation of Markov Chains.
S. Derisavi, P. Kemper, and W. H. Sanders. (07DER01)
Submitted for publication.

Lumping Matrix Diagram Representations of Markov Models.
S. Derisavi, P. Kemper, and W. H. Sanders. (04DER01)
Proceedings of the 2005 International Conference on Dependable Systems and Networks (DSN-2005), Yokohama, Japan, June 28-July 1, 2005, pp. 742-751.

Symbolic State-space Exploration and Numerical Analysis of State-sharing Composed Models.
S. Derisavi, P. Kemper, and W. H. Sanders. (03DER01)
Proceedings of NSMC '03: The Fourth International Conference on the Numerical Solution of Markov Chains, Urbana, IL, USA, September 3-5, 2003, pp. 167-189.

Symbolic State-space Exploration and Numerical Analysis of State-sharing Composed Models.
S. Derisavi, P. Kemper, and W. H. Sanders. (03DER03)
Linear Algebra and Its Applications (LAA), vol. 386, July 15, 2004, pp. 137-166.

Dependability Analysis with Markov Chains: How Symmetries Improve Symbolic Computations.
M. G. McQuinn, P. Kemper, and W. H. Sanders. (07MCQ01)
Proceedings of the 4th International Conference on the Quantitative Evaluation of SysTems (QEST) 2007, Edinburgh, UK, Sept. 16-19, 2007, pp. 151-160.

Detecting and Exploiting Symmetry in Discrete-State Markov Models.
W. D. Obal II, M. G. McQuinn, and W. H. Sanders. (06OBA01)
Proceedings of the 12th Pacific Rim International Symposium on Dependable Computing (PRDC'06), Riverside, California, USA, Dec. 18-20, 2006, pp. 26-38.

Detecting and Exploiting Symmetry in Discrete-State Markov Models.
W. D. Obal II, M. G. McQuinn, and W. H. Sanders. (07OBA01)
IEEE Transactions on Reliability, vol. 56, no. 4, Dec. 2007, pp. 643-654.

Measure-Adaptive State-Space Construction.
W. D. Obal II and W. H. Sanders. (99OBA01)
Proceedings of the 4th IEEE International Computer Performance and Dependability Symposium (IPDS 2K), March 27-29, 2000, Chicago, Illinois, USA, pp. 25-34.

Measure-Adaptive State-Space Construction.
W. D. Obal II and W. H. Sanders. (00OBA01)
Performance Evaluation, Special Issue on IPDS 2000, vol. 44, April 2001, pp. 237-258.
Journal version of the conference paper with the same name.

State-Space Support for Path-based Reward Variables.
W. D. Obal II and W. H. Sanders. (98OBA01)
Proceedings of the 1998 International Computer Performance and Dependability Symposium (IPDS '98), September 7-9, 1998, Durham, North Carolina, USA, pp. 228-237.
This paper introduces path-based reward variables. Reward structures are defined on sequences of model states and events specified using "path automata," and a procedure for automatically constructing a state-space that supports such variables is given.

State-Space Support for Path-based Reward Variables.
W. D. Obal II and W. H. Sanders. (98OBA02)
Performance Evaluation, vol. 35, 1999, pp. 233-251.

Algorithms for the Generation of State-Level Representations of Stochastic Activity Networks with General Reward Structures.
M. A. Qureshi, W. H. Sanders, A. P. A. van Moorsel, and R. German. (95Q02)
Proceedings of the Sixth International Workshop on Petri Nets and Performance Models, Durham, NC, October 3-6, 1995, pp. 180-190.
This paper discusses the generation of the stochastic process underlying a SAN, including the algorithm for the well-specified check. Furthermore, a general reward structure is introduced that can represent all reward variables defined on the marking behavior of a SAN.

Algorithms for the Generation of State-Level Representations of Stochastic Activity Networks with General Reward Structures.
M. A. Qureshi, W. H. Sanders, A. P. A. van Moorsel, and R. German. (95QUR05)
IEEE Transactions on Software Engineering, vol. 22, no. 9, September 1996, pp. 603-614.
Extended version of conference paper, above.

Performance Variable Driven Construction Methods for Stochastic Activity Networks.
W. H. Sanders and J. F. Meyer. (88S01, available in hard copy)
Computer Performance and Reliability (ed. G. Iazeolla, P. J. Courtois, and O. J. Boxma), Amsterdam: North-Holland, 1988, pp. 383-398.
An early paper discussing state-space reduction techniques for stochastic activity networks. Later, this technique came to be known as reduced base model construction.

Reduced Base Model Construction Methods for Stochastic Activity Networks.
W. H. Sanders and J. F. Meyer. (89S01)
Proceedings of the Third International Workshop on Petri Nets and Performance Models, Kyoto, Japan, Dec. 11-13, 1989, pp. 74-84.
Conference version of paper with same title.

Reduced Base Model Construction Methods for Stochastic Activity Networks.
W. H. Sanders and J. F. Meyer. (91S01)
IEEE Journal on Selected Areas in Communications, special issue on Computer-Aided Modeling, Analysis, and Design of Communication Networks, vol. 9, no. 1, Jan. 1991, pp. 25-36.
Discusses reduced base model construction. This method, which is implemented in UltraSAN, makes use of symmetries in SAN models to reduce the size of the state space that needs to be considered for an analytic solution.

Recurrence-Relation-Based Reward Model for Performability Evaluation of Embedded Systems.
A. T. Tai, K. S. Tso, and W. H. Sanders. (07TAI01)
Proceedings of the 8th International Workshop on Performability Modeling of Computer and Communication Systems, Edinburgh, Scotland, Sept. 20-21, 2007, to appear.

c. Analytic Model Solution

Approximate Computation of Transient Results for Large Markov Chains.
P. Buchholz and W. H. Sanders. (04BUC01)
Proceedings of the 1st International Conference on Quantitative Evaluation of Systems (QEST 2004), Enschede, The Netherlands, September 27-30, 2004, pp. 126-135.

An Approach for Bounding Reward Measures in Markov Models Using Aggregation.
D. Daly, P. Buchholz, and W. H. Sanders. (04DAL03)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report UILU-ENG-04-2206 (CRHC-04-06), July 2004.

Bound-Preserving Composition for Markov Reward Models.
D. Daly, P. Buchholz, and W. H. Sanders. (05DAL04)
Proceedings of the 3rd International Conference on the Quantitative Evaluation of SysTems (QEST) 2006, Riverside, CA, September 11-14, 2006, pp. 243-252.

A Preorder Relation for Markov Reward Processes.
D. Daly, P. Buchholz, and W. H. Sanders (05DAL02)
IBM Research Report RC23827 (W0512-025), December 6, 2005.

A Preorder Relation for Markov Reward Processes.
D. Daly, P. Buchholz, and W. H. Sanders. (06DAL01)
Statistics and Probability Letters, vol. 77, no. 11, 2007, pp. 1148-1157.

Bounded Decomposition of Stochastic Models.
D. Daly and W. H. Sanders. (03DAL02)
in Extended Abstracts from PMCCS-6: the Sixth International Workshop on Performability Modeling of Computer and Communication Systems, Monticello, IL, September 5-7, 2003, pp. 1-4.

An Efficient Disk-based Tool for Solving Large Markov Models.
D. D. Deavours and W. H. Sanders. (98DEA01)
Performance Evaluation, vol. 33, 1998, pp. 67-84.
Describes an efficient steady state analytical solution technique that makes extensive use of a hard disk.

An Efficient Disk-based Tool for Solving Very Large Markov Models.
D. D. Deavours and W. H. Sanders. (96DEA02)
Raymond Marie et al. (Eds.), Computer Performance Evaluation: Proceedings of the 9th International Conference on Modelling Techniques and Tools (TOOLS '97), St. Malo, France, June 3-6, 1997 (Lecture Notes in Computer Science, no. 1245), Berlin: Springer, 1997, pp. 58-71.
We discuss an implementation of block Gauss-Seidel specifically intended for use on Markov chains generated by UltraSAN or a GSPN tool. We show two examples of large models and results for a 10 million state model with 100 million non-zero entities.

"On-the-Fly" Solution Techniques for Stochastic Petri Nets and Extensions.
D. D. Deavours and W. H. Sanders. (96DEA01)
Proceedings of 7th International Workshop on Petri Nets and Performance Models (PNPM '97), Saint Malo, France, June 3-6, 1997, pp. 132-141.
Addresses the problem of large state spaces for different modeling types. We have three contributions: 1) Method for computing columns of Q matrix for Gauss-Seidel solutions, 2) new algorithm called modified adaptive Gauss-Seidel which exhibits locality and a heuristic for increasing convergence, and 3) a method which allows one to do Gauss-Seidel and variants with row access to Q with equal or less memory required by Jacobi and equal operations count per iteration.

"On-the-Fly" Solution Techniques for Stochastic Petri Nets and Extensions.
D. D. Deavours and W. H. Sanders. (97DEA02)
IEEE Transactions on Software Engineering, vol. 24, no. 10, October 1998, pp.889-902.

Integrating Analysis Techniques in Möbius: Experiences with Interfaces.
S. Derisavi and P. Kemper. (03DER04)
Proceedings of ICALP 2003 Satellite Workshop on Stochastic Petri Nets and Related Formalisms (Universität Dortmund Research Report No. 780), Eindhoven, The Netherlands, June 28-29, 2003, p. 170.

Empirical Comparison of Uniformization Methods for Continuous-Time Markov Chains.
J. D. Diener and W. H. Sanders. (95D01)
Computations with Markov Chains, (ed. W. J. Stewart), Kluwer Academic Publishers, Boston, 1995, pp. 547-570.
Provides a comparison and a discussion of implementation aspects of different variations of adaptive uniformatization (see the paper by van Moorsel and Sanders).

Performance Analysis of Two Time-based Coordinated Checkpointing Protocols.
G. P. Kavanaugh and W. H. Sanders. (97GP01)
Proceedings of the 1997 Pacific Rim International Symposium on Fault Tolerant Systems (PRFTS), December 15-16, 1997, Taipei, Taiwan, pp. 194-201.
Develops an analytical model for two time-based checkpointing protocols. Then, using the models, the two protocols are compared and contrasted.

A Component-Level Path Composition Approach for Efficient Transient Analysis of Large CTMCs.
V. V. Lam, P. Buchholz, and W. H. Sanders. (05LAM03)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2006), Philadelphia, PA, USA, June 25-28, 2006, pp. 485-494.

A Structured Path-Based Approach for Computing Transient Rewards of Large CTMCs.
V. V. Lam, P. Buchholz, and W. H. Sanders. (04LAM01)
Proceedings of the 1st International Conference on Quantitative Evaluation of Systems (QEST 2004), Enschede, The Netherlands, September 27-30, 2004, pp. 136-145.

An Efficient Two-Stage Iterative Method for the Steady-State Analysis of Markov Regenerative Stochastic Petri Net Models.
L. Malhis and W. H. Sanders. (96MAL01)
Performance Evaluation, vols. 27&28, October 1996, pp. 583-601.
New space- and time-efficient solution method for Markov regenerative stochastic Petri nets.

A New Methodology for Calculating Distributions of Reward Accumulated During a Finite Interval.
M. A. Qureshi and W. H. Sanders. (95QUR04)
Proceedings of the 26th International Symposium on Fault-Tolerant Computing, Sendai, Japan, June 1996, pp. 116-125.
This paper presents a new method to compute the distribution of reward accumulated during a finite interval in a Markov reward model. It does this by computing probabilities of particular paths in a uniformized version of the process, and computing the conditional distribution of reward accumulated, given a path.

Reward Model Solution Methods with Impulse and Rate Rewards: An Algorithm and Numerical Results.
M. A. Qureshi and W. H. Sanders. (94QUR01)
Performance Evaluation, vol. 20, 1994, pp. 413-436.
Presents a method to compute performability distribution of reward models with impulse and rate rewards.

Reward Model Solution Methods with Impulse and Rate Rewards: An Algorithm and Numerical Results.
W. H. Sanders and M. A. Qureshi.
2nd ORSA Telecommunications Conference, Boca Raton, FL, Mar. 1992.

Adaptive Uniformization.
A. P. A. van Moorsel and W. H. Sanders. (94M02)
ORSA Communications in Statistics: Stochastic Models, vol. 10, no. 3, August 1994, pp. 619-648.
Discusses an efficient variation of uniformization, particularly useful for stiff systems. A formal definition of adaptive uniformization is given, along with a proof that it yields correct results, and examples of its use.

Adaptive Uniformization: Technical Details.
A. P. A. van Moorsel and W. H. Sanders. (93M03)
Research Report 93M03 CRHC.
Technical details complementing the above paper.

Transient Solution of Markov Models by Combining Adaptive & Standard Uniformization.
A. P. A. van Moorsel and W. H. Sanders. (96MOO02; file is of a prepublication version of this paper)
IEEE Transactions on Reliability, vol. 46, no. 3, September 1997, pp. 430-440.
Proposes a new transient solution method that combines adaptive and standard uniformization in a method that exhibits the benefits of both methods and, to a large extent, eliminates their disadvantages.

d. Simulation Model Solution

Efficient State Management to Speed Up Simultaneous Simulation of Alternate System Configurations.
S. Gaonkar, T. Courtney, and W. H. Sanders. (06GAO01)
Proceedings of the International Mediterranean Modelling Multiconference, Barcelona, Spain, October 4-6, 2006, pp. 31-36.

G-SSASC: Simultaneous Simulation of System Models with Bounded Hazard Rates.
S. Gaonkar and W. H. Sanders. (09GAO03)
Proceedings of the 2009 Winter Simulation Conference, Austin, Texas, USA, Dec. 13-16, 2009, to appear.

Simultaneous Simulation of Alternative System Configurations.
S. Gaonkar and W. H. Sanders. (05GAO01)
Proceedings of the 11th Pacific Rim International Symposium on Dependable Computing, Changsha, Hunan, China, Dec. 12-14, 2005, pp. 41-48.

Simultaneous Simulation of Alternative System Configurations of Markovian System Models.
S. Gaonkar and W. H. Sanders. (09GAO01)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report UILU-ENG-09-2203 (CRHC-09-02), March 2009.

Simultaneous Simulation of Alternative System Configurations of Markovian System Models.
S. Gaonkar and W. H. Sanders. (09GAO02)
Submitted for publication.

Dynamic Partitioning of Large Discrete Event Biological Systems for Hybrid Simulation and Analysis.
K. R. Joshi, N. Neogi, and W. H. Sanders. (04JOS01)
Proceedings of the 7th International Workshop on Hybrid Systems: Computation and Control (HSCC 2004), Philadelphia, PA, March 25-27, 2004, pp. 463-476.

A Component-Level Path-Based Simulation Approach for Efficient Analysis of Large Markov Models.
V. V. Lam, P. Buchholz, and W. H. Sanders. (05LAM02)
Proceedings of the 2005 Winter Simulation Conference, Orlando, FL, December 4-7, 2005, pp. 584-590

An Environment for Importance Sampling Based on Stochastic Activity Networks.
W. D. Obal II and W. H. Sanders. (94O01)
Proceedings of the 13th Symposium on Reliable Distributed Systems, Dana Point, CA, October, 1994, pp. 64-73.
Describes the theory of importance sampling as applied to SAN-based reward models, with an application to the evaluation of the MARS architecture.

A Model Based Foundation for Evaluating Large Scale Telecommunication Systems.
W. D. Obal II and W. H. Sanders.
Proc. 12th Annual IEEE Int. Phoenix Conf. on Computers and Communications, Phoenix, AZ, Mar. 23-26, 1993, pp. 367-369.

Quick Simulation of a Performability Model.
W. D. Obal II and W. H. Sanders. (96OBA03)
Proceedings of PMCCS3, Bloomingdale, IL, September, 1996.
This paper reports preliminary results of our work on using large deviations theory to develop effective importance sampling strategies for performability models.

Using ZPL to Develop a Parallel Chaos Router Simulator.
W. Richardson, M. L. Bailey, and W. H. Sanders.
Winter Simulation Conference, Coronado, CA, Dec. 8-11, 1996.

Efficient Simulation of Hierarchical Stochastic Activity Network Models.
W. H. Sanders and R. S. Freire. (93S02)
Discrete Event Dynamic Systems: Theory and Applications, vol. 3, no. 2/3, July 1993, pp. 271-300.
Discusses algorithms for state change and future events list management in UltraSAN simulation. Multiple future events lists are used to reduce operations required on each state change.

Computation of the Asymptotic Bias and Variance for Simulation of Markov Reward Models.
A. P. A. van Moorsel, L. A. Kant, and W. H. Sanders. (96MOO01)
Proceedings of the 29th Annual Simulation Symposium, New Orleans, LA, April 1996, pp. 173-182.
Gives a numerical method for computing the asymptotic variance for large Markov models. The asymptotic bias and variance determine the goodness and run length of a simulation.

II. Modeling Tools

On Integrating the Möbius and Modest Modeling Tools.
H. Bohnenkamp, T. Courtney, D. Daly, S. Derisavi, H. Hermanns, J.-P. Katoen, R. Klaren, V. V. Lam, and W. H. Sanders. (03BOH01)
Tool paper in the Proceedings of the 2003 International Conference on Dependable Systems and Networks, San Francisco, CA, June 22-25, 2003, p. 671.

The Möbius Modeling Tool.
G. Clark, T. Courtney, D. Daly, D. Deavours, S. Derisavi, J. M. Doyle, W. H. Sanders, and P. Webster. (01CLA01)
Proceedings of the 9th International Workshop on Petri Nets and Performance Models, Aachen, Germany, September 11-14, 2001, pp. 241-250.

The Möbius Modeling Environment: Recent Developments.
T. Courtney, D. Daly, S. Derisavi, S. Gaonkar, M. Griffith, V. Lam, and W. H. Sanders. (04COU01)
Proceedings of the 1st International Conference on Quantitative Evaluation of Systems (QEST 2004), Enschede, The Netherlands, September 27-30, 2004, pp. 328-329.

The Möbius Modeling Environment.
T. Courtney, D. Daly, S. Derisavi, V. Lam, and W. H. Sanders. (03COU01)
Tools of the 2003 Illinois International Multiconference on Measurement, Modelling, and Evaluation of Computer-Communication Systems, Universität Dortmund Fachbereich Informatik research report no. 781/2003, 2003, pp. 34-37.

The Möbius Modeling Environment: Recent Extensions - 2005.
T. Courtney, S. Derisavi, S. Gaonkar, M. Griffith, V. Lam, M. McQuinn, E. Rozier, and W. H. Sanders. (05COU02)
Proceedings of the 2nd International Conference on the Quantitative Evaluation of Systems (QEST 2005), Torino, Italy, September 19-22, 2005, pp. 259-260.

Data Analysis and Visualization within the Möbius Modeling Environment.
T. Courtney, S. Gaonkar, M. Griffith, V. Lam, M. McQuinn, E. Rozier, and W. H. Sanders. (06COU01)
Proceedings of the 3rd International Conference on the Quantitative Evaluation of SysTems (QEST), Riverside, CA, Sept. 11-14, 2006, pp. 137-138.

Möbius 2.3: An Extensible Tool for Dependability, Security, and Performance Evaluation of Large and Complex System Models.
T. Courtney, S. Gaonkar, K. Keefe, E. W. D. Rozier, and W. H. Sanders. (08COU01)
Proceedings of the 39th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2009), Estoril, Lisbon, Portugal, June 29-July 2, 2009, to appear.

Design of Experiments within the Möbius Modeling Framework.
T. Courtney, S. Gaonkar, M. G. McQuinn, E. Rozier, W. H. Sanders, and P. Webster. (07COU01)
Proceedings of the 4th International Conference on the Quantitative Evaluation of SysTems (QEST) 2007, Edinburgh, UK, Sept. 16-19, 2007, pp. 161-162.

Performability Modeling with UltraSAN.
J. Couvillion, R. Freire, R. Johnson, W. D. Obal II, M. A. Qureshi, M. Rai, W. H. Sanders, and J. E. Tvedt. (91C01)
IEEE Software, vol. 8, no. 5, Sept. 1991, pp. 69-80.
Overview paper on UltraSAN. Provides a basic introduction to the package.

Performability Modeling with UltraSAN.
J. Couvillion, R. Freire, R. Johnson, W. D. Obal II, M. A. Qureshi, M. Rai, W. H. Sanders, and J. E. Tvedt. (91C02, available in hard copy)
Proceedings of the International Workshop on Petri Nets and Performance Models, Melbourne, Australia, December 2-5, 1991, pp. 290-299.
Conference version of above paper.

Möbius: An Extensible Tool for Performance and Dependability Modeling.
D. Daly, D. D. Deavours, J. M. Doyle, A. J. Stillman, and P. G. Webster. (99DAL01)
Digest of FastAbstracts presented at the 29th Annual International Symposium on Fault-Tolerant Computing (FTCS-29), Madison, Wisconsin, USA, June 15-18, 1999, pp 15-16.

Möbius: An Extensible Framework for Performance and Dependability Modeling.
D. Daly, D. D. Deavours, J. M. Doyle, A. J. Stillman, P. G. Webster, and W. H. Sanders. (99DAL02)
Tool Descriptions from the Multi-Workshop on Formal Methods in Performance Evaluation and Applications, Zaragoza, Spain, September 6-10, 1999.

Möbius: An Extensible Tool for Performance and Dependability Modeling.
D. Daly, D. D. Deavours, J. M. Doyle, P. G. Webster, and W. H. Sanders. (99DAL03)
Computer Performance Evaluation: Modelling Techniques and Tools: Proceedings of the 11th International Conference, TOOLS 2000, Schaumburg, IL, March 27-31, 2000. In B. R. Haverkort, H. C. Bohnenkamp, and C. U. Smith (Eds.), Lecture Notes in Computer Science No. 1786, pp. 332-336. Berlin: Springer, 2000.

UltraSAN Version 3 Overview.
D. D. Deavours, W. D. Obal II, M. A. Qureshi, W. H. Sanders, and A. P. A. van Moorsel. (95DEA01)
Proceedings of the Sixth International Workshop on Petri Nets and Performance Models, Durham, NC, October 3-6, 1995, pp. 216-217.
A two-page overview of UltraSAN Version 3.0.

Experiences in Porting UltraSAN from Unix to AIX and the RISC SYSTEM/6000.
W. P. Delaney, M. P. Kaplan, S. M. Mahoney, W. H. Sanders, and S. C. West.
Tucson Technical Report, TR-82.0531, IBM ADSTAR, Tucson, AZ, Sept. 1992.

The Möbius State-level Abstract Functional Interface.
S. Derisavi, P. Kemper, W. H. Sanders, and T. Courtney. (01DER01)
Computer Performance Evaluation: Modelling Techniques and Tools: Proceedings of the 12th International Conference, TOOLS 2002, London, UK, April 14-17, 2002, Lecture Notes in Computer Science vol. 2324 (T. Field, P. G. Harrison, J. Bradley, and U. Harder, eds.), Berlin: Springer, pp. 31-50.

The Möbius State-level Abstract Functional Interface.
S. Derisavi, P. Kemper, W. H. Sanders, and T. Courtney. (02DER02)
Performance Evaluation, vol. 54, no. 2, October 2003, pp. 105-128.

Performance and Dependability Modeling with Möbius.
S. Gaonkar, K. Keefe, R. Lamprecht, E. Rozier, P. Kemper, and W. H. Sanders. (08GAO03)
ACM SIGMETRICS Performance Evaluation Review, vol. 36, no. 4, March 2009, pp. 16-21.

Remote Job Management in the Möbius Modeling Framework.
K. Keefe, Q. Mitchell, E. Rozier, and W. H. Sanders. (09GUL01)
Proceedings of the 6th International Conference on Quantitative Evaluation of SysTems (QEST) 2009, Budapest, Hungary, September 13-16, 2009, to appear.

Overview of UltraSAN.
W. D. Obal II, M. A. Qureshi, D. D. Deavours, and W. H. Sanders. (96OBA01)
Proc. IEEE Int. Performance and Dependability Symposium, Urbana, IL, Sept. 4-6, 1996.

Importance Sampling Simulation in UltraSAN.
W. D. Obal II and W. H. Sanders. (94O02)
Simulation, vol. 62, no. 2, February 1994, pp. 98-111.
Describes the importance sampling simulation facility in UltraSAN.

Möbius: An Integrated Discrete-Event Modeling Environment.
J. Peccoud, T. Courtney, and W. H. Sanders. (07PEC01)
Bioinformatics, vol. 23, no. 24, 2007, pp. 3412-3414.

METASAN: A Performability Evaluation Tool Based on Stochastic Activity Networks.
W. H. Sanders and J. F. Meyer. (86S01, available in hard copy)
Proceedings of the IEEE-ACM Fall Joint Computer Conference, Dallas, TX, November 1986, pp. 807-816.
Overview paper for METASAN. METASAN was the first stochastic activity network based evaluation package.

Dependability Evaluation Using UltraSAN.
W. H. Sanders and W. D. Obal II. (93S01)
Proceedings of the 23rd Annual International Symposium on Fault-Tolerant Computing, Toulouse, France, June 22-24, 1993, pp. 674-679.
Overview of UltraSAN modeling software with applications to dependability evaluation.

The UltraSAN Modeling Environment.
W. H. Sanders, W. D. Obal II, M. A. Qureshi, and F. K. Widjanarko. (95S01)
Performance Evaluation, vol. 24, no. 1, October-November 1995, pp. 89-115.
Overview of UltraSAN Version 3.0.

UltraSAN Version 3: Architecture, Features, and Implementation.
W. H. Sanders, W. D. Obal II, M. A. Qureshi, and F. K. Widjanarko. (95S02)
Proceedings of the AIAA Computing in Aerospace 10 Conference, San Antonio, TX, March 28-30, 1995, pp. 327-338.
Discussion of the features and architecture of UltraSAN Version 3.0, with an example.

A Recurrence-Relation-Based Reward Model for Performability Evaluation of Embedded Systems.
A. T. Tai, K. S. Tso, and W. H. Sanders. (08TAI01)
Proceedings of the 38th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2008), Anchorage, Alaska, June 24-27, 2008, pp. 532-541.

III. System Evaluation

a. Media Access Control Protocols

Definition and Evaluation of the Data Link Layer of PACnet.
Y. Alsafadi, R. Martinez, and W. H. Sanders. (91A01, available in hard copy)
Proceedings of the Medical Imaging V, SPIE Conference on Medical Imaging, San Jose, CA, Feb. 23-Mar. 1, 1991, pp. 129-140.
Performance evaluation of a new media-access control protocol for PACS application.

LAN Protocol Validation.
J. F. Meyer, K. H. Muralidhar, and W. H. Sanders.
ITI Technical Report ITI-TR-87-26, Communications and Distributed Systems Laboratory, Industrial Technology Institute, Ann Arbor, MI, Oct. 1987.

Model-Based Performability Evaluation of Local Area Networks.
J. F. Meyer, K. H. Muralidhar, and W. H. Sanders.
Technical Report ITI-TR-88-7, Communications and Distributed Systems Laboratory, Industrial Technology Institute, Ann Arbor, MI, May 1988.

Performability of a Token Bus Network under Transient Fault Conditions.
J. F. Meyer, K. H. Muralidhar, and W. H. Sanders. (89M01)
Proceedings of the 19th Annual International Symposium on Fault-Tolerant Computing, Chicago, IL, June 1989, pp. 175-182.
Performability evaluation of IEEE 802.4 token bus protocol using stochastic activity networks. Considers transient faults which result in message losses.

Performability Evaluation of CSMA/CD and CSMA/DCR Protocols under Transient Fault Conditions.
K. H. Prodromides and W. H. Sanders. (91P01, available in hard copy)
Proceedings of the Tenth Symposium on Reliable Distributed Systems, Pisa, Italy, Sept. 30-Oct. 2, 1991, pp. 166-176.
Conference version of paper with same name.

Performability Evaluation of CSMA/CD and CSMA/DCR Protocols under Transient Fault Conditions.
K. Prodromides and W. H. Sanders. (93P01)
IEEE Transactions on Reliability, vol. 42, no. 1, March 1993, pp. 116-127.
Performability evaluation of CSMA/CD and CSMA/DCR protocols, considering transient faults due to noise bursts.

Performability Evaluation of Media Access Control Protocols.
W. H. Sanders and K. H. Prodromides.
TIMS XXX-SOBRAPO XXII, Rio, Brazil, July 15-17, 1991.

The Effect of Slot Time on the Performability of Token Bus Networks.
W. H. Sanders and C. N. Thurwachter.
GAINS Technical Report, Communications and Distributed Systems Laboratory, Industrial Technology Institute, Ann Arbor, MI, Feb. 1988.

b. ATM Networks

Analysis of the Distribution of Consecutive Cell Losses in an ATM Switch Using Stochastic Activity Networks.
L. Kant and W. H. Sanders. (96KAN02; please note that this file contains a prepublication version that is slightly different from the published paper.)
Special Issue of International Journal of Computer Systems Science & Engineering on ATM Switching, vol. 12, no. 2, March 1997, pp. 117-129.
Discusses the analysis of cell loss behavior in a fast packet switch using stochastic activity networks.

Loss Process Analysis of the Knockout Switch Using Stochastic Activity Networks.
L. Kant and W. H. Sanders. (95KAN01)
Proceedings of the Fourth International Conference on Computer Communications and Networks, Las Vegas, NV, September 20-23 1995, pp. 344-349.
Discusses the use of SANs to evaluate performance in terms of distribution of consecutive cell losses for a specific FPS architecture.

Performance Analysis of the Knockout Switch Under Bursty Traffic Based on a Stochastic Activity Network Model.
L. Kant and W. H. Sanders. (96KAN01)
Simulation: Special Issue on Performance Analysis of ATM Networks, vol. 70, no. 1, January 1998, pp. 19-33.
Discusses the use of SANs in analyzing the performance of the knockout switch with correlated input traffic.

Performance Evaluation of the Knockout Switch under Bursty and Non-Uniform Traffic Conditions.
W. H. Sanders and L. A. Kant.
ORSA/TIMS Joint Meeting, Detroit, MI, Oct. 23-36, 1994.

Analysis of Cell Loss Process in an ATM Switch with Stochastic Activity Networks.
W. H. Sanders and L. A. Kant.
3rd ORSA Telecommunications Conference, Boca Raton, FL, Mar. 20-22, 1995.

c. Picture Archiving Systems

Evaluation of a Structured PACS with Combined Voice and Data Traffic.
Y. Alsafadi, W. H. Sanders, and R. Martinez.
Proc. Medical Imaging IV, SPIE Conference on Medical Imaging, Newport Beach, CA, Feb. 4-9, 1990, pp. 484-494.

A Modular Method for Evaluating the Performance of Picture Archiving and Communication Systems.
A. Kudrimoti and W. H. Sanders. (92K01, available in hard copy)
Proceedings of the Fifth IEEE Symposium on Computer Based Medical Systems, Durham, NC, June 14-17, 1992, pp. 44-53.
Conference version of paper with same title.

Performance Evaluation of a Picture Archiving and Communication System Using Stochastic Activity Networks.
R. Martinez, W. H. Sanders, Y. Alsafadi, J. Nam, T. Ozeki, and K. Komatsu. (90M01, available in hard copy)
Proceedings of Medical Imaging IV, SPIE Conference on Medical Imaging, Newport Beach, CA, Feb. 4-9, 1990, pp. 167-178.
Conference version of paper by Sanders et al. with same title.

A Modular Method for Evaluating the Performance of Picture Archiving and Communication Systems.
W. H. Sanders, L. A. Kant, and A. Kudrimoti. (93S06)
Journal of Digital Imaging, vol. 6, no. 3, August 1993, pp. 172-193.
Performance evaluation of a PACS considering a network, a database, modalities, and viewing workstations.

Performance Evaluation of a Picture Archiving and Communication Network Using Stochastic Activity Networks.
W. H. Sanders, R. Martinez, Y. Alsafadi, and J. Nam. (93S04)
IEEE Transactions on Medical Imaging, vol. 12, no. 1, March 1993, pp. 19-29.
Performance evaluation of a picture archiving and communication network. Gives an example of the use of SANs for modeling networks that carry images and text.

d. Storage Systems

Designing Dependable Storage Solutions for Shared Application Environments.
S. Gaonkar, K. Keeton, A. Merchant, and W. H. Sanders. (07GAO02)
IEEE Transactions on Dependable and Secure Computing, to appear.

Scaling File Systems to Support Petascale Clusters: A Dependability Analysis to Support Informed Design Choices.
S. Gaonkar, E. Rozier, A. Tong, and W. H. Sanders. (08GAO01)
Proceedings of the 38th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2008), Anchorage, Alaska, June 24-27, 2008, pp. 386-391.

Scaling File Systems to Support Petascale Clusters: A Dependability Analysis to Support Informed Design Choices.
S. Gaonkar, E. Rozier, A. Tong, and W. H. Sanders. (08GAO04)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report UILU-ENG-08-2202 (CRHC-08-01), January 2008.

Analysis of the Reliability/Availability of Distributed File Systems in Large-Scale Systems: A Case Study Using Simultaneous Simulation.
S. Gaonkar and W. H. Sanders. (07GAO01)
Proceedings of the 8th International Workshop on Performability Modeling of Computer and Communication Systems, Edinburgh, UK, Sept. 20-21, 2007.

Performance Analysis of the RAID 5 Disk Array.
A. Kuratti and W. H. Sanders. (95KUR01)
Proceedings of the IEEE International Computer Performance and Dependability Symposium, Erlangen, Germany, April 24-26, 1995, pp. 236-245.
Develops an analytical model for computation of the mean steady-state response time of a RAID 5 I/O request under a transaction processing workload for a range of workload parameters.

Designing Dependable Storage Solutions for Shared Application Environments.
S. Gaonkar, K. Keeton, A. Merchant, and W. H. Sanders. (05GAO02)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2006), Philadelphia, PA, USA, June 25-28, 2006, pp. 371-382.

e. Software

Modeling of Service-level Agreements for Composed Services.
D. Daly, G. Kar, and W. H. Sanders. (02DAL02)
Management Technologies for E-Commerce and E-Business Applications: Proceedings of the 13th IFIP/IEEE International Workshop on Distributed Systems: Operations & Management, DSOM 2002, Montreal, Canada, October 21-23, 2002, pp. 4-15.

Modeling Recycle Using Stochastic Activity Networks and UltraSAN.
L. A. Kant, L. M. Malhis, W. H. Sanders, B. P. Shah, and S. C. West.
PMRL Technical Report 93-19, Dept. of Electrical and Computer Engineering, University of Arizona, Tucson, AZ, Dec. 1993.

UltraSAN Models for Recycle Modeling Project.
L. A. Kant, L. M. Malhis, W. H. Sanders, B. P. Shah, and S. C. West.
PMRL Technical Report 93-18, Dept. of Electrical and Computer Engineering, University of Arizona, Tucson, AZ, Dec. 1993.

Modeling OAM Using Stochastic Activity Networks and UltraSAN.
L. M. Malhis, W. H. Sanders, B. P. Shah, and S. C. West.
PMRL Technical Report 93-1, Dept. of Electrical and Computer Engineering, University of Arizona, Tucson, AZ, Mar. 1993.

UltraSAN Models for OAM Modeling Project.
L. M. Malhis, W. H. Sanders, B. P. Shah, and S. C. West.
PMRL Technical Report 93-2, Dept. of Electrical and Computer Engineering, University of Arizona, Tucson, AZ, Mar. 1993.

Modeling Recycle: A Case Study in the Industrial Use of Measurement and Modeling.
L. M. Malhis, S. C. West, L. A. Kant, and W. H. Sanders. (95MAL01)
Proceedings of the International Computer Performance and Dependability Symposium, Erlangen, Germany, April 24-26, 1995, pp. 285-294.
A case study of IBM's DFSMShsm, a system for efficient utilization of magnetic tape cartridges.

f. Group Communication Systems

Probabilistic Verification of a Synchronous Round-Based Consensus Protocol.
H. S. Duggal, M. Cukier, and W. H. Sanders. (97DUG01)
Proceedings of the Sixteenth IEEE Symposium on Reliable Distributed Systems (SRDS-97), Durham, NC, October 22-24, 1997, pp. 165-174.
Presents a new state-space-based approach for the probabilistic verification of synchronous round-based consensus protocols, using the Byzantine Generals protocol as an illustrative example.

Numerical Evaluation of a Group-Oriented Multicast Protocol Using Stochastic Activity Networks.
L. M. Malhis, W. H. Sanders, and R. D. Schlichting. (95MAL02)
Proceedings of the Sixth International Workshop on Petri Nets and Performance Models, Durham, NC, October 3-6, 1995, pp. 63-72.
Evaluation of Psync, a group multicast protocol using stochastic activity networks. Illustrates the effectiveness of reduced base model construction methods.

Numerical Performability Evaluation of a Group Multicast Protocol.
L. M. Malhis, W. H. Sanders, and R. D. Schlichting. (95MAL03)
IEE Distributed Systems Engineering Journal, Special Issue on Performance Modelling of Distributed Systems (ed. Peter G. Harrison), vol. 3, no. 1, March 1996, pp. 39-52.

Formal Verification of an Intrusion-Tolerant Group Membership Protocol.
H. V. Ramasamy, M. Cukier, and W. H. Sanders. (03RAM01)
IEICE Transactions on Information and Systems special issue on Dependable Computing, vol. E86-D, no. 12, December 2003, pp. 2612-2622.

Quantifying the Cost of Providing Intrusion Tolerance in Group Communication Systems.
H. V. Ramasamy, P. Pandey, J. Lyons, M. Cukier, and W. H. Sanders. (01RAM01)
Proceedings of the 2002 International Conference on Dependable Systems and Networks (DSN-2002), Washington, DC, June 23-26, 2002, pp. 229-238.

Quantifying the Cost of Providing Intrusion Tolerance in Group Communication Systems.
H. V. Ramasamy, P. Pandey, J. Lyons, M. Cukier, and W. H. Sanders. (03RAM06)
in Foundations of Intrusion Tolerant Systems (Jay Lala, ed.), pp. 241-250. Los Alamitos, CA: IEEE Computer Society, 2003. (Reprint of the conference paper with the same name.)

g. Voting Algorithms

The Effect of Workload on the Performance and Availability of Voting Algorithms.
M. A. Qureshi and W. H. Sanders. (95QUR01)
Proceedings of the International Workshop on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS '95), Durham, NC, January 18-20, 1995, pp. 217-224.
Modeling study of voting algorithms.

The Effect of Workload on the Performance and Availability of Voting Algorithms.
M. A. Qureshi and W. H. Sanders. (95QUR03)
Microelectronics and Reliability, Special Issue on Performance Modeling and Reliability Analysis, June 1996, vol. 36, no. 6, pp. 757-774.

h. Fault-Tolerant Computing

Dependability Evaluation Using Composed SAN-Based Reward Models.
W. H. Sanders and L. M. Malhis. (92SAN01)
Journal of Parallel and Distributed Computing, Special Issue on Petri Net Models of Parallel and Distributed Computers, vol. 15, no. 3, July 1992, pp. 238-254.
Example dependability evaluations of three fault-tolerant architectures: the SNARC multiprocessor, a distributed database system, and a multiprocessor connected via an interconnection network.

Performability of Signal Validation Systems Using Stochastic Activity Networks.
B. Shen, J. G. Williams, and W. H. Sanders. (93S07, available in hard copy)
Proceedings of the Transactions of the American Nuclear Society, vol. 68, November 1993, pp. 147-148.
Paper exploring the application of SANs as a modeling tool to evaluate a signal validation system in a nuclear power plant.

i. Satellite Networks

Evaluating the Dependability of a LEO Satellite Network for Scientific Applications.
E. Athanasopoulou, P. Thakker, and W. H. Sanders. (05ATH01)
Proceedings of the 2nd International Conference on the Quantitative Evaluation of Systems (QEST), Torino, Italy, September 19-22, 2005, pp. 95-104.

IV. Fault Injection

Dynamic Node Management and Measure Estimation in a State-Driven Fault Injector.
R. Chandra, M. Cukier, R. M. Lefever, and W. H. Sanders. (00CHA01)
Proceedings of the 19th IEEE Symposium on Reliable Distributed Systems, Nürnberg, Germany, October 16-18, 2000, pp. 248-257.

Loki: A State-Driven Fault Injector for Distributed Systems.
R. Chandra, R. M. Lefever, M. Cukier, and W. H. Sanders. (99CHA01)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2000), New York, NY, June 25-28, 2000, pp. 237-242.

A Global-State-Triggered Fault Injector for Distributed System Evaluation.
R. Chandra, R. M. Lefever, K. R. Joshi, M. Cukier, and W. H. Sanders. (01CHA01)
IEEE Transactions on Parallel and Distributed Systems, vol. 15, no. 7, July 2004, pp. 593-605.

Fault Injection Based on a Partial View of the Global State of a Distributed System.
M. Cukier, R. Chandra, D. Henke, J. Pistole, and W. H. Sanders. (99CUK01)
Proceedings of the 18th IEEE Symposium on Reliable Distributed Systems, Lausanne, Switzerland, October 19-22, 1999, pp. 168-177.
This paper describes the basis for and preliminary implementation of a new fault injector, called Loki, developed specifically for distributed systems.

Experimental Evaluation of the Unavailability Induced by a Group Membership Protocol.
K. R. Joshi, M. Cukier, and W. H. Sanders. (02JOS01)
Dependable Computing EDCC-4: Proceedings of the 4th European Dependable Computing Conference, Toulouse, France, October 23-25, 2002, pp. 140-158.

An Experimental Evaluation of Correlated Network Partitions in the Coda Distributed File System.
R. M. Lefever, M. Cukier, and W. H. Sanders. (03LEF01)
Proceedings of the 22nd International Symposium on Reliable Distributed Systems (SRDS'03), Florence, Italy, October 6-8, 2003, pp. 273-282.

V. Security Assessment

Stochastic Modeling of Intrusion-Tolerant Server Architectures for Dependability and Performance Evaluation.
V. Gupta, V. Lam, H. V. Ramasamy, W. H. Sanders, and S. Singh. (03GUP03)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report UILU-ENG-03-2227 (CRHC-03-13), December 2003.

Barbarians in the Gate: An Experimental Validation of NIC-based Distributed Firewall Performance and Flood Tolerance.
M. Ihde and W. H. Sanders. (05IHD03)
Proceedings of the 2006 International Conference on Dependable Systems and Networks (DSN'06), Philadelphia, PA, USA, June 25-28, 2006, pp. 209-216.

Experiences Validating the Access Policy Tool in Industrial Settings.
D. M. Nicol, W. H. Sanders, M. Seri, and S. Singh. (09NIC01)
Proceedings of the 43rd Annual Hawai'i International Conference on System Sciences (HICSS), Koloa, Kauai, Hawaii, January 5-8, 2010, to appear.

Usable Global Network Access Policy for PCS.
D. M. Nicol, W. H. Sanders, S. Singh, and M. Seri. (08NIC01)
IEEE Security & Privacy, vol. 6, no. 6, November-December 2008, pp. 30-36.

Generating Policies for Defense in Depth.
P. Rubel, M. Ihde, S. Harp, and C. Payne. (05RUB01)
Proceedings of the 21st Annual Computer Security Applications Conference, Tucson, Arizona, December 5-9, 2005, pp. 505-514.

Probabilistic Validation of Computer System Survivability.
W. H. Sanders. (05SAN01)
Dependable Computing: Proceedings of the 2nd Latin-American Symposium (LADC 2005), Salvador, Brazil, October 25-28, 2005, LNCS vol. 3747, Springer-Verlag, p. 1.

Probabilistic Validation of Intrusion Tolerance.
W. H. Sanders, M. Cukier, F. Webber, P. Pal, and R. Watro. (02SAN02)
Fast Abstract in the Supplemental Volume of the 2002 International Conference on Dependable Systems & Networks (DSN-2002), Washington, DC, June 23-26, 2002, pp. B-78 to B-79.

Ferret: A Host Vulnerability Checking Tool.
A. Sharma, J. R. Martin, N. Anand, M. Cukier, and W. H. Sanders. (03SHA01)
Proceedings of the 10th IEEE Pacific Rim International Symposium on Dependable Computing (PRDC-10), Papeete, Tahiti, French Polynesia, March 3-5, 2004, pp. 389-394.

Validation of a Survivable Publish-Subscribe System.
S. Singh, A. Agbaria, F. Stevens, T. Courtney, J. F. Meyer, W. H. Sanders, and P. Pal. (05SIN01)
International Scientific Journal of "Computing," vol. 4, no. 2, 2005.

Probabilistic Validation of an Intrusion-Tolerant Replication System.
S. Singh, M. Cukier, and W. H. Sanders. (03SIN01)
Proceedings of the 2003 International Conference on Dependable Systems and Networks (DSN-2003), San Francisco, CA, June 22-25, 2003, pp. 615-624.

Fast Model-Based Penetration Testing.
S. Singh, J. Lyons, and D. M. Nicol. (04SIN02)
Proceedings of the 2004 Winter Simulation Conference (WSC'04), Washington, DC, December 5-8, 2004, pp. 309-317.

Verifying SCADA Network Access Control Policy Implementations Using the Access Policy Tool.
S. Singh, D. M. Nicol, W. H. Sanders, and M. Seri. (07SIN01)
First Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, Hanover, New Hampshire, March 18-21, 2007. (Presented but not published in a proceedings.)

Automatic Verification of Distributed and Layered Security Policy Implementations.
S. Singh, W. H. Sanders, D. M. Nicol, and M. Seri. (08SIN02)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report UILU-ENG-08-2209 (CRHC-08-05), July 2008.

Model-Based Validation of an Intrusion-Tolerant Information System
F. Stevens, T. Courtney, S. Singh, A. Agbaria, J. F. Meyer, W. H. Sanders, and P. Pal. (04STE02)
Proceedings of the 23rd Symposium on Reliable Distributed Systems (SRDS 2004), Florianópolis, Brazil, October 18-20, 2004, pp. 184-194.

Modeling Mobile Phone Virus Propagation to Quantify Response Mechanism Effectiveness.
E. Van Ruitenbeek, T. Courtney, W. H. Sanders, and F. Stevens. (07VAN03)
Submitted for publication.

Modeling Peer-to-Peer Botnets.
E. Van Ruitenbeek and W. H. Sanders. (08VAN02)
Proceedings of the 5th International Conference on the Quantitative Evaluation of Systems (QEST), St. Malo, France, September 14-17, 2008, pp. 307-316.

Quantifying the Effectiveness of Mobile Phone Virus Response Mechanisms.
E. Van Ruitenbeek, T. Courtney, W. H. Sanders, and F. Stevens. (06VAN01)
Proceedings of the 37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, Edinburgh, UK, June 25-28, 2007, pp. 790-800.

VI. System Tomography

Link Gradients: Predicting the Impact of Network Latency on Multi-Tier Applications.
S. Chen, K. R. Joshi, M. A. Hiltunen, W. H. Sanders, and R. D. Schlichting. (08CHE02)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report UILU-ENG-08-2214 (CRHC-08-08), August 2008.

Link Gradients: Predicting the Impact of Network Latency on Multitier Applications.
S. Chen, K. R. Joshi, M. A. Hiltunen, W. H. Sanders, and R. D. Schlichting. (08CHE04)
Proceedings of the 2009 IEEE Conference on Computer Communications (INFOCOM), Rio de Janeiro, Brazil, April 19-25, 2009, pp. 2258-2266.

Blackbox Prediction of the Impact of DVFS on End-to-End Performance of Multitier Systems.
S. Chen, K. R. Joshi, M. A. Hiltunen, R. D. Schlichting, and W. H. Sanders. (09CHE01)
GreenMetrics 2009 Workshop, Seattle, Washington, June 15, 2009. (Presented but not published in a proceedings.)

Gradient-based Models of Multitier Systems.
S. Chen, K. R. Joshi, M. A. Hiltunen, R. D. Schlichting, and W. H. Sanders. (09CHE02)
Proceedings of the Ninth International Workshop on Performability Modeling of Computer and Communication Systems (PMCCS-9), Eger, Hungary, September 17-18, 2009, pp. 34-38.

Using Link Gradients to Predict the Impact of Network Latency on Multitier Applications.
S. Chen, K. R. Joshi, M. A. Hiltunen, R. D. Schlichting, and W. H. Sanders. (09CHE03)
Submitted for publication.

I. Dependable and Secure Architectures/Middleware

A Replication- and Checkpoint-Based Approach for Anomaly-Based Intrusion Detection and Recovery.
A. Agbaria and R. Friedman. (05AGB02)
Proceedings of the 25th IEEE International Conference on Distributed Computing Systems Workshops (section on the 2nd International Workshop on Security in Distributed Computing Systems (SDCS '05)), Columbus, Ohio, June 6-10, 2005, pp. 137-143.

Application-Driven Coordination-Free Distributed Checkpointing.
A. Agbaria and W. H. Sanders. (05AGB01)
Proceedings of the 25th IEEE International Conference on Distributed Computing Systems, Columbus, Ohio, June 6-10, 2005, pp. 177-186.

Distributed Snapshots for Mobile Computing Systems.
A. Agbaria and W. H. Sanders. (03AGB01)
Proceedings of the 2nd IEEE Annual Conference on Pervasive Computing and Communications, Orlando, FL, March 14-17, 2004, pp. 177-186.

Transaction Dependency Graph Construction Using Signal Injection.
S. Chen, K. R. Joshi, M. A. Hiltunen, W. H. Sanders, and R. D. Schlichting. (07CHE01)
FastAbstract in the Supplemental Volume of the 37th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2007, pp. 424-425.

Providing Intrusion Tolerance with ITUA.
T. Courtney, J. Lyons, H. V. Ramasamy, W. H. Sanders, M. Seri, M. Atighetchi, P. Rubel, C. Jones, F. Webber, P. Pal, R. Watro, M. Cukier, and J. Gossett. (02COU01)
Supplemental Volume of the 2002 International Conference on Dependable Systems & Networks (DSN-2002), Washington, DC, June 23-26, 2002, pp. C-5-1 to C-5-3.

Intrusion Tolerance Approaches in ITUA.
M. Cukier, J. Lyons, P. Pandey, H. V. Ramasamy, W. H. Sanders, P. Pal, F. Webber, R. Schantz, J. Loyall, R. Watro, M. Atighetchi, and J. Gossett. (01CUK01)
FastAbstract in Supplement of the 2001 International Conference on Dependable Systems and Networks, Göteborg, Sweden, July 1-4, 2001, pp. B-64 to B-65.

Building Dependable Distributed Objects with the AQuA Architecture.
M. Cukier, J. Ren, P. Rubel, D. E. Bakken, and D. A. Karr. (99CUK02)
Digest of FastAbstracts presented at the 29th Annual International Symposium on Fault-Tolerant Computing (FTCS-29), Madison, Wisconsin, USA, June 15-18, 1999, pp. 17-18.

AQuA: An Adaptive Architecture That Provides Dependable Distributed Objects.
M. Cukier, J. Ren, C. Sabnis, D. Henke, J. Pistole, W. H. Sanders, D. E. Bakken, M. E. Berman, D. A. Karr, and R. E. Schantz. (98CUK01)
Proceedings of the 17th IEEE Symposium on Reliable Distributed Systems (SRDS'98), West Lafayette, Indiana, USA, October 20-23, 1998, pp. 245-253.
Provides an overview of AQuA, an architecture for constructing adaptive reliable distributed systems.

Securing Current and Future Process Control Systems.
R. Cunningham, S. Cheung, M. Fong, U. Lindqvist, D. Nicol, R. Pawlowski, E. Robinson, W. Sanders, S. Singh, A. Valdes, B. Woodworth, and M. Zhivich. (07CUN01)
Chapter 8 in E. Goetz and Sujeet Shenoi (eds.), Critical Infrastructure Protection. New York: Springer, 2008, pp. 99-115.

Trustworthy Cyber-Infrastructure for Power (TCIP).
C. A. Gunter, W. H. Sanders, D. E. Bakken, A. Bose, R. Campbell, G. Gross, C. H. Hauser, H. Khurana, R. K. Iyer, Z. T. Kalbarczyk, K. Nahrstedt, D. M. Nicol, T. J. Overbye, P. W. Sauer, S. W. Smith, R. J. Thomas, V. Welch, and M. Winslett. (06GUN01)
Proceedings of the Workshop on Research Directions for Security and Networking in Critical Real-time and Embedded Systems (online at http://moss.csc.ncsu.edu/~mueller/crtes06/), San Jose, CA, April 2006.

Dependability and Performance Evaluation of Intrusion-Tolerant Server Architectures.
V. Gupta, V. Lam, H. V. Ramasamy, W. H. Sanders, and S. Singh. (03GUP01)
Dependable Computing: Proceedings of the First Latin-American Symposium (LADC 2003), São Paulo, Brazil, October 21-24, 2003, Lecture Notes in Computer Science vol. 2847 (Rogério de Lemos, Taisy Silva Weber, and João Batista Camargo Jr., eds), Berlin: Springer, 2003, pp. 81-101.

An Adaptive Quality of Service Aware Middleware for Replicated Services.
S. Krishnamurthy, W. H. Sanders, and M. Cukier. (02KRI05)
IEEE Transactions on Parallel and Distributed Systems, vol. 14, no. 11, November 2003, pp. 1112-1125.

An Architecture for Adaptive Intrusion-Tolerant Applications.
P. Pal, P. Rubel, M. Atighetchi, F. Webber, W. H. Sanders, M. Seri, H. Ramasamy, J. Lyons, T. Courtney, A. Agbaria, M. Cukier, J. Gossett, and I. Keidar. (04PAL01)
Special issue of Software: Practice and Experience on Experiences with Auto-adaptive and Reconfigurable Systems, vol. 36, no. 11-12, September-October 2006, pp. 1331-1354.

Survival by Defense-Enabling.
P. Pal, F. Webber, R. Schantz, J. Loyall, R. Watro, W. Sanders, M. Cukier, and J. Gossett. (01PAL01)
Proceedings of the New Security Paradigms Workshop 2001, Cloudcroft, New Mexico, September 11-13, 2001, pp. 71-78.

Group Communication Protocols and a Framework for Intrusion-Tolerant Distributed Applications.
H. V. Ramasamy. (04RAM02)
Supplemental Volume of the IFIP World Computer Congress, Toulouse, France, August 22-27, 2004.

CoBFIT: A Component-Based Framework for Intrusion Tolerance.
H. V. Ramasamy, A. Agbaria, and W. H. Sanders. (04RAM03)
Proceedings of the 30th Euromicro Conference, Rennes, France, August 31-September 3, 2004, pp. 591-600.

A Parsimonious Approach for Obtaining Resource-Efficient and Trustworthy Execution.
H. V. Ramasamy, A. Agbaria, and W. H. Sanders. (05RAM04)
IEEE Transactions on Dependable and Secure Computing, vol. 4, no. 1, January-March 2007, pp. 1-17.

Parsimonious Asychronous Byzantine-Fault-Tolerant Atomic Broadcast.
H. V. Ramasamy and C. Cachin. (05RAM03)
Proceedings of the 9th International Conference on Principles of Distributed Systems (OPODIS), Pisa, Italy, Dec. 12-14, 2005.

Formal Specification and Verification of a Group Membership Protocol for an Intrusion-Tolerant Group Communication System.
H. V. Ramasamy, M. Cukier, and W. H. Sanders. (02RAM02)
Proceedings of the 2002 Pacific Rim International Symposium on Dependable Computing (PRDC 2002) Tsukuba, Japan, December 16-18, 2002, pp. 9-18.

Formal Specification and Verification of a Group Membership Protocol for an Intrusion-Tolerant Group Communication System.
H. V. Ramasamy, M. Cukier, and W. H. Sanders. (03RAM05)
in Foundations of Intrusion Tolerant Systems (Jay Lala, ed.), pp. 251-260. Los Alamitos, CA: IEEE Computer Society, 2003. (Reprint of the conference paper with the same name.)

Experiences with Building an Intrusion-Tolerant Group Communication System.
H. V. Ramasamy, P. Pandey, M. Cukier, and W. H. Sanders. (06RAM02)
Software-Practice and Experience, vol. 38, no. 6, May 2008, pp. 639-666.

The CoBFIT Toolkit.
H. Ramasamy, M. Seri, and W. H. Sanders. (07RAM01)
Proceedings of the 26th Annual ACM SIGACT-SIGOPS Symposium on Principles of Distributed Computing (PODC 2007), Portland, Oregon, Aug. 12-15, 2007, pp. 350-351.

AQuA: An Adaptive Architecture that Provides Dependable Distributed Objects.
Y. (J.) Ren, D. E. Bakken, T. Courtney, M. Cukier, D. A. Karr, P. Rubel, C. Sabnis, W. H. Sanders, R. E. Schantz, and M. Seri. (99CUK04)
IEEE Transactions on Computers, vol. 52, no. 1, January 2003, pp. 31-50.

Building Dependable Distributed Applications Using AQuA.
J. Ren, M. Cukier, P. Rubel, W. H. Sanders, D. E. Bakken, and D. A. Karr. (99CUK03)
Proceedings of the 4th IEEE Symposium on High Assurance Systems Engineering (HASE'99), Washington D.C., November 17-19, 1999, pp. 189-196.
This paper describes how to construct dependable applications using the AQuA architecture, by describing the interface that a programmer is presented with and the graphical monitoring facilities that it provides.

An Adaptive Algorithm for Tolerating Value Faults and Crash Failures.
Y. Ren, M. Cukier, and W. H. Sanders. (00REN02)
IEEE Transactions on Parallel and Distributed Systems, vol. 12, no. 2, February 2001, pp. 173-192.

Passive Replication Schemes in AQuA.
Y. (J.) Ren, P. Rubel, M. Seri, M. Cukier, W. H. Sanders, and T. Courtney. (02REN01)
Proceedings of the 2002 Pacific Rim International Symposium on Dependable Computing (PRDC 2002), Tsukuba, Japan, December 16-18, 2002, pp. 125-130.

Proteus: A Flexible Infrastructure to Implement Adaptive Fault Tolerance in AQuA.
C. Sabnis, M. Cukier, J. Ren, P. Rubel, W. H. Sanders, D. E. Bakken, and D. A. Karr. (98SAB02)
in C. B. Weinstock and J. Rushby (Eds.), Dependable Computing for Critical Applications 7, vol. 12 in series Dependable Computing and Fault-Tolerant Systems (A. Avizienis, H. Kopetz, and J. C. Laprie, Eds.), pp. 149-168. Los Alamitos, CA: IEEE Computer Society, 1999.
This paper describes, in depth, how dependability is provided in AQuA. In particular, we describe Proteus, the part of AQuA that dynamically manages replicated distributed objects to make them dependable.

Building Dependable Distributed Systems Using the AQuA Architecture.
W. H. Sanders. (01SAN01)
Proceedings of SCTF'2001 - IX Brazilian Symposium on Fault-Tolerant Computing, Florianópolis, Santa Catarina, Brazil, March 5-7, 2001, p. 1.
Abstract of an invited talk.

A Configurable CORBA Gateway for Providing Adaptable System Properties.
M. Seri, T. Courtney, M. Cukier, V. Gupta, S. Krishnamurthy, J. Lyons, H. Ramasamy, J. Ren, and W. H. Sanders. (02SER01)
Supplemental Volume of the 2002 International Conference on Dependable Systems & Networks (DSN-2002), Washington, DC, June 23-26, 2002, pp. G-26 to G-30.

An Overview of the AQuA Gateway.
M. Seri, T. Courtney, M. Cukier, and W. H. Sanders. (01SER01)
1st Workshop on The ACE ORB (TAO), St. Louis, MO, August 5-6, 2001. (Presented but not published in a proceedings.)

Proactive Resilience Revisited: The Delicate Balance Between Resisting Intrusions and Remaining Available.
P. Sousa, N. F. Neves, P. Veríssimo, and W. H. Sanders. (06SOU01)
Proceedings of the 25th IEEE Symposium on Reliable Distributed Systems (SRDS 2006), Leeds, UK, October 2-4, 2006, pp. 71-82.

Cluster-Based Failure Detection Service for Large-Scale Ad Hoc Wireless Network Applications.
A. T. Tai, K. S. Tso, and W. H. Sanders. (03TAI04)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2004), Florence, Italy, June 28-July 1, 2004, pp. 805-814.

A Performability-Oriented Software Rejuvenation Framework for Distributed Applications.
A. T. Tai, K. S. Tso, W. H. Sanders, and S. N. Chau. (04TAI01)
Proceedings of the 2005 International Conference on Dependable Systems and Networks (DSN-2005), Yokohama, Japan, June 28-July 1, 2005, pp. 570-579.

Delta Execution for Software Reliability.
Y. Zhou, D. Marinov, W. Sanders, C. Zilles, M. d'Amorim, S. Lauterburg, R. M. Lefever, and J. Tucek. (07ZHO01)
Proceedings of the 3rd Workshop on Hot Topics in System Dependability (HotDep'07), Edinburgh, UK, June 26, 2007, article no. 16.

A Collaborative Deadlock Vaccine for Mutually-Distrustful Application Communities.
S. A. Zonouz, H. Jula, P. Tozun, C. Basescu, G. Candea, and W. H. Sanders. (09ZON01)
Submitted for publication.

II. Software Upgrading

Performability Modeling of Coordinated Software and Hardware Fault Tolerance..
A. T. Tai and W. H. Sanders. (03TAI03)
Extended Abstracts from PMCCS-6: the Sixth International Workshop on Performability Modeling of Computer and Communication Systems, Monticello, IL, September 5-7, 2003, pp. 31-34.

Product-in-Process Performability Modeling for Guarded Software Upgrading.
A. T. Tai and W. H. Sanders. (01TAI02)
Proceedings of the Fifth International Workshop on Performability Modeling of Computer and Communication Systems, Erlangen, Germany, September 15-16, 2001, in the Arbeitsberichte des Institutes für Informatik Friedrich-Alexander-Univeresität Erlangen Nürnberg, vol. 34, no. 13, September 2001, pp. 121-125.

Performability Analysis of Guarded-Operation Duration: A Successive Model-Translation Approach.
A. T. Tai, W. H. Sanders, L. Alkalai, S. N. Chau, and K. S. Tso. (01TAI03)
Proceedings of the 2002 International Conference on Dependable Systems and Networks (DSN-2002), Washington, DC, June 23-26, 2002, pp. 561-570.

Performability Analysis of Guarded-Operation Duration: A Translation Approach for Reward Model Solutions.
A. T. Tai, W. H. Sanders, L. Alkalai, S. N. Chau, and K. S. Tso. (02TAI01)
Performance Evaluation, vol. 56, no. 1-4, pp. 249-276, March 2004.

Low-Cost Error Containment and Recovery for Onboard Guarded Software Upgrading and Beyond.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (00TAI03)
IEEE Transactions on Computers, vol. 51, no. 2, February 2002, pp. 121-137.

On-Board Guarded Software Upgrading for Space Missions.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (99TAI01)
Proceedings of the 18th Digital Avionics Systems Conference, St. Louis, MO, October 24-29, 1999, vol. 2, pp. 7.B.4-1 - 7.B.4-8.

On Low-Cost Error Containment and Recovery Methods for Guarded Software Upgrading.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (99TAI02)
Proceedings of ICDCS 2000: The 20th International Conference on Distributed Computing Systems, Taipei, Taiwan, April 10-13, 2000, pp. 548-555.

On the Effectiveness of a Message-Driven Confidence-Driven Protocol for Guarded Software Upgrading.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (99TAI03)
Proceedings of IPDS 2K: IEEE International Performance and Dependability Symposium, Chicago, IL, March 27-30, 2000, pp. 59-68.

On the Effectiveness of a Message-Driven Confidence-Driven Protocol for Guarded Software Upgrading.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (00TAI01)
Performance Evaluation, vol. 44, no. 1-4, April 2001, pp. 211-236.
Journal version of the conference paper with the same title.

Opportunity-Adaptive QoS Enhancement in Satellite Constellations: A Case Study.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (03TAI01)
Proceedings of the 2003 International Conference on Dependable Systems and Networks (DSN-2003), San Francisco, CA, June 22-25, 2003, pp. 655-664.

Synergistic Coordination Between Software and Hardware Fault Tolerance Techniques.
A. T. Tai, K. S. Tso, L. Alkalai, S. N. Chau, and W. H. Sanders. (00TAI04)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2001), Göteborg, Sweden, July 1-4, 2001, pp. 369-378.

Protecting Distributed Software Upgrades that Involve Message-Passing Interface Changes.
A. T. Tai, K. S. Tso, and W. H. Sanders. (03TAI02)
Proceedings of COMPSAC 2003: The 27th Annual International Computer Software and Applications Conference, Dallas, TX, September 30-October 3, 2003, pp. 385-390.

Low-Cost Flexible Software Fault Tolerance for Distributed Computing.
A. T. Tai, K. S. Tso, W. H. Sanders, L. Alkalai, and S. N. Chau. (01TAI01)
Proceedings of the 12th International Symposium on Software Reliability Engineering (ISSRE 2001), Hong Kong, China, November 27-30, 2001, pp. 148-157.

GSU Middleware Architecture Design.
K. S. Tso, A. T. Tai, L. Alkalai, S. N. Chau, and W. H. Sanders. (00TAI02)
Proceedings of the 5th IEEE International Symposium on High Assurance Systems Engineering (HASE 2000), November 15-17, 2000, Albuquerque, New Mexico, pp. 212-215.

III. Fault-Tolerant Algorithms

Overcoming Byzantine Failures using Checkpointing.
A. Agbaria and R. Friedman. (03AGB02)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report no. UILU-ENG-03-2228 (CRHC-03-14), December 2003.

Parsimony-Based Approach for Obtaining Resource-Efficient and Trustworthy Execution.
H. V. Ramasamy, A. Agbaria, and W. H. Sanders. (05RAM01)
Dependable Computing: Proceedings of the 2nd Latin-American Symposium (LADC 2005), Salvador, Brazil, October 25-28, 2005, LNCS vol. 3747, Springer-Verlag, pp. 206-225.

Semi-Passive Replication in the Presence of Byzantine Faults.
H. V. Ramasamy, A. Agbaria, and W. H. Sanders. (04RAM01)
University of Illinois at Urbana-Champaign Coordinated Science Laboratory technical report no. UILU-ENG-04-2202 (CRHC-04-02), February 2004.

The Parsimonious Approach to Constructing Fault-Tolerant Protocols.
H. V. Ramasamy, C. Cachin, A. Agbaria, and W. H. Sanders. (06RAM01)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2006), Philadelphia, PA, USA, June 25-28, 2006, to appear.

IV. Model-Based Adaptive Systems/Architectures

A Compiler-Enabled Model- and Measurement-Driven Adaptation Environment for Dependability and Performance.
V. S. Adve, A. Agbaria, M. A. Hiltunen, R. K. Iyer, K. R. Joshi, Z. Kalbarczyk, R. M. Lefever, R. Plante, W. H. Sanders, and R. D. Schlichting. (05ADV01)
Proceedings of the Next Generation Software (NGS) Workshop at the International Parallel & Distributed Processing Symposium (IPDPS), Denver, Colorado, April 4, 2005 (CD-ROM).

Performability Optimization Using Linear Bounds of Partially Observable Markov Decision Processes.
K. R. Joshi, M. A. Hiltunen, and W. H. Sanders. (05JOS03)
Proceedings of the 7th International Workshop on Performability Modeling of Computer and Communication Systems (PMCCS-7), Turin, Italy, September 23-24, 2005, pp. 73-76.

Automatic Model-Driven Recovery in Distributed Systems.
K. R. Joshi, M. Hiltunen, W. H. Sanders, and R. Schlichting. (05JOS01)
Proceedings of the 24th IEEE Symposium on Reliable Distributed Systems (SRDS 2005), Orlando, Florida, October 26-28, 2005, pp. 25-36.

Automatic Model-Driven Recovery in Distributed Systems.
K. R. Joshi, M. A. Hiltunen, W. Sanders, and R. Schlichting. (08JOS01)
Submitted for publication.

Automatic Recovery Using Bounded Partially Observable Markov Decision Processes.
K. R. Joshi, M. A. Hiltunen, W. H. Sanders, and R. D. Schlichting. (05JOS02)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2006), Philadelphia, PA, USA, June 25-28, 2006, pp. 445-456.

Online Model-Based Adaptation for Optimizing Performance and Dependability.
K. R. Joshi, M. Hiltunen, R. Schlichting, W. H. Sanders, and A. Agbaria. (04JOS03)
Proceedings of the Workshop on Self-Managed Systems (WOSS 2004), Newport Beach, CA, October 31-November 1, 2004 (CD-ROM).

An Adaptive Framework for Tunable Consistency and Timeliness Using Replication.
S. Krishnamurthy, W. H. Sanders, and M. Cukier. (01KRI03)
Proceedings of the 2002 International Conference on Dependable Systems and Networks (DSN-2002), Washington, DC, June 23-26, 2002, pp. 17-26.

A Dynamic Replica Selection Algorithm for Tolerating Timing Faults.
S. Krishnamurthy, W. H. Sanders, and M. Cukier. (00KRI01)
Proceedings of the International Conference on Dependable Systems and Networks (DSN-2001), Göteborg, Sweden, July 1-4, 2001, pp. 107-116.
Presents a probabilistic model-based algorithm for dynamically selecting the replicas of a replicated service that can meet a client's timing constraints. The model uses performance parameters regularly broadcast by the replicas to predict the probability with which the replicas can prevent a timing failure for a client.

Performance Evaluation of a Probabilistic Replica Selection Algorithm.
S. Krishnamurthy, W. H. Sanders, and M. Cukier. (01KRI02)
Proceedings of the 7th IEEE International Workshop on Object-oriented Real-time Dependable Systems (WORDS 2002), San Diego, California, January 7-9, 2002, pp. 119-127.

Performance Evaluation of a QoS-Aware Framework for Providing Tunable Consistency and Timeliness.
S. Krishnamurthy, W. H. Sanders, and M. Cukier. (02KRI02)
Proceedings of the 2002 10th IEEE International Workshop on Quality of Service (IWQoS 2002), Miami Beach, Florida, May 15-17, 2002, pp. 214-223.

RRE: A Game-Theoretic Intrusion Response and Recovery Engine.
S. A. Zonouz, H. Khurana, W. H. Sanders, and T. M. Yardley. (08ZON01)
Proceedings of the 39th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2009), Estoril, Lisbon, Portugal, June 29-July 2, 2009, pp. 439-448.