Failure Model

Two assumptions:

• Only processor failures: permanent or temporary



• Fail-silent assumption: the processor stops executing

Specified as a set of K reduced architectures:

• More general than a number of K failures because the non failure of sensor processors can be specified



• Can be extended to specify communication link failures