Failure Model

Two assumptions:

1. Only processor failures: permanent or temporary



2. Fail-silent assumption: the processor stops executing

Specified as a number K of processor failures to be tolerated