Surviving sensor network software faults
Yang Chen, Omprakash Gnawali, Maria A. Kazandjieva, Philip A. Levis, John David Regehr · 2009
We describe Neutron, a version of the TinyOS operating system that efficiently recovers from memory safety bugs. Where existing schemes reboot an entire node on an error, Neutron's compiler and runtime extensions divide programs into recovery units and reboot only the faulting unit. The TinyOS kernel itself is a recovery unit: a kernel safety violation appears to applications as the processor being unavailable for 10-20 milliseconds.