- use methodology from availability benchmark
- but include administratorís response to faults
- must develop model of typical administrator behavior
- can we quantify administrative work needed to maintain a certain level of availability?
Expand availability benchmarks
- apply to other systems: DBMSs, mail, distributed apps
- use ISTORE-1 prototype
- 80-node x86 cluster with built-in fault injection, diags.
Add evolutionary growth
- just extend maintainability/availability techniques?