{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T10:07:39Z","timestamp":1777543659462,"version":"3.51.4"},"reference-count":46,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2010,9,1]],"date-time":"2010-09-01T00:00:00Z","timestamp":1283299200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000144","name":"Division of Computer and Network Systems","doi-asserted-by":"publisher","award":["CCF-0621487CNS-0509474CNS-0834392CCF-811697CCF-0811697CCF-0937959"],"award-info":[{"award-number":["CCF-0621487CNS-0509474CNS-0834392CCF-811697CCF-0811697CCF-0937959"]}],"id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000143","name":"Division of Computing and Communication Foundations","doi-asserted-by":"publisher","award":["CCF-0621487CNS-0509474CNS-0834392CCF-811697CCF-0811697CCF-0937959"],"award-info":[{"award-number":["CCF-0621487CNS-0509474CNS-0834392CCF-811697CCF-0811697CCF-0937959"]}],"id":[{"id":"10.13039\/100000143","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Storage"],"published-print":{"date-parts":[[2010,9]]},"abstract":"<jats:p>We introduce Membrane, a set of changes to the operating system to support restartable file systems. Membrane allows an operating system to tolerate a broad class of file system failures, and does so while remaining transparent to running applications; upon failure, the file system restarts, its state is restored, and pending application requests are serviced as if no failure had occurred. Membrane provides transparent recovery through a lightweight logging and checkpoint infrastructure, and includes novel techniques to improve performance and correctness of its fault-anticipation and recovery machinery. We tested Membrane with ext2, ext3, and VFAT. Through experimentation, we show that Membrane induces little performance overhead and can tolerate a wide range of file system crashes. More critically, Membrane does so with little or no change to existing file systems, thus improving robustness to crashes without mandating intrusive changes to existing file-system code.<\/jats:p>","DOI":"10.1145\/1837915.1837919","type":"journal-article","created":{"date-parts":[[2010,9,28]],"date-time":"2010-09-28T17:41:41Z","timestamp":1285695701000},"page":"1-30","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Membrane"],"prefix":"10.1145","volume":"6","author":[{"given":"Swaminathan","family":"Sundararaman","sequence":"first","affiliation":[{"name":"University of Wisconsin-Madison"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sriram","family":"Subramanian","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abhishek","family":"Rajimwale","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrea C.","family":"Arpaci-Dusseau","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Remzi H.","family":"Arpaci-Dusseau","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael M.","family":"Swift","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,9,28]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"ZFS: The last word in file systems","author":"Bonwick J.","year":"2007","unstructured":"}} Bonwick , J. and Moore , B . 2007 . ZFS: The last word in file systems . http:\/\/opensolaris.org\/os\/community\/zfs\/docs\/zfs last.pdf. }}Bonwick, J. and Moore, B. 2007. ZFS: The last word in file systems. http:\/\/opensolaris.org\/os\/community\/zfs\/docs\/zfs last.pdf."},{"key":"e_1_2_1_2_1","volume-title":"Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HotOS IX).","author":"Candea G.","unstructured":"}} Candea , G. and Fox , A . 2003. Crash-only software . In Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HotOS IX). }}Candea, G. and Fox, A. 2003. Crash-only software. In Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HotOS IX)."},{"key":"e_1_2_1_3_1","volume-title":"Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04)","author":"Candea G.","unstructured":"}} Candea , G. , Kawamoto , S. , Fujiki , Y. , Friedman , G. , and Fox , A . 2004. Microreboot -- A technique for cheap recovery . In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04) . 31--44. }}Candea, G., Kawamoto, S., Fujiki, Y., Friedman, G., and Fox, A. 2004. Microreboot -- A technique for cheap recovery. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04). 31--44."},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/224056.224059"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502042"},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the USENIX Annual Technical Conference (USENIX'99)","author":"Cranor C.D.","unstructured":"}} Cranor , C.D. and Parulkar , G.M . 1999. The UVM virtual memory system . In Proceedings of the USENIX Annual Technical Conference (USENIX'99) . USENIX Association, Monterey, CA. }}Cranor, C.D. and Parulkar, G.M. 1999. The UVM virtual memory system. In Proceedings of the USENIX Annual Technical Conference (USENIX'99). USENIX Association, Monterey, CA."},{"key":"e_1_2_1_7_1","volume-title":"Proceedings of the 8th Symposium on Operating Systems Design and Implementation (OSDI'08)","author":"David F.M.","unstructured":"}} David , F.M. , Chan , E.M. , Carlyle , J.C. , and Campbell , R.H . 2008. CuriOS: Improving reliability through operating system structure . In Proceedings of the 8th Symposium on Operating Systems Design and Implementation (OSDI'08) . }}David, F.M., Chan, E.M., Carlyle, J.C., and Campbell, R.H. 2008. CuriOS: Improving reliability through operating system structure. In Proceedings of the 8th Symposium on Operating Systems Design and Implementation (OSDI'08)."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/949305.949314"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502041"},{"key":"e_1_2_1_10_1","volume-title":"XFI: Software guards for system address spaces. In Proceedings of the 7th","author":"Erlingsson U.","year":"2006","unstructured":"}} Erlingsson , U. , Abadi , M. , Vrable , M. , Budiu , M. , and Necula , G. C . 2006 . XFI: Software guards for system address spaces. In Proceedings of the 7th USENIX OSDI. USENIX Association , Monterey, CA , 75--88. }}Erlingsson, U., Abadi, M., Vrable, M., Budiu, M., and Necula, G. C. 2006. XFI: Software guards for system address spaces. In Proceedings of the 7th USENIX OSDI. USENIX Association, Monterey, CA, 75--88."},{"key":"e_1_2_1_11_1","volume-title":"Proceedings of the Workshop on Operating System and Architectural Support for the On-Demand IT Infrastructure.","author":"Fraser K.","unstructured":"}} Fraser , K. , Hand , S. , Neugebauer , R. , Pratt , I. , Warfield , A. , and Williamson , M . 2004. Safe hardware access with the Xen virtual machine monitor . In Proceedings of the Workshop on Operating System and Architectural Support for the On-Demand IT Infrastructure. }}Fraser, K., Hand, S., Neugebauer, R., Pratt, I., Warfield, A., and Williamson, M. 2004. Safe hardware access with the Xen virtual machine monitor. In Proceedings of the Workshop on Operating System and Architectural Support for the On-Demand IT Infrastructure."},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the 6th USENIX Symposium on File and Storage Technologies (FAST'08)","author":"Gunawi H.S.","unstructured":"}} Gunawi , H.S. , Rubio-Gonzalez , C. , Arpaci-Dusseau , A.C. , Arpaci-Dusseau , R.H. , and Liblit , B . 2008. EIO: Error handling is occasionally correct . In Proceedings of the 6th USENIX Symposium on File and Storage Technologies (FAST'08) . USENIX Association, Monterey, CA, 207--222. }}Gunawi, H.S., Rubio-Gonzalez, C., Arpaci-Dusseau, A.C., Arpaci-Dusseau, R.H., and Liblit, B. 2008. EIO: Error handling is occasionally correct. In Proceedings of the 6th USENIX Symposium on File and Storage Technologies (FAST'08). USENIX Association, Monterey, CA, 207--222."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/41457.37518"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2006.7"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2007.46"},{"key":"e_1_2_1_16_1","volume-title":"Proceedings of the USENIX Winter Technical Conference.USENIX Association","author":"Hitz D.","unstructured":"}} Hitz , D. , Lau , J. , and Malcolm , M . 1994. File system design for an NFS file server appliance . In Proceedings of the USENIX Winter Technical Conference.USENIX Association , Monterey, CA. }}Hitz, D., Lau, J., and Malcolm, M. 1994. File system design for an NFS file server appliance. In Proceedings of the USENIX Winter Technical Conference.USENIX Association, Monterey, CA."},{"key":"e_1_2_1_17_1","unstructured":"}}Kidder T. 1981.Soul of a New Machine. Little Brown Boston MA.   }}Kidder T. 1981.Soul of a New Machine. Little Brown Boston MA."},{"key":"e_1_2_1_18_1","volume-title":"Proceedings of the USENIX Summer Technical Conference. USENIX Association","author":"Kleiman S. R.","year":"1986","unstructured":"}} Kleiman , S. R. 1986 . Vnodes: An architecture for multiple file system types in Sun UNIX . In Proceedings of the USENIX Summer Technical Conference. USENIX Association , Monterey, CA, 238--247. }}Kleiman, S. R. 1986. Vnodes: An architecture for multiple file system types in Sun UNIX. In Proceedings of the USENIX Summer Technical Conference. USENIX Association, Monterey, CA, 238--247."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/143365.143508"},{"key":"e_1_2_1_20_1","volume-title":"Proceedings of the 28th International Symposium on Fault-Tolerant Computing (FTCS-28)","author":"Kropp N.P.","unstructured":"}} Kropp , N.P. , Koopman , P.J. , and Siewiorek , D.P . 1998. Automated robustness testing of off-the-shelf software components . In Proceedings of the 28th International Symposium on Fault-Tolerant Computing (FTCS-28) . }}Kropp, N.P., Koopman, P.J., and Siewiorek, D.P. 1998. Automated robustness testing of off-the-shelf software components. In Proceedings of the 28th International Symposium on Fault-Tolerant Computing (FTCS-28)."},{"key":"e_1_2_1_21_1","volume-title":"The singularity operating system. Seminar","author":"Larus J.","unstructured":"}} Larus , J. 2005. The singularity operating system. Seminar , University of Wisconsin , Madison. }}Larus, J. 2005. The singularity operating system. Seminar, University of Wisconsin, Madison."},{"key":"e_1_2_1_22_1","volume-title":"Proceedings of the 6th USENIX OSDI. USENIX Association, Monterey, CA","author":"LeVasseur J.","unstructured":"}} LeVasseur , J. , Uhlig , V. , Stoess , J. , and Gotz , S . 2004. Unmodified device driver reuse and improved system dependability via virtual machines . In Proceedings of the 6th USENIX OSDI. USENIX Association, Monterey, CA }}LeVasseur, J., Uhlig, V., Stoess, J., and Gotz, S. 2004. Unmodified device driver reuse and improved system dependability via virtual machines. In Proceedings of the 6th USENIX OSDI. USENIX Association, Monterey, CA"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346323"},{"key":"e_1_2_1_24_1","volume-title":"Ottawa Linux Symposium (OLS'07)","author":"Mathur A.","year":"2007","unstructured":"}} Mathur , A. , Cao , M. , Bhattacharya , S. , Dilger , A. , Tomas , A. , Vivier , L. , and S.A.S., B. 2007 . The new Ext4 filesystem: current status and future plans . In Ottawa Linux Symposium (OLS'07) . }}Mathur, A., Cao, M., Bhattacharya, S., Dilger, A., Tomas, A., Vivier, L., and S.A.S., B. 2007. The new Ext4 filesystem: current status and future plans. In Ottawa Linux Symposium (OLS'07)."},{"key":"e_1_2_1_25_1","volume-title":"Proceedings of the USENIX Winter Technical Conference. USENIX Association","author":"McVoy L.W.","unstructured":"}} McVoy , L.W. and Kleiman , S.R . 1991. Extent-like performance from a UNIX file system . In Proceedings of the USENIX Winter Technical Conference. USENIX Association , Monterey, CA, 33--43. }}McVoy, L.W. and Kleiman, S.R. 1991. Extent-like performance from a UNIX file system. In Proceedings of the USENIX Winter Technical Conference. USENIX Association, Monterey, CA, 33--43."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/566726.566749"},{"key":"e_1_2_1_27_1","volume-title":"Proceedings of the USENIX Summer Technical Conference. USENIX Association","author":"Mogul J. C.","year":"1994","unstructured":"}} Mogul , J. C. 1994 . A better update policy . In Proceedings of the USENIX Summer Technical Conference. USENIX Association , Monterey, CA. }}Mogul, J. C. 1994. A better update policy. In Proceedings of the USENIX Summer Technical Conference. USENIX Association, Monterey, CA."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1063786.1063789"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095830"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095833"},{"key":"e_1_2_1_31_1","unstructured":"}}Reiser H. 2004. ReiserFS. www.namesys.com.  }}Reiser H. 2004. ReiserFS. www.namesys.com."},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/146941.146943"},{"key":"e_1_2_1_33_1","unstructured":"}}Schrock E. 2005. UFS\/SVM vs. ZFS: Code complexity. http:\/\/blogs.sun.com\/eschrock\/.  }}Schrock E. 2005. UFS\/SVM vs. ZFS: Code complexity. http:\/\/blogs.sun.com\/eschrock\/."},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/52.976938"},{"key":"e_1_2_1_35_1","volume-title":"Proceedings of the USENIX Annual Technical Conference. USENIX Association","author":"Sweeney A.","unstructured":"}} Sweeney , A. , Doucette , D. , Hu , W. , Anderson , C. , Nishimoto , M. , and Peck , G . 1996. Scalability in the XFS file system . In Proceedings of the USENIX Annual Technical Conference. USENIX Association , Monterey, CA. }}Sweeney, A., Doucette, D., Hu, W., Anderson, C., Nishimoto, M., and Peck, G. 1996. Scalability in the XFS file system. In Proceedings of the USENIX Annual Technical Conference. USENIX Association, Monterey, CA."},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945466"},{"key":"e_1_2_1_37_1","volume-title":"Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04)","author":"Swift M.M.","unstructured":"}} Swift , M.M. , Annamalai , M. , Bershad , B.N. , and Levy , H.M . 2004. Recovering device drivers . In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04) . 1--16. }}Swift, M.M., Annamalai, M., Bershad, B.N., and Levy, H.M. 2004. Recovering device drivers. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04). 1--16."},{"key":"e_1_2_1_38_1","volume-title":"Proceedings of the IEEE Workshop on Fault Tolerance in Parallel and Distributed Systems, IEEE","author":"Talagala N.","unstructured":"}} Talagala , N. and Patterson , D . 1999. An analysis of error behaviour in a large storage system . In Proceedings of the IEEE Workshop on Fault Tolerance in Parallel and Distributed Systems, IEEE , Los Alamitos, CA. }}Talagala, N. and Patterson, D. 1999. An analysis of error behaviour in a large storage system. In Proceedings of the IEEE Workshop on Fault Tolerance in Parallel and Distributed Systems, IEEE, Los Alamitos, CA."},{"key":"e_1_2_1_39_1","unstructured":"}}Ts'o T. 2001. http:\/\/e2fsprogs.sourceforge.net.  }}Ts'o T. 2001. http:\/\/e2fsprogs.sourceforge.net."},{"key":"e_1_2_1_40_1","volume-title":"Proceedings of the USENIX Annual Technical Conference, FREENIX Track. USENIX Association","author":"Ts'o T.","unstructured":"}} Ts'o , T. and Tweedie , S . 2002. Future directions for the ext2\/3 filesystem . In Proceedings of the USENIX Annual Technical Conference, FREENIX Track. USENIX Association , Monterey, CA. }}Ts'o, T. and Tweedie, S. 2002. Future directions for the ext2\/3 filesystem. In Proceedings of the USENIX Annual Technical Conference, FREENIX Track. USENIX Association, Monterey, CA."},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028976.1029011"},{"key":"e_1_2_1_42_1","unstructured":"}}Wikipedia. 2009. Btrfs. en.wikipedia.org\/wiki\/Btrfs.  }}Wikipedia. 2009. Btrfs. en.wikipedia.org\/wiki\/Btrfs."},{"key":"e_1_2_1_43_1","volume-title":"Proceedings of the 8th USENIX OSDI. USENIX Association","author":"Williams D.","unstructured":"}} Williams , D. , Reynolds , P. , Walsh , K. , Sirer , E.G. , and Schneider , F.B . 2008. Device driver safety through a reference validation mechanism . In Proceedings of the 8th USENIX OSDI. USENIX Association , Monterey, CA. }}Williams, D., Reynolds, P., Walsh, K., Sirer, E.G., and Schneider, F.B. 2008. Device driver safety through a reference validation mechanism. In Proceedings of the 8th USENIX OSDI. USENIX Association, Monterey, CA."},{"key":"e_1_2_1_44_1","volume-title":"Proceedings of the 7th Symposium on Operating SystemsDesign and Implementation (OSDI'06)","author":"Yang J.","unstructured":"}} Yang , J. , Sar , C. , and Engler , D . 2006. EXPLODE: A lightweight, general system for finding serious storage system errors . In Proceedings of the 7th Symposium on Operating SystemsDesign and Implementation (OSDI'06) . }}Yang, J., Sar, C., and Engler, D. 2006. EXPLODE: A lightweight, general system for finding serious storage system errors. In Proceedings of the 7th Symposium on Operating SystemsDesign and Implementation (OSDI'06)."},{"key":"e_1_2_1_45_1","volume-title":"Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04)","author":"Yang J.","unstructured":"}} Yang , J. , Twohey , P. , Engler , D. , and Musuvathi , M . 2004. Using model checking to find serious file system errors . In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04) . }}Yang, J., Twohey, P., Engler, D., and Musuvathi, M. 2004. Using model checking to find serious file system errors. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI'04)."},{"key":"e_1_2_1_46_1","volume-title":"Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI'06)","author":"Zhou F.","unstructured":"}} Zhou , F. , Condit , J. , Anderson , Z. , Bagrak , I. , Ennals , R. , Harren , M. , Necula , G. , and Brewer , E . 2006. SafeDrive: Safe and recoverable extensions using language-based techniques . In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI'06) . }}Zhou, F., Condit, J., Anderson, Z., Bagrak, I., Ennals, R., Harren, M., Necula, G., and Brewer, E. 2006. SafeDrive: Safe and recoverable extensions using language-based techniques. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI'06)."}],"container-title":["ACM Transactions on Storage"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1837915.1837919","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1837915.1837919","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:23:43Z","timestamp":1750249423000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1837915.1837919"}},"subtitle":["Operating system support for restartable file systems"],"short-title":[],"issued":{"date-parts":[[2010,9]]},"references-count":46,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2010,9]]}},"alternative-id":["10.1145\/1837915.1837919"],"URL":"https:\/\/doi.org\/10.1145\/1837915.1837919","relation":{},"ISSN":["1553-3077","1553-3093"],"issn-type":[{"value":"1553-3077","type":"print"},{"value":"1553-3093","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,9]]},"assertion":[{"value":"2010-04-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2010-06-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2010-09-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}