MORE IMPORTANTLY, when running platforms with the same adapters and software that tolerates hardware faults, reported device failures rates drop from 8 percent to 3 percent [2]. This evidence

suggests that (1) device failure is a major cause of system  crashes, (2) transient device failures are common, and (3) drivers that tolerate device failures can improve reliability. Without addressing this problem, the reliability of operating systems is limited by the reliability of devices.

AS A RESULT, ALL MAJOR OS VENDORS SPECIFY RECOMMENDATIONS TO VALIDATE, TIMEOUT on, REPORT AND RECOVER FROM ALL INVALID DEVICE DATA.

WE PRESENT CARBURIZER. THE GOAL OF CARBURIZER IS TO automatically implement ABOVE MENTIONED recommendations.

First, CARBURIZER seeks to make drivers tolerate and recover from device failures, so device failures do not lead to system failures. Second, CARBURIZER seeks to make drivers report device failures so that administrators learn of transient failures and can proactively replace faulty devices.  Finally, the Carburizer runtime detects stuck interrupts and non-responsive devices and causes the driver to poll the device. To automatically repair bugs, Carburizer also invokes a generic recovery service that can reset the device. CARBURIZER relies on shadow drivers to provide this recovery service.