By Ether DataRequest data sample
Interactive publication
Back to the catalogue
ClocksCase 10 of 10

VM snapshot rollback

Restoring a virtual machine from a snapshot moves its clock backwards, so a later event can carry an earlier timestamp than an earlier one.

Class
Case to account for
Affects
1 conversion
01

Detection

Monotonically issued events show a backwards timestamp step.

02

Mitigation

01
Detect non-monotonic lifecycle steps; prefer a server-side receive time or a logical clock for ordering.
03

Affected conversions

Timestamp + zonehour-of-week slot
OPEN