EROS: A fast capability system

Operating Systems Review (ACM)

Volumn 33, Issue 5, 1999, Pages 170-185

  Shapiro, Jonathan S ^a   Smith, Jonathan M ^a   Farber, David J ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

EID: 0001421170     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/319344.319163     Document Type: Article

References (56)

1. M. Acceta, R. V. Baron, W. Bolosky, D. B. Golub, R. F. Rashid, A. Tevanian Jr., and M. W. Young. Mach: A new kernel foundation for UNIX development. In Proc. 1986 USENIX Summer Technical Conference, pages 93-112, June 1986.
2. A. Aiken and D. Gay. Memory management with explicit regions. In Proc. Principles of Programming Languages, pages 313-323, Montreal, Canada, June 1998. ACM.
3. A. Bawden. PCLSRing: Keeping process state modular. Unpublished report. ftp://ftp.ai.mit.edu/pub/alan/-pclsr.memo, 1989.
4. W. E. Boebert. On the inability of an unmodified capability machine to enforce the *-property. In Proc. 7th DoD/NBS Computer Security Conference, pages 291-293, Gaithersburg, MD, USA, Sept. 1984. National Bureau of Standards.
5. A. C. Bomberger, A. P. Frantz, W. S. Frantz, A. C. Hardy, N. Hardy, C. R. Landau, and J. S. Shapiro. The KeyKOS nanokernel architecture. In Proc. USENIX Workshop on Micro-Kernels and Other Kernel Architectures, pages 95-112. USENIX Association, Apr. 1992.
6. D. R. Cheriton and K. J. Duda. A caching model of operating system kernel functionality. In Proc. USENIX Symposium on Operating Systems Design and Implementation, pages 179-193. USENIX Association, Nov. 1994.
7. R. P. Colwell, E. F. Gehringer, and E. D. Jensen. Performance effects of architectural complexity in the intel 432. ACM Transactions on Computer Systems, 6(3):296-339, Aug. 1988.
8. R. Dean and F. Armand. Data movement in kernelized systems. In Proc. USENIX Workshop on Micro-kernels and Other Kernel Architectures, pages 243-262, Seattle, WA, USA, Apr. 1992.
9. J. B. Dennis and E. C. van Horn. Programming semantics for multiprogrammed computations. Communications of the ACM, 9(3):143-154, Mar. 1966.
10. D. Eastlake, R. Greenblatt, J. Holloway, T. Knight, and S. Nelson. Its 1.5 reference manual. Memo 161a, MIT AI Lab, July 1969.
11. D. R. Engler, M. F. Kaashoek, and J. O'Toole Jr. Exokernel: An operating system architecture for application-level resource management. In Proc. 15th Symposium on Operating Systems Principles, pages 251-266, Dec. 1995.
12. B. Ford, M. Hibler, J. Lepreau, R. McGrath, and P. Tullmann. Interface and execution models in the fluke kernel. In Proc. 3rd Symposium on Operating System Design and Implementation, pages 101-115, Feb. 1999.
13. B. Ford, M. Hibler, J. Lepreau, P. Tullmann, G. Beck, and S. Clawson. Microkernels meet recursive virtual machines. In Proc. USENIX Symposium on Operating Systems Design and Implementation, pages 137-151. USENIX Association, Oct. 1996.
14. B. Ford and J. Lepreau. Evolving Mach 3.0 to a migrating threads model. In Proc. Winter USENIX Conference, pages 97-114, Jan. 1994.
15. W. Frantz, C. Landau, and N. Hardy. Gnosis: A secure operating system for the '90s. SHARE Proceedings, 1983.
16. W. S. Frantz and C. R. Landau. Object oriented transaction processing in the KeyKOS microkernel. In Proc. USENIX Workshop on Micro-Kernels and Other Kernel Architectures, pages 13-26. USENIX Association, Sept. 1993.
17. G. R. Ganger. Personal Communication, Sept. 1999.
18. G. R. Ganger and Y. N. Patt. Metadata update performance in file systems. In Proc. USENIX Symposium on Operating Systems Design and Implementation, pages 49-60. USENIX Association, Nov. 1994.
19. E. F. Gehringer. Capability Architectures and Small Objects. UMI Research Press, Ann Arbor, Michigan, USA, 1982.
20. D. Golub, R. Dean, A. Forin, and R. Rashid. UNIX as an application program. In Proc. USENIX Summer Conference, pages 87-96, June 1990.
21. D. B. Golub and R. P. Draves. Moving the default memory manager out of the Mach kernel. In Proc of the Usenix Mach Symposium, pages 177-188, Nov. 1991.
22. N. Hardy. The KeyKOS architecture. Operating Systems Review, pages 8-25, Oct. 1985.
23. Intel Corporation. Pentium Processor Family User's Manual. Intel Corporation, Mt. Prospect, Illinois, USA, 1994.
24. T. Jaeger, K. Elphinstone, J. Liedtke, V. Panteleenko, and Y. Park. Flexible access control using IPC redirection. In Proc. 7th Workshop on Hot Topics in Operating Systems, pages 191-196. IEEE, Mar. 1999.
25. P. Karger. Improving Security and Performance for Capability Systems. PhD thesis, University of Cambridge, Oct. 1988. Technical Report No. 149.
26. P. A. Karger and A. J. Herbert. An augmented capability architecture to support lattice security and traceability of access. In Proc. of the 1984 IEEE Symposium on Security and Privacy, pages 2-12, Oakland, CA, Apr. 1984. IEEE.
27. B. W. Lampson. A note on the confinement problem. Communications of the ACM, 16(10):613-615, 1973.
28. C. R. Landau. The checkpoint mechanism in KeyKOS. In Proc. Second International Workshop on Object Orientation in Operating Systems, pages 86-91. IEEE, Sept. 1992.
29. H. M. Levy. Capability-Based Computer Systems. Digital Press, 1984.
30. J. Liedtke. Improving IPC by kernel design. In Proc. 14th ACM Symposium on Operating System Principles, pages 175-188. ACM, 1993.
31. J. Liedtke. A persistent system in real use - experiences of the first 13 years. In Proc. 3rd International Workshop on Object-Orientation in Operating Systems, pages 2-11, Asheville, N.C., 1993.
32. J. Liedtke. Improved address-space switching on Pentium processors by transparently multiplexing user address spaces. Technical Report GMD TR 933, GMD, Nov. 1995.
33. D. Mazières and M. F. Kaashoek. Secure applications need flexible operating systems. In Proc. 6th Workshop on Hot Topics in Operating Systems, pages 56-61. IEEE, May 1997.
34. L. McVoy and C. Staelin. lmbench: Portable tools for performance analysis. In USENIX 1996 Technical Conference, pages 279-295, San Diego, CA, USA, Jan. 1996.
35. C. W. Mercer, S. Savage, and H. Tokuda. Processor capacity reserves: An abstraction for managing processor usage. In Proc. 4th Workshop on Workstation Operating Systems, pages 129-134, Oct. 1993.
36. Motorola, Inc. MC68851 Paged Memory Management Unit User's Manual. Englewood Cliffs, New Jersey, USA, 1986.
37. E. I. Organick. A Programmer's View of the Intel 432 System. McGraw-Hill Book Company, 1983.
38. ∼KeyKOS.
39. M. Rozier, V. Abrossimov, F. Armand, I. Boule, M. Gien, M. Guillemont, F. Hermann, C. Kaiser, S. Langlois, P. Leonard, and W. Neuhauser. Overview of the Chorus distributed system. Technical Report CS-TR-90-25, Chorus Systemes, F-78182 St. Quentin-en-Yvelines Cedex, France, 1991.
40. Secure Computing Corporation. DTOS lessons learned report. Technical Report 87-0902025A006, June 1997. "http://www.securecomputing.com/randt/technical-docs.html".
41. J. S. Shapiro. The EROS Web Site. http://www.eros-os.org.
42. ∼KeyKOS.
43. J. S. Shapiro. EROS: A Capability System. PhD thesis, University of Pennsylvania, Philadelphia, PA 19104, 1999.
44. J. S. Shapiro, D. J. Farber, and J. M. Smith. The measured performance of a fast local IPC. In Proc. 5th International Workshop on Object Orientation in Operating Systems, pages 89-94, Seattle, WA, USA, Nov. 1996. IEEE.
45. J. S. Shapiro, D. J. Farber, and J. M. Smith. State caching in the eros kernel - implementing efficient orthogonal persistence in a pure capability system. In Proc. 7th International Workshop on Persistent Object Systems, pages 88-100, Cape May, NJ, USA, 1996.
46. J. S. Shapiro and S. Weber. Verifying operating system security. Technical Report MS-CIS-97-26, University of Pennsylvania, Philadelphia, PA, USA, 1997.
47. F. G. Soltis. Inside the AS/400. Duke Press, Loveland, Colorado, 1996.
48. R. Spencer, S. Smalley, P. Losocco, M. Hibler, D. Andersen, and J. Lepreau. The Flask security architecture: System support for diverse security policies. In Proc. 8th USENIX Security Symposium, pages 123-139, Aug. 1999.
49. A. S. Tannenbaum, S. J. Mullender, and R. van Renesse. Using sparse capabilities in a distributed operating system. In Proc. 9th International Symposium on Distributed Computing Systems, pages 558-563. IEEE, 1986.
50. A. S. Tannenebaum, R. van Renesse, H. van Staveren, G. J. Sharp, S. J. Mullender, J. Jansen, and G. van Rossum. Experiences with the Amoeba distributed operating system. Communications of the ACM, 33(12):46-63, Dec. 1990.
51. K. Thompson. UNIX implementation. The Bell System Technical Journal, 57(6):1931-1946, July 1978.
52. P. Tullmann, J. Lepreau, B. Ford, and M. Hibler. User-level checkpointing through exportable kernel state. In Proc. 5th IEEE International Workshop on Object-Orientation in Operating Systems, pages 85-88, Oct. 1996.
53. U.S. Department of Defense. Trusted Computer System Evaluation Criteria, 1985.
54. D. S. Wallach, D. Balfanz, D. Dean, and E. W. Felten. Extensible security architectures for Java. In Proc. 16th ACM Symposium on Operating Systems Principles, pages 116-128, Saint-Malo, France, Oct. 1997.
55. M. V. Wilkes and R. M. Needham. The Cambridge CAP Computer and its Operating System. Elsevier North Holland, 1979.
56. W. A. Wulf, R. Levin, and S. P. Harbison. HYDRA/C.mmp: An Experimental Computer System. McGrawHill, 1981.