Improving the reliability of commodity operating systems

ACM Transactions on Computer Systems

Volumn 23, Issue 1 SPEC. ISS., 2005, Pages 77-110

  Swift, Michael M ^a,b   Bershad, Brian N ^a,b   Levy, Henry M ^a,b  

^a UNIVERSITY OF WASHINGTON   (United States)

^b University of Washington   (United States)

Author keywords

Device drivers; I O; Protection; Recovery; Virtual memory

Indexed keywords

COMMODITY OPERATING SYSTEMS; DEVICE DRIVERS; INPUT/OUTPUT (I/O); VIRTUAL MEMORY;

CODES (SYMBOLS); COMPUTER ARCHITECTURE; COMPUTER HARDWARE; COMPUTER PROGRAMMING LANGUAGES; DATA STRUCTURES; ERROR ANALYSIS; FAULT TOLERANT COMPUTER SYSTEMS; INTERFACES (COMPUTER); INTERNET; RELIABILITY;

COMPUTER OPERATING SYSTEMS;

EID: 16644400693     PISSN: 07342071     EISSN: None     Source Type: Journal    
DOI: 10.1145/1047915.1047919     Document Type: Review

References (67)

1. APACHE PROJECT. 2000. Apache HTTP server version 2.0. Available online at http://httpd.apache.org.
2. BALL, T. AND RAJAMANI, S. K. 2001. Automatically validating temporal safety properties of interfaces. In SPIN 2001, Workshop on Model Checking of Software. Lecturer Notes in Computer Science, vol. 2057. Springer-Verlag, Berlin, Germany, 103-122.
3. BERSHAD, B. N. 1992. The increasing irrelevance of IPC performance for microkernel-based operating systems. In Proceedings of Workshop on Micro-Kernels and Other Kernel Architectures (Seattle, WA). 205-211.
4. BERSHAD, B. N., ANDERSON, T. E., LAZOWSKA, E. D., AND LEVY, H. M. 1990. Lightweight remote procedure call. ACM Trans. Comput. Syst. 8, 1 (Feb.), 37-55.
5. BERSHAD, B. N., SAVAGE, S., PARDYAK, P., SIRER, E. G., FIUCZYNSKI, M. E., BECKER, D., CHAMBERS, C., AND EGGERS, S. 1995. Extensibility, safety and performance in the SPIN operating system. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (Copper Mountain, CO). 267-284.
6. BIRRELL, A. D. AND NELSON, B. J. 1984. Implementing remote procedure calls. ACM Trans. Comput. Syst. 2, 1 (Feb.), 39-59.
7. BOVET, D. P. AND CESATI, M. 2001. Understanding the Linux Kernel. O'Reilly, Sebastopal, CA.
8. CANDEA, G. AND FOX, A. 2001. Recursive restartability: Turning the reboot sledgehammer into a scalpel. In Proceedings of the Eighth IEEE HOTOS. 125-132.
9. CHAPIN, J., ROSENBLUM, M., DEVINE, S., LAHIRI, T., TEODOSIU, D., AND GUPTA, A. 1995. Hive: Fault containment for shared-memory multiprocessors. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (Copper Mountain Resort, CO). 12-25.
10. CHASE, J. S., LEVY, H. M., FEELEY, M. J., AND LAZOWSKA, E. D. 1994. Sharing and protection in a single-address-space operating system. ACM Trans. Comput. Syst. 12, 4 (Nov.), 271-307.
11. CHEN, P. AND NOBLE, B. 2001. When virtual is better than real. In Proceedings of the Eighth IEEE HOTOS. 133-138.
12. CHOU, A., YANG, J., CHELF, B., HALLEM, S., AND ENGLER, D. 2001. An empirical study of operating system errors. In Proceedings of the 18th ACM Symposium on Operating Systems Principles (Lake Louise, Alta., Canada). 73-88.
13. CHRISTMANSSON, J. AND CHILLAREGE, R. 1996. Generation of an error set that emulates software faults - based on field data. In Proceedings of the 1996 IEEE Symposium on Fault-Tolerant Computing (FTCS, Sendai, Japan). 304-313.
14. CONDIT, J., HARREN, M., MCPEAK, S., NECULA, G. C., AND WEIMER, W. 2003. CCured in the real world. In Proceedings of the ACM SIGPLAN '03 ACM Conference on Programming Language Design and Implementation (San Diego, CA). 232-244.
15. CUSTER, H. 1993. Inside Windows NT. Microsoft Press, Redmond, WA.
16. DELINE, R. AND FÄHNDEICH, M. 2001. Enforcing high-level protocols in low-level software. In Proceedings of the ACM SIGPLAN '01 ACM Conference on Programming Language Design and Implementation (Snowbird, UT). 59-69.
17. DENNING, P. J. 1976. Fault tolerant operating systems. ACM Comput. Surv. 8, 4 (Dec.), 359-389.
18. DENNIS, J. B. AND HORN, E. V. 1966. Programming semantics for multiprogramming systems. Commun. ACM 9, 3 (Mar.), 29-35.
19. ENGLER, D., CHELF, B., CHOU, A., AND HALLEM, S. 2000. Checking system rules using systemspecific, programmer-written compiler extensions. In Proceedings of the 4th USENIX Symposium on Operating Systems Design and Implementation (San Diego, CA). 1-16.
20. ENGLER, D. R., KAASHOEK, M. F., AND JR., J. O. 1995. Exokernel: An operating system architecture for application-level resource management. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (Copper Mountain Resort, CO). 251-266.
21. FABRE, J.-C., RODRÍ, M., ARLAT, J., SALLES, F., AND SIZUN, J.-M. 2000. Building dependable COTS microkernel-based systems using MAFALDA. In Proceedings of the 2000 Pacific Rim International Symposium on Dependable Computing (PRDC 00) (Los Angeles, CA). 85-94.
22. FABRY, R. S. 1974. Capability-based addressing. Commun. ACM 17, 7 (July), 403-412.
23. FETZER, C. AND XIAO, Z. 2003. HEALERS: A toolkit for enhancing the robustness and security of existing applications. In Proceedings of the 2003 International Conference on Dependable Systems and Networks (DSN'03, San Francisco, CA). 317-322.
24. FORD, B., BACK, G., BENSON, G., LEPREAU, J., LIN, A., AND SHIVERS, O. 1997. The Flux OSKit: A substrate for OS language and research. In Proceedings of the 16th ACM Symposium on Operating Systems Principles. 38-51.
25. FORIN, A., GOLUB, D., AND BERSHAD, B. 1991. An I/O system for Mach. In Proceedings of the Usenix Mach Symposium. 163-176.
26. GETTYS, J., CARLTON, P. L., AND MCGREGOR, S. 1990. TheX window system, version 11. Softw.-Prac. Exp. 20, 52 (Oct.), 35-67.
27. GILLEN, A., KUSNETZKY, D., AND MCLARON, S. 2002. The role of Linux in reducing the cost of enterprise computing. IDC white paper. International Data Corporation, Framingham, MA.
28. GOSLING, J., JOY, B., AND STEELE, G. 1996. The Java Language Specification. Addison-Wesley, Reading, MA.
29. GRAY, J. 1996. Why do computers stop and what can be done about it? In Proceedings of the Fifth IEEE Symposium on Reliability in Distributed Software and Database Systems (Los Angeles, CA). 3-12.
30. HAARSTEN, J. C. 2000. The Bluetooth radio system. IEEE Personal Commun. Mag. 7, 1 (Feb.), 28-36.
31. HAND, S. M. 1999. Self-paging in the Nemesis operating system. In Proceedings of the 3rd USENIX Symposium on Operating Systems Design and Implementation (New Orleans, LA). 73-86.
32. HÄRTIG, H., HOHMUTH, M., LIEDTKE, J., SCHÖBERG, S., AND WOLTER, J. 1997. The performance of μ-kernel-based systems. In Proceedings of the 16th ACM Symposium on Operating Systems Principles (Saint-Malo, France). 66-77.
33. HEWLETT PACKARD. 2001. Hewlett Packard Digital Entertainment Center. Go online to http://www.hp.com/hpinfo/newsroom/press/31oct01a.htm.
34. HOUDEK, M. E., SOLTIS, F. G., AND HOFFMAN, R. L. 1981. IBM System/38 support for capability-based addressing. In Proceedings of the 8th ACM/IEEE International Symposium on Computer Architecture. 341-348.
35. HSUEH, M., TSAI, T. K., AND IYER, R. K. 1997. Fault injection techniques and tools. IEEE Comput. 30, 4 (Apr.), 75-82.
36. INTEL CORPORATION. 2002. The IA-32 Architecture Software Developer's Manual, Volume 1: Basic Architecture. Intel Corporation, Santa Clara, CA. Available online at http://www.intel.com/design/pentium4/manuals/24547010.pdf.
37. JONES, R. 1995. Netperf: A network performance benchmark, version 2.1. Available online at http://www.netperf.org.
38. KOLDINGER, E. J., CHASE, J. S., AND EGGERS, S. J. 1994. Architectural support for single address space operating systems. In Proceedings of the Fifth International Conference on Architectural Support for Programming Languages and Operating Systems. 175-186.
39. LEVY, H. M. 1984. Capability-Based Computer Systems. Digital Press, Burlington, MA. Available online at http://www.cs.washington.edu/homes/levy/ capabook.
40. LIEDTKE, J. 1995. On μ-kernel construction. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (Copper Mountain Resort, CO). 237-250.
41. LOWELL, D. E., CHANDRA, S., AND CHEN, P. M. 2000. Exploring failure transparency and the limits of generic recovery. In Proceedings of the 4th USENIX Symposium on Operating Systems Design and Implementation (San Diego, CA). 289-303.
42. LOWELL, D. E. AND CHEN, P. M. 1998. Discount checking: Transparent, low-overhead recovery for general applications. Tech. Rep. CSE-TR-410-99. University of Michigan, Axn Arbor, MI.
43. MÉRILLON, F., RÉVEILLÈRE, L., CONSEL, C., MARLET, R., AND MULLER, G. 2000. Devil: An IDL for hardware programming. In Proceedings of the 4th USENIX Symposium on Operating Systems Design and Implementation (San Diego, CA). 17-30.
44. MICROSOFT CORPORATION. 2000. FAT: General overview of on-disk format, version 1.03. Microsoft Corporation, Redmond, WA.
45. MOSBERGER, D. AND JIN, T. 1998. httperf: A tool for measuring web server performance. In First ACM Workshop on Internet Server Performance (Madison, WI). 59-67.
46. NECULA, G. C. AND LEE, P. 1996. Safe kernel extensions without run-time checking. In Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (Seattle, WA). 229-243.
47. NG, W. T. AND CHEN, P. M. 1999. The systematic improvement of fault tolerance in the Rio file cache. In Proceedings of the 1999 IEEE Symposium on Fault-Tolerant Computing (FTCS). 76-83.
48. ORGANICK, E. I. 1983. A Programmer's View of the Intel 432 System. McGraw Hill, New York, NY.
49. PATTERSON, D., BROWN, A., BROADWELL, P., CANDEA, G., CHEN, M., CUTLER, J., ENRIQUEZ, P., FOX, A., KÝCÝMAN, E., MERZBACHER, M., OPPENHEIMER, D., SASTRY, N., TETZLAFF, W., TRAUPMAN, J., AND TREUHAFT, N. 2002. Recovery-oriented computing (ROC): Motivation, definition, techniques, and case studies. Tech. Rep. CSD-02-1175. UC Berkeley Computer Science. Berkely, CA.
50. PROJECT-UDI. 1999. Introduction to UDI version 1.0. Tech. rep. Project UDI. Visit Website www.projectudi.org.
51. SALTZER, J. H. 1974. Protection and the control of information sharing in Multics. Commun. ACM 17, 7 (July), 388-402.
52. SCHMUCK, F. AND WYLIE, J. 1991. Experience with transactions in Quicksilver. In Proceedings of the 13th ACM Symposium on Operating Systems Principles (Pacific Grove, CA). 239-253.
53. SELTZER, M. I., ENDO, Y., SMALL, C., AND SMITH, K. A. 1996. Dealing with disaster: Surviving misbehaved kernel extensions. In Proceedings of the 2nd USENIX Symposium on Operating Systems Design and Implementation (Seattle, WA). 213-227.
54. SHORT, R. 2003. Vice president of Windows Core Technology, Microsoft Corp. Private communication.
55. STANDARD PERFORMANCE EVALUATION CORPORATION. 1999. The SPECweb99 benchmark. Standard Performance Evaluation Corporation, Warrenton, VA. Visit Web site www. Apec.org.
56. SUGERMAN, J., VENKITACHALAM, G., AND LIM, B. 2001. Virtualizing I/O devices on VMware workstation's hosted virtual machine monitor. In Proceedings of the 2001 USENIX Annual Technical Conference (Boston, MA).
57. SULLIVAN, M. AND CHILLREGE, R. 1991. Software defects and their impact on system availability-a study of field failures in operating systems. In Proceedings of the 1991 IEEE Symposium on Fault-Tolerant Computing (FTCS-21). (Montreal, P. Q., Canada). 2-9.
58. SULLIVAN, M. AND STONEBRAKER, M. 1991. Using write protected data structures to improve software fault tolerance in highly available database management systems. In Proceedings of the 17th International Conference on Very Large Data Bases. Morgan Kaufman Publishing, San Francisco, CA, 171-180.
59. THURROTT, P. 2003. Windows 2000 server: The road to gold, part two: Developing windows. Paul Thurrott's SuperSite for Windows.
60. TIVO CORPORATION. 2001. TiVo digital video recorder. Go to www.tivo. com.
61. VAN DE VEN, A. 1999. kHTTPd: Linux HTTP accelerator. Available online at http://www.fenrus.demon.nl/.
62. WAHBE, R., LUCCO, S., ANDERSON, T. E., AND GRAHAM, S. L. 1993. Efficient software-based fault isolation. In Proceedings of the 14th ACM Symposium on Operating Systems Principles (Asheville, NC). 203-216.
63. WHEELER, D. A. 2002. More than a gigabuck: Estimating GNU/Linux's size. Available online at http://www.dwheeler.com/sloc/redhat71-v1/redhat71sloc.html.
64. WHITAKER, A., SHAW, M., AND GRIBBLE, S. D. 2002. Denali: Lightweight virtual machines for distributed and networked applications. In Proceedings of the 5th USENIX Symposium on Operating Systems Design and Implementation (Boston, MA). 195-209.
65. WITCHEL, E., CATES, J., AND ASANOVIĆ, K. 2002. Mondrian memory protection. In Proceedings of the Tenth International Conference on Architectural Support for Programming Languages and Operating Systems. 304-316.
66. WULF, W. A. 1975. Reliatble hardware-software architecture. In Proceedings of the International Conference on Reliable Software (Los Angeles, CA). 122-130.
67. YOUNG, M., ACCETTA, M., BARON, R., BOLOSKT, W., GOLUB, D., RASHID, R., AND TEVANIAN, A. 1986. Mach: A new kernel foundation for UNIX development. In Proceedings of the 1986 Summer USENIX Conference (Atlanta, GA). 93-113.