Kernel design for isolation and assurance of physical memory

IIES 2008 - Proceedings of the 1st Workshop on Isolation and Integration in Embedded Systems

Volumn , Issue , 2008, Pages 35-40

  Elkaduwe, Dhammika ^a   Derrin, Philip ^a   Elphinstone, Kevin ^a  

^a UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

Embedded systems; Isolation; Memory management; Microkernels; seL4

Indexed keywords

EMBEDDED SOFTWARE; INTEGRATED CIRCUITS;

COMPLEX SOFTWARE SYSTEMS; ISOLATION; KERNEL DESIGNS; MEMORY MANAGEMENT; MICROKERNELS; PERFORMANCE CHARACTERISTICS; PHYSICAL MEMORIES; SEL4; SOFTWARE COMPLEXITY;

EMBEDDED SYSTEMS;

EID: 63149115885     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1435458.1435465     Document Type: Conference Paper

References (31)

1. P. Barham, B. Dragovic, K. Fraser, S. Hand, T Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In 19th SOSP, pages 164-177, Bolton Landing, NY, USA, Oct 2003.
2. A. C. Bromberger, A. P. Frantz, W S. Frantz, A. C. Hardy, N. Hardy, C. R. Landau, and J. S. Shapiro. The KeyKOS nanokernel architecture. In USENIX WS Microkernels & other Kernel Arch., pages 95-112, Seattle, WA, USA, Apr 1992.
3. D. R. Cheriton and K. Duda. A caching model of operating system functionality. In 1st OSDI, pages 14-17, Monterey, CA, USA, Nov 1994.
4. J. B. Dennis and E. C. Van Horn. Programming semantics for multiprogrammed computations. CACM, 9:143-155, 1966.
5. P. Derrin, K. Elphinstone, G. Klein, D. Cock, and M. M. T. Chakravarty. Running the manual: An approach to high-assurance microkernel development. In ACM SIGPLAN Haskell WS, Portland, OR, USA, Sep 2006.
6. D. R. Engler, S. K. Gupta, and M. F. Kaashoek. AVM: Application-level virtual memory. In 5th HotOS, pages 72-77, May 1995.
7. D. R. Engler, M. F. Kaashoek, and J. O'Toole, Jr. Exokernel: An operating system architecture for application-level resource management. In 15th SOSP, pages 251-266, Copper Mountain, CO, USA, Dec 1995.
8. J. Fotheringham. Dynamic storage allocation in the Atlas computer, including an automatic use of a backign store. CACM, 4:435-436, Oct 1961.
9. A. Haeberlen and K. Elphinstone. User-level management of kernel memory. In 8th Asia-Pacific Comp. Syst. Arch. Conf, volume 2823 of LNCS, Aizu-Wakamatsu City, Japan, Sep 2003. Springer Verlag.
10. S. M. Hand. Self-paging in the Nemesis operating system. In 3rd OSDI, pages 73-86, New Orleans, LA, USA, Feb 1999. USENIX.
11. N. Hardy. KeyKOS architecture. Operat. Syst. Rev., 19(4):8-25, Oct 1985.
12. G. Heiser. The role of virtualization in embedded systems. In 1st IIES, Glasgow, UK, Apr 2008. ACM SIGOPS.
13. IBM K42 Team. Utilizing Linux Kernel Components in K42, Aug 2002. Available from http://www.research.ibm.com/K42/.
14. B. Kauer. L4.sec implementation - kernel memory management. Dipl. thesis, Dresden University of Technology, May 2005.
15. B. Leslie, C. van Schaik, and G. Heiser. Wombat: A portable user-mode Linux for embedded systems. In 6th Linux.Conf.Au, Canberra, Apr 2005.
16. J. Liedtke. On μ-kernel construction. In 15th SOSP, pages 237-250, Copper Mountain, CO, USA, Dec 1995.
17. J. Liedtke, H. Härtig, and M. Hohmuth. OS-controlled cache predictability for real-time systems. In Proceedings of the Third IEEE Real-Time Technology and Applications Symposium (RTAS '97), pages 213-227, Montreal, Canada, Jun 1997. IEEE.
18. R. J. Lipton and L. Snyder. A linear time algorithm for deciding subject security. J. ACM, 24(3):455-464, 1977.
19. L. McVoy and C. Staelin. lmbench: Portable tools for performance analysis. In 1996 Ann. USENIX, San Diego, CA, USA, Jan 1996.
20. N. H. Minsky. Selective and locally controlled transport of privileges. ACM Trans. Program. Lang. Syst., 6(4):573-602, 1984.
21. National ICT Australia. WCTA L4-embedded Kernel Reference Manual Version N1, Oct 2005. http://ertos.nicta.com.au/Software/systems/kenge/ pistachio/refman.pdf.
22. R. Needham and R. Walker. The Cambridge CAP computer and its protection system. In 6th SOSP, pages 1-10. ACM, Nov 1977.
23. T Nipkow, L. Paulson, and M. Wenzel. Isabelle/HOL - A Proof Assistant for Higher-Order Logic, volume 2283 of LNCS. Springer, 2002.
24. J. M. Rushby. Design and verification of secure systems. In 8th SOSP, pages 12-21, 1981.
25. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: A fast capability system. In 17th SOSP, pages 170-185, Charleston, SC, USA, Dec 1999.
26. J. S. Shapiro and S. Weber. Verifying the EROS confinement mechanism. In Symp. Security & Privacy, 2000.
27. L. Snyder. Formal models of capability-based protection systems. IEEE Trans. Comput., 30(3): 172-181, 1981.
28. P. Tullmann, J. Lepreau, B. Ford, and M. Hibler. User-level checkpointing through exportable kernel state. In IWOOOS '96: proc 5th International Workshop on Object Orientation in Operating Systems, pages 85-88, Washington, DC, USA, 1996. IEEE Computer Society.
29. C. A. Waldspurger. Memory resource management in VMware ESX server. In 5th OSDI, Boston, MA, USA, 2002.
30. A. Whitaker, M. Shaw, and S. D. Gribble. Scale and performance in the Denali isolation kernel. In 5th OSDI, Boston, MA, USA, Dec 2002.
31. N. Zeldovich, S. Boyd-Wickizer, E. Kohler, and D. Mazières. Making information flow explicit in HiStar. In 7th OSDI, pages 263-278, Berkeley, CA, USA, 2006. USENIX Association.