Cooperation and security isolation of library oSes for multi-process applications

Proceedings of the 9th European Conference on Computer Systems, EuroSys 2014

Volumn , Issue , 2014, Pages

  Tsai, Chia Che ^a   Arora, Kumar Saurabh ^a   Bandi, Nehal ^a   Jain, Bhushan ^a   Jannen, William ^a   John, Jitin ^a   Kalodner, Harry A ^b   Kulkarni, Vrushali ^a   Oliveira, Daniela ^b   Porter, Donald E ^a  

^a STONY BROOK UNIVERSITY   (United States)

^b BOWDOIN COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

GRAPHENE; NETWORK SECURITY;

BYTE STREAMS; DESIGN CHALLENGES; MEMORY FOOTPRINT; MULTIPLE PROCESS; NETWORK SERVER; SECURITY ISOLATIONS; SHARED STATE; VIRTUAL MACHINES;

DIGITAL LIBRARIES;

EID: 84900419680     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2592798.2592812     Document Type: Conference Paper

References (53)

1. AppArmor. http://wiki.apparmor.net/index.php/Main-Page.
2. Byte unixbench. http://code.google.com/p/byte-unixbench/.
3. M. Accetta, R. Baron, D. Golub, R. Rashid, A. Tevanian, and M. Young. MACH: A new kernel foundation for UNIX development. Technical report, Carnegie Mellon University, 1986.
4. G. Ammons, J. Appavoo, M. Butrico, D. Da Silva, D. Grove, K. Kawachiya, O. Krieger, B. Rosenburg, E. Van Hensbergen, and R. W. Wisniewski. Libra: A library operating system for a JVM in a virtualized execution environment. In VEE, pages 44-54, 2007.
5. T. Anderson. The case for application-specific operating systems. In Workshop on Workstation Operating Systems, 1992.
6. A. Archangeli, I. Eidus, and C. Wright. Increasing memory density by using KSM. In Linux Symposium, pages 19-28, 2009.
7. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In SOSP, pages 164-177, 2003.
8. R. Baron, R. Rashid, E. Siegel, A. Tevanian, and M. Young. Mach-1: An operating environment for large-scale multiprocessor applications. 2(4):65-67, July 1985.
9. A. Baumann, P. Barham, P.-E. Dagand, T. Harris, R. Isaacs, S. Peter, T. Roscoe, A. Schüpbach, and A. Singhania. The multikernel: A new OS architecture for scalable multicore systems. In SOSP, pages 29-44, 2009.
10. A. Baumann, D. Lee, P. Fonseca, L. Glendenning, J. R. Lorch, B. Bond, R. Olinsky, and G. C. Hunt. Composing OS extensions safely and efficiently with Bascule. In EuroSys, 2013.
11. A. Belay, A. Bittau, A. Mashtizadeh, D. Terei, D. Mazières, and C. Kozyrakis. Dune: safe user-level access to privileged CPU features. In OSDI, pages 335-348, 2012.
12. S. Bhattiprolu, E. W. Biederman, S. Hallyn, and D. Lezcano. Virtual servers and checkpoint/restart in mainstream Linux. OSR, 42:104-113, July 2008.
13. G. A. Champine, D. E. Geer Jr., and W. N. Ruh. Project Athena as a Distributed Computer System. IEEE Computer, 23(9):40-51, Sept. 1990.
14. J. B. Chen and B. N. Bershad. The impact of operating system structure on memory system performance. In SOSP, pages 120-133, 1993.
15. D. R. Cheriton and K. J. Duda. A caching model of operating system kernel functionality. In OSDI, 1994.
16. D. R. Cheriton and T. P. Mann. Decentralizing a global naming service for improved performance and fault tolerance. TOCS, 7(2):147-183, May 1989.
17. J. Dike. User Mode Linux. Prentice Hall, 2006.
18. J. R. Douceur, J. Elson, J. Howell, and J. R. Lorch. Leveraging legacy code to deploy desktop applications on the web. In OSDI, 2008.
19. K. Elphinstone and G. Heiser. From L3 to seL4: What have we learnt in 20 years of L4 microkernels? In SOSP, 2013.
20. B. D. Fleisch. Distributed System V IPC in LOCUS: A design and implementation retrospective. SIGCOMM Comput. Commun. Rev., 16(3):386-396, Aug. 1986.
21. H. Franke, R. Russel, and M. Kirkwood. Fuss, futexes and furwocks: Fast userlevel locking in Linux. In Ottawa Linux Symposium, 2002.
22. Free Software Foundation. GNU Hurd. http://www.gnu.org/software/hurd/ hurd.html.
23. J. Howell, B. Parno, and J. R. Douceur. How to run POSIX apps in a minimal picoprocess. In USENIX ATC, pages 321- 332, 2013.
24. G. C. Hunt and J. R. Larus. Singularity: Rethinking the software stack. SIGOPS Oper. Syst. Rev., 41(2), 2007.
25. S. Jana and V. Shmatikov. Memento: Learning secrets from process footprints. In IEEE S&P, pages 143-157, 2012.
26. M. F. Kaashoek, D. R. Engler, G. R. Ganger, H. M. Briceño, R. Hunt, D. Mazières, T. Pinckney, R. Grimm, J. Jannotti, and K. Mackenzie. Application performance and flexibility on exokernel systems. In SOSP, pages 52-65, 1997.
27. M. Kerrisk. User namespaces progress. Linux Weekly News, 2012.
28. G. Klein, K. Elphinstone, G. Heiser, J. Andronick, D. Cock, P. Derrin, D. Elkaduwe, K. Engelhardt, R. Kolanski, M. Norrish, T. Sewell, H. Tuch, and S. Winwood. sel4: Formal verification of an OS kernel. In SOSP, pages 207-220, 2009.
29. O. Laaden and S. E. Hallyn. Linux-CR: Transparent application checkpoint-restart in Linux. In Linux Symposium, 2010.
30. I. Leslie, D. Mcauley, R. Black, T. Roscoe, P. Barham, D. Evers, R. Fairbairns, and E. Hyden. The design and implementation of an operating system to support distributed multimedia applications. IEEE JSAC, pages 1280-1297, 1996.
31. J. Liedtke. Clans & chiefs. In Architektur von Rechensystemen, 12. GI/ITG-Fachtagung, pages 294-305, 1992.
32. J. Liedtke. Improving IPC by Kernel Design. In SOSP, pages 175-188, 1993.
33. J. Liedtke. On micro-kernel construction. In SOSP, pages 237-250, 1995.
34. A. Madhavapeddy, R. Mortier, C. Rotsos, D. Scott, B. Singh, T. Gazagnaire, S. Smith, S. Hand, and J. Crowcroft. Unikernels: Library operating systems for the cloud. In ASPLOS, 2013.
35. P. E. McKenney. Exploiting Deferred Destruction: An Analysis of Read-Copy Update Techniques in Operating System Kernels. PhD thesis, 2004.
36. L. McVoy and C. Staelin. lmbench: Portable tools for performance analysis. In USENIX ATC, pages 23-23, 1996.
37. J. Mickens and M. Dhawan. Atlantis: robust, extensible execution environments for web applications. In SOSP, pages 217-231, 2011.
38. S. J. Mullender, G. van Rossum, A. S. Tanenbaum, R. van Renesse, and H. van Staveren. Amoeba: A distributed operating system for the 1990s. IEEE Computer, 23(5):44-53, May 1990.
39. S. Osman, D. Subhraveti, G. Su, and J. Nieh. The design and implementation of Zap: A system for migrating computing environments. In SOSP, pages 361-376, 2002.
40. OSV. OSv-designed for the cloud. osv.io.
41. R. Pike, D. Presotto, K. Thompson, and H. Trickey. Plan 9 from Bell Labs. In In Proceedings of the Summer 1990 UKUUG Conference, pages 1-9, 1990.
42. D. E. Porter, S. Boyd-Wickizer, J. Howell, R. Olinsky, and G. Hunt. Rethinking the library OS from the top down. In ASPLOS, pages 291-304, 2011.
43. D. Price and A. Tucker. Solaris Zones: Operating system support for consolidating commercial workloads. In LISA, pages 241-254, 2004.
44. SECure COMPuting with Filters (seccomp). http://kernel.ubuntu.com/git?p= ubuntu/ubuntuprecise.git;a=blob;f=Documentation/prctl/seccomp-filter.txt;hb= HEAD, 2012.
45. Z. Shan, X. Wang, T.-c. Chiueh, and X. Meng. Facilitating inter-application interactions for os-level virtualization. In VEE, pages 75-86, 2012.
46. S. Soltesz, H. Pötzl, M. E. Fiuczynski, A. Bavier, and L. Peterson. Container-based operating system virtualization: A scalable, high-performance alternative to hypervisors. In EuroSys, 2007.
47. X. Song, H. Chen, R. Chen, Y. Wang, and B. Zang. A case for scaling applications to many-core with OS clustering. In EuroSys, 2011.
48. J. M. Stevenson and D. P. Julin. Mach-US: UNIX on generic OS object servers. In USENIX Technical Conference, 1995.
49. M. Stokely and C. Lee. The FreeBSD Handbook, 3rd Edition, Vol 1: Users's Guide, 2003.
50. Linux Kernel Security Vulnerabilities (http://www.cvedetails.com). http://www.cvedetails.com/, 2013.
51. B. Walker, G. Popek, R. English, C. Kline, and G. Thiel. The LOCUS distributed operating system. In SOSP, pages 49-70, 1983.
52. H. J.Wang, C. Grier, A. Moshchuk, S. T. King, P. Choudhury, and H. Venter. The multi-principal OS construction of the Gazelle web browser. In USENIX Security, pages 417-432, 2009.
53. B. Yee, D. Sehr, G. Dardyk, J. B. Chen, R. Muth, T. Ormandy, S. Okasaka, N. Narula, and N. Fullagar. Native client: A sandbox for portable, untrusted x86 native code. In IEEE S&P, 2009.