Integrating segmentation and paging protection for safe, efficient and transparent software extensions

Proceedings of the 17th ACM Symposium on Operating Systems Principles, SOSP 1999

Volumn , Issue , 1999, Pages 140-153

  Chiueh, Tzi Cker ^a   Venkitachalam, Ganesh ^a   Pradhan, Prashant ^a  

^a Stony Brook University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER OPERATING SYSTEMS; LINUX; NETWORK ARCHITECTURE; SOFTWARE ENGINEERING;

COMPONENT-BASED SOFTWARE DEVELOPMENT; EXTENSION MECHANISMS; NETWORK PACKET FILTERS; PACKET FILTERING; PROGRAMMING TOOLS; PROTECTION MECHANISMS; PROTOTYPE IMPLEMENTATIONS; SYSTEMS IMPLEMENTATION;

SOFTWARE DESIGN;

EID: 84944138173     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/319151.319161     Document Type: Conference Paper

References (30)

1. Alexander, D.S.; Arbaugh, W.A.; Keromytis, A.D.; Smith, J.M., "A secure active network environment architecture: realization in Switch Ware," IEEE Network, 12(3):37-45, May-June 1998.
2. Apache Server project, http://www.apache.org/
3. Banerji, A.; Tracey, J.M.; Cohn, D.L., "Protected shared libraries-a new approach to modularity and sharing," Proceedings of the USENIX 1997 Annual Technical Conference, p. 59-75, Anaheim, CA, Jan. 1997.
4. Bensoussan, A.; Clingen, CT.; Daley, R.C., "The Multics virtual memory: concepts and design," Communications of the ACM, 15(5):308-18, May 1972.
5. Bershad, B, N.; Anderson, TE.; Lazowska, E.D., "Lightweight remote procedure call", ACM Transactions on Computer Systems, 8(1):37-55, Feb. 1990.
6. Bershad, B.N.; Savage, S.; Pardyak, P.; Sirer, E.G.; Fiuczynski, M.E.; Becker, D.; Chambers, C; Eggers, S., "Extensibility, safety and performance in the SPIN operating system," ACM Operating Systems Review, 29(5):267-84, Dec. 1995.
7. Chase, J.S.; Levy, H.M.; Feeley, M.J.; Lazowska, E.D., "Sharing and protection in a single-address-space operating system," ACM Transactions on Computer Systems, 12(4):271-307, Nov. 1994.
8. Chiueh, T.; Sankaran, H.; Neogi, A., "Spout: A Distributed Engine for Safe Execution of Java Applets," ECSL-TR-59, Experimental Computer Systems Lab., Computer Science Department, SUNY at Stony Brook, June 1999.
9. The FastCGI Homepage, http://fastcgi.idle.com/.
10. Gosling, J.; McGilton, H., "The Java Language Environment", http://java.sun.com/docs/white/index.html, May 1996.
11. Green, P., "Multics Virtual Memory - Tutorial and Reflections," ftp://ftp.stratus.com/pub/vos/multics/pg/mvm.html.
12. Heid, J., "Mastering Adobe Premiere 5," Macworld, 16(1):115-17, Jan. 1999.
13. Heiser, G.; Elphinstone, K.; Vochteloo, J.; Russell, S.; Liedtke, J., "The Mungi Single-Address-Space Operating System," Software - Practice and Experience, 28(9):901-28, July 1998.
14. Intel Pentium Processor Family Developer's Manual, Volume 3: Architecture and Programming Manual, Intel Corporation, Santa Clara, CA, 1995.
15. Kaashoek, M.F.; Engler, D.R.; Ganger, G.R.; Briceno, H.M.; Hunt, R.; Mazieres, D.; Pinckney, T.; Grimm, R.; Jannotti, J.; Mackenzie, K., "Application performance and flexibility on exokernel systems," ACM Operating Systems Review, 31(5):52-65, Dec. 1997.
16. Liedtke, J.; Elphinstone, K.; Schonberg, S.; Hartig, H.; Heiser, G.; Islam, N.; Jaeger, T., "Achieved IPC performance (still the foundation for extensibility)," Proceedings of the 6-th Workshop on Hot Topics in Operating Systems (HotOS - VI), p. 28-31, May 1997.
17. McCanne, S.; Jacobson, V, "The BSD packet filter: a new architecture for user-level packet capture," Proceedings of the Winter 1993 USENIX Conference, p. 259-69, Jan. 1993.
18. Mendelsohn, N., "Operating systems for component software environments," Proceedings of the 6-th Workshop on Hot Topics in Operating Systems (HotOS-VI), p. 49-54, Cape Cod, MA., May 1997.
19. Necula, G.C.; Lee, P., "Safe kernel extensions without run-time checking," ACM Operating Systems Review, 30(special issue):229-43, Oct. 1996.
20. Olson, M. A., "Data Blade extensions for the Informix-Universal server," Proceedings IEEE COMPCON 97, p. 143-8, Feb. 1997.
21. PA-RISC 2.0 Architecture Reference Manual, Hewlett Packard Corporation, Palo Alto, CA, 1994.
22. Pradhan, P.; Chiueh, T.; "Operating System Support for Cluster-Based Routers," Proceedings of the 7-th Workshop on Hot Topics in Operating Systems (HotOS-VII), p. 76-81, Rio Rico, AZ, March 1999.
23. Seltzer, M.I.; Endo, Y; Small, C; Smith, K.A., "Dealing with disaster: surviving misbehaved kernel extensions," ACM Operating Systems Review, 30(special issue):213-27, Oct. 1996.
24. Small, C; Seltzer, M.I.; "A comparison of OS extension technologies," Proceedings of the USENIX 1996 Annual Technical Conference, p. 41-54, San Diego, CA, Jan. 1996.
25. Small, C; Seltzer, M., "MiSFIT: constructing safe extensible systems," IEEE Concurrency, 6(3):34-41, July-Sept. 1998.
26. Stonebraker, M.; Kemnitz, G., "The POSTGRES next-generation database management system," Communications of the ACM, 34(10):78-92, Oct. 1991.
27. Tennenhouse, D.L.; Smith, J.M.; Sincoskie, W.D.; Wetherall, DJ.; Minden, G.J., "A survey of active network research," IEEE Communications Magazine, 35(1):80-6, Jan. 1997.
28. Venkitachalam, G.; Chiueh, T.; "High Performance Common Gateway Interface Invocation," Proceedings of 1999 IEEE Workshop on Internet Applications (WIAPP '99), p. 4-11, San Jose, CA, July 1999.
29. Wahbe, R.; Lucco, S.; Anderson, T.E.; Graham, S.L., "Efficient software-based fault isolation," ACM Operating Systems Review, 27(5):203-16, Dec. 1993.
30. Wilkes, J.; Fouts, M.; Corrors, T.; Hoyle, S.; Sears, B.; Sullivan, T., "Brevix design 1.01," HPL-OSR-93-22, Hewlett-Packard Laboratories, Palo Alto, Apr. 1993.