Efficient kernel support of fine-grained protection domains for mobile code

Takahashi, Mitsunari; Kono, Kenji; Masuda, Takashi

doi:10.1109/icdcs.1999.776507

Cited by 15 publications

(6 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A tagged TLB is a TLB that can hold address transformation information for multiple address spaces. With this feature, there is no need to flush the TLB on an address space switch, and this enables an efficient implementation of a protection domain, which is implemented as an address space [30].…”

Section: Analysis Of Runtime Overheadmentioning

confidence: 99%

Heap protection for Java virtual machines

Chiba¹

2006

Proceedings of the 4th International Symposium on Principles and Practice of Programming in Java - PPPJ '06

View full text Add to dashboard Cite

Java virtual machine (JVM) crashes are often due to an invalid memory reference to the JVM heap. Before the bug that caused the invalid reference can be fixed, its location must be identified. It can be in either the JVM implementation or the native library written in C language invoked from Java applications. To help system engineers identify the location, we implemented a feature using page protection that prevents threads executing native methods from referring to the JVM heap. This feature protects the JVM heap during native method execution, and when native method execution refers to the JVM heap invalidly, it interrupts the execution by generating a page-fault exception and then reports the location where the page-fault exception was generated. This helps the system engineer to identify the location of the bug in the native library. The runtime overhead for using this feature averaged 4.4% based on an estimation using the SPECjvm98, SPECjbb2000, and JFCMark benchmark suites.

show abstract

Section: Analysis Of Runtime Overheadmentioning

confidence: 99%

Heap protection for Java virtual machines

Chiba¹

2006

Proceedings of the 4th International Symposium on Principles and Practice of Programming in Java - PPPJ '06

View full text Add to dashboard Cite

show abstract

“…The idea of multiple address spaces has mainly been applied to achieve protection in a shared environment [10,15,35]. More recently, to support the vast physical memory whose capacity may soon exceed the virtual address space size supported by today's CPUs, SpaceJMP [15] provides a new operating system design that promotes virtual address spaces to rst-class citizens, which enables process threads to attach to, detach from, and switch between multiple virtual address spaces.…”

Section: Related Workmentioning

confidence: 99%

Skyway

Nguyen

Navasca

et al. 2018

SIGPLAN Not.

View full text Add to dashboard Cite

Managed languages such as Java and Scala are prevalently used in development of large-scale distributed systems. Under the managed runtime, when performing data transfer across machines, a task frequently conducted in a Big Data system, the system needs to serialize a sea of objects into a byte sequence before sending them over the network. The remote node receiving the bytes then deserializes them back into objects. This process is both performance-ine cient and labor-intensive: (1) object serialization/deserialization makes heavy use of re ection, an expensive runtime operation and/or (2) serialization/deserialization functions need to be handwritten and are error-prone. This paper presents Skyway, a JVM-based technique that can directly connect managed heaps of di erent (local or remote) JVM processes. Under Skyway, objects in the source heap can be directly written into a remote heap without changing their formats. Skyway provides performance bene ts to any JVM-based system by completely eliminating the need (1) of invoking serialization/deserialization functions, thus saving CPU time, and (2) of requiring developers to hand-write serialization functions. CCS Concepts • Information systems → Data management systems; • Software and its engineering → Memory management;

show abstract

“…The implementation for lightweight protection domains in Nooks [33] and others (e.g., [11,34])also utilizes page table manipulation and/or hardware segmentation. The protection domains and corresponding privileges were fixed in these systems, and so are not easily extended to support ribbons.…”

Section: Related Workmentioning

confidence: 99%

Ribbons

2011

View full text Add to dashboard Cite

The need for programs to execute subcomponents in isolation from each other or with lower privileges is prevalent among today's systems. We introduce ribbons: a shared memory programming model that allows for more implicit sharing of memory than processes but is more restrictive than threads. Ribbons structure the heap into protection domains. Privileges between these protection domains are carefully controlled in order to confine computation. We propose RIBBONJ, a backwards-compatible extension of Java, to easily create or port programs to use the ribbons model. We study the progress and isolation properties of a subset of the language. Building on JikesRVM we implement ribbons by leveraging existing memory protection mechanisms in modern hardware and operating systems, avoiding the overhead of inline security checks and read or write barriers. We evaluate efficiency via microbenchmarks and the DaCapo suite, observing minor overhead. Additionally, we refactor Apache Tomcat to use ribbons for application isolation, discuss the refactoring's design and complexity, and evaluate performance using the SPECweb2009 benchmark.

show abstract

Efficient kernel support of fine-grained protection domains for mobile code

Cited by 15 publications

References 20 publications

Heap protection for Java virtual machines

Heap protection for Java virtual machines

Skyway

Ribbons

Contact Info

Product

Resources

About