Experience with secure multi-processing in Java

Balfanz, Dirk; Gong, Li

doi:10.1109/icdcs.1998.679754

Cited by 26 publications

(18 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These settings are called parameters. 3 A parameter is queried and modi ed via a parameter procedure, such a s current-directory or current-output-port. F or example, (current-directory) returns the path of the current directory, while (current-directory dir) sets the current directory to dir.…”

Section: Threads and Parametersmentioning

confidence: 99%

Programming languages as operating systems ( or revenge of the son of the lisp machine)

et al. 1999

View full text Add to dashboard Cite

The MrEd virtual machine serves both as the implementation platform for the DrScheme programming environment, and as the underlying Scheme engine for executing expressions and programs entered into DrScheme's read-eval-print loop. We describe the key elements of the MrEd virtual machine for building a programming environment, and we step through the implementation of a miniature version of DrScheme in MrEd. More generally, w e s h o w h o w MrEd denes a high-level operating system for graphical programs. Since DrScheme exposes MrEd's language constructs directly to the repl, D r S c heme can easily execute programs that use the full MrEd language, including its GUI toolbox. At the same time, DrScheme must protect its GUI against interference from the programs it executes, and it must be able to halt a program that has gone awry and To address this problem, MrEd provides a small set of new language constructs. These constructs allow a programrunning program, such a s D r S c heme, to run nested programs directly on the MrEd virtual machine without sacri cing control over the nested programs. As a result, DrScheme can execute a copy o f D r S c heme that is executing its own copy of DrScheme (see Figure 1). The inner and middle DrSchemes cannot interfere with the operation of the outer DrScheme, and the middle DrScheme cannot interfere with the outer DrScheme's control over the inner DrScheme.In this paper, we describe the key elements of the MrEd virtual machine, and we step through the implementation of a miniature version of DrScheme in MrEd. More generally, w e s h o w h o w MrEd de nes a high-level operating system (OS) for graphical programs. As in other high-level OSes, safety and security i n M r E d d e r i v e from properties of the underlying programming language. Mere safety, h o wever, provides neither the level of protection between applications nor the kind of process control that conventional OSes provide. Such protection and control is crucial for implementing many kinds of programs, including programming environments and scripting engines. By describing how w e implemented DrScheme in MrEd, we demonstrate how t o obtain key OS facilities through small extensions to a highlevel programming language.

show abstract

Section: Threads and Parametersmentioning

confidence: 99%

Programming languages as operating systems ( or revenge of the son of the lisp machine)

et al. 1999

View full text Add to dashboard Cite

show abstract

“…Balfanz and Gong designed a multiprocessing JVM in order to explore the use of the Java security architecture to protect applications from each other [BG97]. The proposed extensions, based on class loaders, enhance the standard JVM so that it can support multiprocessing.…”

Section: Related Workmentioning

confidence: 99%

Multiprocessing and portability for PDAs

Czajkowski

2000

Proceedings of the 9th Workshop on ACM SIGOPS European Workshop: Beyond the PC: New Challenges for the Operating System

View full text Add to dashboard Cite

show abstract

“…However, Alta only provides a single, global garbage collector, so separation of garbage collection costs is not possible. Balfanz and Gong [2] describe a multiprocessing JVM developed to explore the security architecture ramifications of protecting applications from each other, as opposed to just protecting the system from applications. They identify several areas of the JDK that assume a singleapplication model, and propose extensions to the JDK to allow multiple applications and to provide inter-application security.…”

Section: Java Extensionsmentioning

confidence: 99%

Processes in KaffeOS: Isolation, Resource Management, and Sharing in Java

Back¹,

Hsieh²,

Lepreau³

2000

View full text Add to dashboard Cite

Single-language runtime systems, in the form of Java virtual machines, are widely deployed platforms for executing untrusted mobile code. These runtimes provide some of the features that operating systems provide: inter-application memory protection and basic system services. They do not, however, provide the ability to isolate applications from each other, or limit their resource consumption. This paper describes KaffeOS, a system that provides these features for a Java runtime. The KaffeOS architecture takes many lessons from operating system design, such as the use of a user/kernel boundary.The KaffeOS architecture supports the OS abstraction of a process in a Java virtual machine. Each process executes as if it were run in its own virtual machine, including separate garbage collection of its own heap. The difficulty in designing KaffeOS lay in balancing the goals of isolation and resource management against the goal of allowing direct sharing. Overall, KaffeOS is up to 11% slower than the freely available JVM on which it is based, which is an acceptable penalty for the safety that it provides. KaffeOS is substantially slower than commercial JVMs, but exhibits much better performance scaling in the presence of uncooperative code.

show abstract

Experience with secure multi-processing in Java

Cited by 26 publications

References 13 publications

Programming languages as operating systems ( or revenge of the son of the lisp machine)

Programming languages as operating systems ( or revenge of the son of the lisp machine)

Multiprocessing and portability for PDAs

Processes in KaffeOS: Isolation, Resource Management, and Sharing in Java

Contact Info

Product

Resources

About