Extensibility safety and performance in the SPIN operating system

Bershad, Brian N.; Savage, Stefan; Pardyak, Przemysław; Sirer, Emin Gün; Fiuczynski, Marc E.; Becker, D.; Chambers, Craig; Eggers, Susan J.

doi:10.1145/224057.224077

Cited by 208 publications

(260 citation statements)

References 44 publications

Supporting

Mentioning

254

Contrasting

Unclassified

Order By: Relevance

“…4 Like simple MAC-based PRACs, we use sig i (m) to sign the partial result computed on server s i , and erase sig i (m) prior to migrating to server s i+1 .…”

Section: Partial Results Authentication Codesmentioning

confidence: 99%

“…In agent-based computing, most researchers have been concentrating on one side of the security issue: protecting the server from potentially malicious agents. Related work in downloadable executable content (Java [ 7 ], Software Fault Isolation [19], Proof-Carrying Code [16, 1 7 ], OS extension mechanisms such as packet lters [13], type safe languages [4,9], etc) all focus on this problem. The converse side of the agent security problem, however, is largely neglected and needs to be addressed: how d o w e protect agents from potentially malicious servers?…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Sanctuary for Mobile Agents

Yee

1999

Secure Internet Programming

142

View full text Add to dashboard Cite

“…4 Like simple MAC-based PRACs, we use sig i (m) to sign the partial result computed on server s i , and erase sig i (m) prior to migrating to server s i+1 .…”

Section: Partial Results Authentication Codesmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

A Sanctuary for Mobile Agents

Yee

1999

Secure Internet Programming

142

View full text Add to dashboard Cite

“…(The variables %o1 and n are not modified in the loop body.) We now have that W(0) ∧ W(1) implies W (2).…”

Section: Examplementioning

confidence: 92%

Typestate Checking of Machine Code

Reps

Miller

2001

Programming Languages and Systems

View full text Add to dashboard Cite

We show how to determine statically whether it is safe for untrusted machine code to be loaded into a trusted host system.Our safety-checking technique operates directly on the untrusted machine-code program, requiring only that the initial inputs to the untrusted program be annotated with typestate information and linear constraints. This approach opens up the possibility of being able to certify code produced by any compiler from any source language, which gives the code producers more freedom in choosing the language in which they write their programs. It eliminates the dependence of safety on the correctness of the compiler because the final product of the compiler is checked. It leads to the decoupling of the safety policy from the language in which the untrusted code is written, and consequently, makes it possible for safety checking to be performed with respect to an extensible set of safety properties that are specified on the host side.We have implemented a prototype safety checker for SPARC machine-language programs, and applied the safety checker to several examples. The safety checker was able to either prove that an example met the necessary safety conditions, or identify the places where the safety conditions were violated. The checking times ranged from less than a second to 14 seconds on an UltraSPARC machine.

show abstract

“…SPIN [2], provides a safe way to extend the kernel, by writing extensions as spindles. Compared to our approach, SPIN has several limitations.…”

Section: Related Workmentioning

confidence: 99%

Experience with Safe Dynamic Reconfigurations in Component-Based Embedded Systems

Polakovic

Mazare

Stefani

et al. 2007

Component-Based Software Engineering

View full text Add to dashboard Cite

Supporting dynamic reconfiguration is required even in highly constrained embedded systems, to allow patches and updates to the embedded systems software, and to allow adaptations to changes in environmental and operating conditions without service interruption. Dynamic reconfiguration, however, is a complex and error prone process. In this paper we report our experience in implementing safe dynamic reconfigurations in embedded devices with limited resources. Our approach relies on a component-based framework for building minimal and reconfigurable operating systems and the use of a domain specific language (DSL) for reconfiguration.

show abstract

Extensibility safety and performance in the SPIN operating system

Abstract: This paper describes the motivation, architecture and performance of SPIN, an extensible operating system.

Cited by 208 publications

References 44 publications

A Sanctuary for Mobile Agents

A Sanctuary for Mobile Agents

Typestate Checking of Machine Code

Experience with Safe Dynamic Reconfigurations in Component-Based Embedded Systems

Contact Info

Product

Resources

About