Transforming policies into mechanisms with infokernel

Arpaci-Dusseau, Andrea C.; Arpaci-Dusseau, Remzi H.; Burnett, Nathan C.; Denehy, Timothy E.; Engle, Thomas J.; Gunawi, Haryadi S.; Nugent, James A.; Popovici, Florentina I.

doi:10.1145/945445.945455

Cited by 22 publications

(11 citation statements)

References 51 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Some modern approaches to kernel design (e.g. the Exokernel [26] and the Infokernel [27]) expose more of the kernel's inner workings to give application developers more flexibility. However, such transparency in an information-flow control setting can leak information: imagine a high process issuing create tag, and a low process observing TAGMGR's transitions.…”

Section: Kernel Organizationmentioning

confidence: 99%

Noninterference for a Practical DIFC-Based Operating System

Krohn

Tromer

2009

2009 30th IEEE Symposium on Security and Privacy

View full text Add to dashboard Cite

Abstract. The Flume system is an implementation of decentralized information flow control (DIFC) at the operating system level. Prior work has shown Flume can be implemented as a practical extension to the Linux operating system, allowing real Web applications to achieve useful security guarantees. However, the question remains if the Flume system is actually secure. This paper compares Flume with other recent DIFC systems like Asbestos, arguing that the latter is inherently susceptible to certain wide-bandwidth covert channels, and proving their absence in Flume by means of a noninterference proof in the Communicating Sequential Processes formalism.

show abstract

Section: Kernel Organizationmentioning

confidence: 99%

Noninterference for a Practical DIFC-Based Operating System

Krohn

Tromer

2009

2009 30th IEEE Symposium on Security and Privacy

View full text Add to dashboard Cite

show abstract

“…FoxyTechnique borrows the concept of the graybox technique to guess the internal states of guest OSes. Infokernel 7) exposes the internal states of and algorithms employed by an OS to facilitate the development of user-level resource managers. OS profilers such as Debox 26) and Dtrace 27) can be used to get the OS internal states.…”

Section: Related Workmentioning

confidence: 99%

“…Microkernels 1)-3) , extensible OSes 4)-6) , and infokernels 7) have all been used in an attempt to provide a base on which resource management policies can easily be built. Unfortunately, to benefit from these approaches, users are forced to replace their favorite OSes with something less familiar.…”

Section: Introductionmentioning

confidence: 99%

Introducing New Resource Management Policies Using a Virtual Machine Monitor

Yamada

Kono

2008

IPSJ Online Transactions

View full text Add to dashboard Cite

Integrating new resource management policies into operating systems (OSes) is an ongoing process. Despite innovative policy proposals being developed, it is unrealistic to widely deploy a new one because it is a difficult, costly and often an impractical endeavor to modify an existing operating system to integrate a new policy. To address this problem, we explore the possibility of using virtual machine technology to incorporate a new policy into an existing OS without the need to make any changes to it. This paper describes FoxyTechnique, which virtualizes physical devices differently from real ones and tricks a guest OS into producing behavior similar to a desired policy. FoxyTechnique has three advantages. First, it allows us to implement a new policy without the need to make any changes to OS kernels. Second, Foxy-based policies are expected to be portable across different operating systems because they are isolated from guest OSes by stable virtual hardware interfaces. Finally, Foxy-based policies sometimes outperform guest OS policies because they can measure performance indicators more accurately than guest OSes. To demonstrate the usefulness of FoxyTechnique, we conducted two case studies, FoxyVegas and FoxyIdle, on the Xen virtual machine monitor. FoxyVegas and FoxyIdle tricked the original Linux and successfully mimicked TCP Vegas and Idletime scheduling, respectively.

show abstract

“…The determined progress rate is then translated to the appropriate weight and assigned to the application [3]. With the accurate weight assignment, the application can be scheduled using proportional schedulers.…”

Section: Introductionmentioning

confidence: 99%

A Mechanism for Dynamic Weight Assignment by Inferring Processing Requirement of an Application

L¹,

Srivatsa²

2007

Int. Jour. Info. Sci. Comp.

View full text Add to dashboard Cite

Systems need to run a larger and more diverse set of applications, from real time to interactive to batch, on uniprocessor & multiprocessor platforms. The tasks that are scheduled using proportional share concept, assigns a weight randomly. This paper suggests a mechanism which assigns a weight based on the resource requirement of an application. The problem of inferring application resource requirements is difficult because the relationship between application performance and resource requirement is complex and workload dependent. We present a measurement-based approach to resource-inference employing online measurements of workload characteristics and system resource usage to estimate application resource requirements. These requirements are translated to appropriate weights and to modify these weights dynamically by employing weight readjustment algorithm.

show abstract

Transforming policies into mechanisms with infokernel

Cited by 22 publications

References 51 publications

Noninterference for a Practical DIFC-Based Operating System

Noninterference for a Practical DIFC-Based Operating System

Introducing New Resource Management Policies Using a Virtual Machine Monitor

A Mechanism for Dynamic Weight Assignment by Inferring Processing Requirement of an Application

Contact Info

Product

Resources

About