Mmp hotos2003-slides

Emmett Witchel Krste Asanović MIT Lab for Computer Science Hardware Works, Software Doesn’t: Enforcing Modularity with Mondriaan Memory Protection

HW Works, SW Doesn’t — Negative ,[object Object],Hardware Software

[object Object],HW Works, SW Doesn’t — Positive Software Hardware

[object Object],HW Works, SW Doesn’t — Positive Hardware Software

Software is Growing, Becoming Modular ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Code Data

Modular Software is Failing ,[object Object],[object Object],[object Object],[object Object]

Safe Languages (More SW) Not Answer ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Both Hardware and Software Needed ,[object Object],[object Object],[object Object],[object Object],[object Object]

Current Hardware Broken ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Mondriaan Memory Protection ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

MMP In Action Kernel ide.o Kernel loader establishes initial permission regions Kernel calls mprotect(buf0, RO, 2); 1 2 Memory Addresses 0xC00… 0xFFF… No perm Read-write Read-only Execute-read Multiple protection domains mprotect(buf1, RW, 2); mprotect(printk, EX, 2); ide.o calls mprotect(req_q, RW, 1); mprotect(mod_init, EX, 1); nfs.o ipip.o 3 4

How Much Work to Use MMP? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Trusted Computing Base of MMP ,[object Object],[object Object],[object Object],[object Object]

Memory Supervisor ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],MMP Supervisor Core Kernel Memory Allocators Kernel Modules 0 1 2,..,N N+1,… Kernel Protection Domains (PD-IDs)

Memory Supervisor API ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Managing Data ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],1 2

Call and Return Gates ,[object Object],[object Object],[object Object],call mi ret mi: PD K PD M Addr Space PD M R mov add jne xor push

Architectural Support for Gates ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],PD M R

Are Gate Semantics Useful? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Stack Headache ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Finding Modularity in the OS ,[object Object],[object Object],[object Object],[object Object]

Using Symbol Information ,[object Object],[object Object],[object Object],[object Object],[object Object]

Measuring OS Modularity ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Size of Kernel Modules ,[object Object]

Number of Imported Call Gates ,[object Object]

Size of Imported Data (KB) ,[object Object],[object Object]

Measuring Cross-Domain Calls ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Additional Applications ,[object Object],[object Object],[object Object],[object Object],[object Object]

Conclusion ,[object Object],[object Object],[object Object],[object Object]

Mmp hotos2003-slides

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Destacado

Destacado (6)

Similar a Mmp hotos2003-slides

Similar a Mmp hotos2003-slides (20)

Más de MUHAMMAD UMAIR

Más de MUHAMMAD UMAIR (20)

Mmp hotos2003-slides