首页> 外文期刊>Operating systems review >The Operating System Kernel as a Secure Programmable Machine
【24h】

The Operating System Kernel as a Secure Programmable Machine

机译:操作系统内核作为安全的可编程计算机

获取原文
获取原文并翻译 | 示例
           

摘要

To provide modularity and performance, operating system kernels should have only minimal embedded functionality. Today's operating systems are large, inefficient and, most importantly, inflexible. In our view, most operating system performance and flexibility problems can be eliminated simply by pushing the operating system interface lower. Our goal is to put abstractions traditionally implemented by the kernel out into user-space, where user-level libraries and servers abstract the exposed hardware resources. To achieve this goal, we have defined a new operating system structure, exokernel, that safely exports the resources defined by the underlying hardware. To enable applications to benefit from full hardware functionality and performance, they are allowed to download additions to the supervisor-mode execution environment. To guarantee that these extensions are safe, techniques such as code inspection, inlined cross-domain procedure calls, and secure languages are used. To test and evaluate exokernels and their customization techniques a prototype exokernel, Aegis, is being developed.
机译:为了提供模块化和性能,操作系统内核应仅具有最少的嵌入式功能。当今的操作系统庞大,效率低下,最重要的是缺乏灵活性。我们认为,只需降低操作系统接口,就可以消除大多数操作系统的性能和灵活性问题。我们的目标是将传统上由内核实现的抽象放入用户空间,在此用户级库和服务器对公开的硬件资源进行抽象。为了实现此目标,我们定义了一个新的操作系统结构exokernel,可以安全地导出由底层硬件定义的资源。为了使应用程序能够从全部硬件功能和性能中受益,允许它们将附加内容下载到主管模式执行环境。为了确保这些扩展是安全的,使用了诸如代码检查,内联跨域过程调用和安全语言之类的技术。为了测试和评估exokernels及其定制技术,正在开发原型Exokernel(宙斯盾)。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号