Improving dependability by revisiting operating system design

Authors:
Francis M. David;Jeffrey C. Carlyle;Ellick M. Chan;Philip A. Reames;Roy H. Campbell
Affiliations:
Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL;Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL;Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL;Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL;Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL
Venue:
HotDep'07 Proceedings of the 3rd workshop on on Hot Topics in System Dependability
Year:
2007

Citing 20
Cited 3

Choices (class hierarchical open interface for custom embedded systems)

ACM SIGOPS Operating Systems Review
Recovery management in QuickSilver

ACM Transactions on Computer Systems (TOCS)
Sharing and protection in a single-address-space operating system

ACM Transactions on Computer Systems (TOCS) - Special issue on computer architecture
On micro-kernel construction

SOSP '95 Proceedings of the fifteenth ACM symposium on Operating systems principles
The Rio file cache: surviving operating system crashes

Proceedings of the seventh international conference on Architectural support for programming languages and operating systems
Interface and execution models in the Fluke kernel

OSDI '99 Proceedings of the third symposium on Operating systems design and implementation
An empirical study of operating systems errors

SOSP '01 Proceedings of the eighteenth ACM symposium on Operating systems principles
Mondrian memory protection

Proceedings of the 10th international conference on Architectural support for programming languages and operating systems
Chorus

Proceedings of the Workshop on Micro-kernels and Other Kernel Architectures
Eros: a capability system

Eros: a capability system
Basic Concepts and Taxonomy of Dependable and Secure Computing

IEEE Transactions on Dependable and Secure Computing
Can We Make Operating Systems Reliable and Secure?

Computer
Recovering device drivers

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Unmodified device driver reuse and improved system dependability via virtual machines

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Microreboot — A technique for cheap recovery

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Establishing the genuinity of remote computer systems

SSYM'03 Proceedings of the 12th conference on USENIX Security Symposium - Volume 12
SafeDrive: safe and recoverable extensions using language-based techniques

OSDI '06 Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation - Volume 7
Murphy's law and computer security

SSYM'96 Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography - Volume 6
A caching model of operating system kernel functionality

OSDI '94 Proceedings of the 1st USENIX conference on Operating Systems Design and Implementation
Exploring recovery from operating system lockups

ATC'07 2007 USENIX Annual Technical Conference on Proceedings of the USENIX Annual Technical Conference

Towards organizational agent-oriented operating systems

Proceedings of the 2009 ACM symposium on Applied Computing
CuriOS: improving reliability through operating system structure

OSDI'08 Proceedings of the 8th USENIX conference on Operating systems design and implementation
Modeling an operating system based on agents

HAIS'12 Proceedings of the 7th international conference on Hybrid Artificial Intelligent Systems - Volume Part I

Quantified Score

Hi-index	0.00

Visualization

Abstract

Existing operating system (OS) designs provide inadequate isolation of user applications from errors that occur in OS services. If an error causes the failure of an OS service, all dependent applications are affected. The OS design described in this paper ameliorates this problem by reorganizing OS state in an effort to make OS services transparently restartable. This is achieved by partitioning application-related OS state into isolated per-application memory regions. Access to these memory regions is provided to OS services on a "need-to-know" basis when processing application requests. Applications are not allowed access to these memory regions for security. This design helps improve the dependability of the system.