A mechanism for achieving a bound on execution performance of process group to limit CPU abuse

Authors:
Toshihiro Yamauchi;Takayuki Hara;Hideo Taniguchi
Affiliations:
Graduate School of Natural Science and Technology, Okayama University, Kita-ku, Japan 700-8530;Graduate School of Natural Science and Technology, Okayama University, Kita-ku, Japan 700-8530;Graduate School of Natural Science and Technology, Okayama University, Kita-ku, Japan 700-8530
Venue:
The Journal of Supercomputing
Year:
2013

Citing 10
Cited 0

Role-Based Access Control Models

Computer
Resource containers: a new facility for resource management in server systems

OSDI '99 Proceedings of the third symposium on Operating systems design and implementation
Defending against denial of service attacks in Scout

OSDI '99 Proceedings of the third symposium on Operating systems design and implementation
Protecting Resources with Resource Control Lists

RTAS '01 Proceedings of the Seventh Real-Time Technology and Applications Symposium (RTAS '01)
A Fast Automaton-Based Method for Detecting Anomalous Program Behaviors

SP '01 Proceedings of the 2001 IEEE Symposium on Security and Privacy
Intrusion Detection via Static Analysis

SP '01 Proceedings of the 2001 IEEE Symposium on Security and Privacy
A taxonomy of DDoS attack and DDoS defense mechanisms

ACM SIGCOMM Computer Communication Review
Mechanism of regulating execution performance for process group by execution resource on tender operating system

Systems and Computers in Japan
Intrusion detection using sequences of system calls

Journal of Computer Security
Enhancing a dependable multiserver operating system with temporal protection via resource reservations

Real-Time Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

The secure OS has been the focus of several studies. However, CPU resources, which are important resources for executing a program, are not the object of access control in secure OS. For preventing the abuse of CPU resources, we had earlier proposed a new type of execution resource that controls the maximum CPU usage (Tabata et al. in Int. J. Smart Home 1(2):109---128, 2007). The previously proposed mechanism can control only one process at a time. Because most services involve multiple processes, the mechanism should control all the processes in each service. In this paper, we propose an improved mechanism that helps to achieve a bound on the execution performance of a process group in order to limit unnecessary processor usage. We report the results of an evaluation of our proposed mechanism.