Defending against denial of service attacks in Scout
OSDI '99 Proceedings of the third symposium on Operating systems design and implementation
| Hi-index | 0.00 |
We refine and extend previous work towards a new approach to implementing operating systems. This approach, called SPACE, uses processors, address spaces, and a generalized exception mechanism as the basic abstractions rather than processes, virtual memory, and interprocess communication. The result is that the facilities provided by the hardware architecture are exposed, and can be directly used by applications to achieve higher performance and more diverse functionality than is possible with conventional operating system abstractions. In SPACE the conventional abstractions can coexist with new application-specific abstractions, due to the fundamental extensibility of the SPACE primitives. Applications can implement their own versions of system services to satisfy critical functional and performance requirements while still benefiting from standard system services. In this paper we present a generalization of our earlier framework which allows the SPACE primitives themselves to be extended, and illustrate SPACE by describing an implementation on the SPARC architecture. We then give examples of implementing mechanisms in SPACE.