B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. E. Fiuczynski, D. Becker, C. Chambers, and S. Eggers. Extensibility safety and performance in the spin operating system. In SOSP '95: Proceedings of the fifteenth ACM symposium on Operating systems principles, pages 267--283, New York, NY, USA, 1995. ACM Press.  Home/Search   Document Details and Download   Summary   Related Articles   Check

....but signi cantly more precise tools need to be developed. Di erent types of applications may require di erent policies in order to achieve optimal performance and power eciency. Supporting all policies within a single monolithic kernel may not be possible. The use of micro kernels [34] like Spin [5], and the Aegis Exokernel [16] instead of monolithic kernels provides the opportunity to ne tune policies according to the requirements of each application. For example, two library operating systems, one optimized for performance and the other for reduced power consumption could be provided ....

Bershad, B. N., Savage, S., Pardyak, P., Sirer, E. G., Fiuczynski, M. E., Becker, D., Chambers, C., and Eggers, S. Extensibility safety and performance in the SPIN operating system. In Proc. of the 15th Symposium on Operating Systems Principles (Dec. 1995), pp. 267-283.

....for making an operat ing system self monitoring. The details are presented in the context of the VINO operating system, on which a prototype self adapting system is being built. However, the principles and approaches are applicable to any number of systems that support extensibility (e.g. SPIN [2]) VINO is an extensible operating system designed to provide resource intensive applications greater control over resource management. VINO supports the downloading of kernel extensions (grafts) which are written in C and protected using software fault isolation. To facilitate graceful ....

Bershad, B., Savage, S., Pardyak, P., Sirer, E.G., Fiuczynski, M., Becker, D., Eggers, S., Chambers, C., "Extensibility, Safety, and Performance in the SPIN Operating System," Proceedings of the 15th Symposium on Operating System Principles, Copper Mountain, CO, Dec. 1995, 267-284.

....NetBSD [44] At present, paths have been used in Scout largely for MPEG video decoding and display and not for protocol processing or other I O operations. In contrast, we have successfully used RIO for a number of real time avionics applications [19] with deterministic QoS requirements. SPIN [79, 80] provides an extensible infrastructure and a core set of extensible services that allow applications to safely change the OS interface and implementation. Application specific protocols are written in a typesafe language, Plexus, and configured dynamically into the SPIN OS kernel. Because these ....

B. Bershad, "Extensibility, Safety, and Performance in the Spin Operating System," in Proceedings of the 15 ACM SOSP, pp. 267--284, 1995.

....provide quality of service and other real time guarantees. Scout s notion of a path aligns control flow and data transfer and enables optimizations that benefit both overhead components at the same time, while also introducing new optimization opportunities. Extensible operating systems like Spin [12] or Exokernel [36] allow applications to implement specialized operating system functionality in an extensible kernel, which results in better performance for many applications for which the general purpose interface of monolithic kernels is inappropriate. Consequently, the interface provided by ....

B.N. Bershad et al., "Extensibility, Safety and Performance in the SPIN Operating System," Proc. 15th ACM Symp. Operating System Principles (SOSP-15), ACM Press, New York, N.Y., 1995, pp. 267-284.

....section, we describe the performance requirements that an RTOS must satisfy to be feasible for embedded applications. Section 3 presents a brief overview of EMERALDS. Section 4 shows how EMERALDS, as a real time embedded OS, is different from more generalized microkernels like Mach [14] and SPIN [15]. Sections 5 8 give details of our scheduling, synchronization, message passing, and system call schemes, respectively. Performance of these schemes is evaluated in Section 9 and we conclude with Section 10. 2 Embedded Application Requirements Our target embedded applications use single chip ....

....Different Microkernel optimization has been an active area of research in recent years, but little effort has been made in addressing the needs of real time systems, let al..one small memory embedded ones. In microkernels designed for general purpose computing such as Mach [14] L3 [25] and SPIN [15], researchers have focused on optimizing kernel services such as thread management [26, 27] IPC [28] and virtual memory management [29] Virtual memory is not a concern in our target applications. Thread management and IPC are important but not for the same reasons as for general purpose ....

B. Bershad, S. Savage, P. Pardyak, E. Sirer, M. Fiuczynski, D. Becker, C. Chambers, and S. Eggers, "Extensibility, safety and performance in the SPIN operating system," in Proc. Symp. Operating Systems Principles, pp. 267--284, 1995.

....media (audio and video) and batch traffic (FTP, NFS, etc. in the face of lost and misordered data [Clark90] Three projects which are based around this notion are the University of Cambridge s Nemesis project [Leslie96] MIT s Exokernel [Engler95] and the University of Washington s SPIN project [Bershad95]. Nemesis and Exokernel both adhere to the vertical operating system model whereby the OS provides only the minimal functionality necessary to share devices. However, they differ in their perceptions of what this minimal level of functionality is whilst Nemesis implements what are put forward ....

Brian Bershad et al.; "Extensibility, Safety and Performance in the SPIN Operating System", Proceedings of the 15th ACM Symposium on Operating Systems Principles (December 1995), pp.267--284.

....However, these techniques are focused to specific kernel interfaces, and its use is typically restricted to privileged users. There is a considerable amount of research on building extensible systems, a kind of systems that would allow generic, safe, and application specific extensions (e.g. SPIN[5], VINO[16] although this research is biased towards safety concerns of in kernel extensions. In contrast to the above techniques, we are taking a generic approach. Our goal is to enable extensions to be attached at any available interface, by providing convenient binding mechanisms for these ....

B. Bershad et al. "Extensibility, Safety and Performance in the SPIN Operating System", In Proc. of the 15th SOSP, 1995

....to a specific need. This is achieved through the definition of a Meta Object Protocol (MOP) i.e. a management interface, as a fundamental characteristic of every extensible service. Unless otherwise stated, the following projects employ an ad hoc approach to service design. 3.3.3. 1 SPIN SPIN [Bershad,95c] from the University of Washington had its original white paper produced in 1994 (reworked in [Bershad,95a] thus making it one of the most mature examples of this type of system. In SPIN, application defined system services are decomposed into three sub units; SPIN Dynamically Linked ....

Bershad, B.N., Savage, S., Przemyslaw, P., Sirer, E.G., Fiuczynski, M.E., Becker, D., Chambers, C., Eggers, S., "Extensibility, Safety and Performance in the SPIN Operating System". Proceedings of the 15th ACM Symposium on Operating Systems Principles, pp 267-284, Copper Mountain CO, U.S.A., December 1995.

....Conventional approaches The conventional approaches are classified into three categories, roughly speaking. One is the approach of the monolithic kernel such as UNIX [17] Another is the approach of the microkernel such as Mach [1] The other is the approach of the extensible kernel such as SPIN [3, 4]. In this section, we describe the feature of these conventional approaches, and then their disadvantages. 5 2.2.1 Monolithic kernel In the monolithic kernel, all facilities that the operation system should possess are in the kernel. Of course, all file systems are also embedded into the ....

Bershad, B., S. Savage, P. Pardyak, E. G. Sirer, D. Becker, M. Fiuczynski, C. Chambers, and S. Eggers, "Extensibility, Safety and Performance in the SPIN Operating System," in Proceedings of the 15th ACM Symposium on Operating System Principles (SOSP-15), pp. 267--284, Copper Mountain, CO., Dec. 1995.

....packet filters have been proposed. The BSD packet filter [24] redesigns the original stack based packet filter and is up to 20 times faster. The dynamic packet filter (DPF) 10] uses dynamic code generation and is 10 to 50 faster than the other fastest packet filters. The SPIN operating system [4] allows the users to download the extension modules written in Modula 3 [27] into the kernel. Modula 3 is a type safe language and does not cause memory access violation at runtime. Although Modula 3 is a general language and enables programmers to write most functions of operating systems, the ....

Bershad, B. N., S. Savage, P. Pardyak, E. G. Sirer, M. E. Fiuczynski, D. Becker, S. Chambers, and C. Eggers, "Extensibility, Safety and Performance in the SPIN Operating System," in Proceedings of the 15th ACM Symposium on Operating Systems Principles, pp. 267--284, Dec. 1995.

....best effort applications and off line initialization. Work subsequent to Govindan has made use of trusted kernel modules rather than opening up a hole into the kernel address space for all applications. The efficacy of this approach has been investigated in detail in the SPIN operating system [Be95] and this is widely accepted as a safe compromise for services that need improved efficiency and resource control, yet maintaining overall system safety for applications. Based on this related research history on in kernel pipeline frameworks, the RT EPA employs the trusted module mechanism and ....

....user code and one for operating systems code. However, the RT EPA facility allows trusted module code to be executed in the kernel protection domain. We have focused on the functionality of architecture, relying on the existence of other technology such as that used in the SPIN operating system [Be95] to provide compile time safety checking. The negotiation control provided by RT EPA is envisioned to support isochronal event driven applications which can employ and control these pipelines for guaranteed or reliable execution performance. 5.2 RT EPA Traditional Hard Real Time Features The ....

Bershad, B., Fiuczynski, M., Savage, S., Becker, D., et al., "Extensibility, Safety and Performance in the SPIN Operating System", Association for Computing Machinery, SIGOPS '95, Colorado, December 1995.

....IPC facility to preserve an API with copy semantics and offer bi directional copy avoidance. Extensible kernel systems can, in principle, make it safe for users to install, modify, or customize kernel level servers. The usual price of safety, however, is run time overheads: For example, SPIN [1] requires extensions to be written in a type safe language, and VINO [18] encapsulates extensions for software fault isolation. These safety techniques have been reported to make code run from 10 to 150 more slowly [19] Additionally, kernel level debuggers of extensible kernel systems have been ....

B. Bershad, S. Savage, P. Pardyak, E. Sirer, M. Fiuczynski, D. Becker, C. Chambers and S. Eggers, "Extensibility, Safety and Performance in the SPIN Operating System", Proc. 15th SOSP, ACM, Dec. 1995, pp. 267-284.

....new binding factories from existing components. Prominent among the components are a range of filter objects for common media formats. 8. RELATED WORK There is currently considerable ongoing research in the area of extensible and adaptable operating systems. Key examples include Spin [1], Exokernel Aegis [8] and Spring [19] The aim of this work is to introduce flexibility in operating system structures to allow, for example, the addition of new services. In general, however, this research has not considered the requirements of mobile multimedia applications. In addition, we ....

Bershad, B.N., S. Savage, P.Przemyslaw, E.G. Sirer, M.E. Fiuczynski, D. Becker, C. Chambers, S. Eggers, S., "Extensibility, Safety and Performance in the SPIN Operating System". Proc. 15 th ACM SOSP, pp267-284, Copper Mountain CO, USA, December 1995.

....introduce the recursive virtual machines that allow the code to execute in a separate trusted domain. SPIN system addresses security by enabling the secure execution of the code within the kernel. In particular it addresses the kernel extensibility by safely executing extensions within the kernel. [11]. Operating systems were instrumented to provide information on various physical and logical resources, such as in COCANET [63] and in the work by Huang et al. 35] This was done for the purpose of load distribution and performance evaluation. In the Stealth scheduler [45] VM was prioritized ....

B. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. Fiuczinski, D. Becker, C. Chambers, and S. Eggers, "Extensibility, Safety and Performance in the SPIN Operating System," Proceedings of the 15th Symposium on Operating Systems Principles, pp 267--284.

....used objects into a small number of pages [Seidl97] Some database servers allow clients to load query or data type specific code into the server to improve performance. The Thor database server uses a typesafe language, Theta, for writing these extensions [Liskov95] The SPIN operating system [Bershad95] is written in Modula 3 and uses it as its extension language as well. A disadvantage of requiring that extensions be written in a safe language is that the extensible system either needs to be written entirely in the language used for writing extensions, or the system needs to deal with the ....

....or user activity. We may not wish to give the extension all events as they arrive (for privacy or performance reasons) and so we need to filter the event stream, passing on only the events that meet the appropriate criteria. This is the event model used by the SPIN extensible operating system [Bershad95]; more on SPIN is found below. Filtering for privacy ensures that an extension that has permission to, say, listen on one TCP socket is not able to view all incoming TCP packets. Filtering for performance would be done if an extension wants to see only a subset of some type of event, and we do ....

[Article contains additional citation context not shown here]

Bershad, B., Savage, S., Pardyak, P., Sirer, E. G., Fiuczynski, M., Becker, D., Eggers, S., Chambers, C., "Extensibility, Safety, and Performance in the SPIN Operating System," Proceedings of the 15th Symposium on Operating Systems Principles, Copper Mountain, CO (December 1995).

No context found.

B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. E. Fiuczynski, D. Becker, C. Chambers, and S. Eggers. Extensibility safety and performance in the spin operating system. In SOSP '95: Proceedings of the fifteenth ACM symposium on Operating systems principles, pages 267--283, New York, NY, USA, 1995. ACM Press.

No context found.

Bershad, B.N., S. Savage, P.Przemyslaw, E.G. Sirer, M.E. Fiuczynski, D. Becker, C. Chambers, S. Eggers, S., "Extensibility, Safety and Performance in the SPIN Operating System". Proc. 15 th ACM SOSP, pp267-284, Copper Mountain CO, USA, December 1995.

No context found.

B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. Fiuczynski, and B. E. Chambers, "Extensibil- ity, safety, and performance in the SPIN operating system," in Proceedings of the 15th ACM Symposium on Operating Systems Principles, pp. 267-- 284, 1995.

No context found.

B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. Fiuczynski, and B. E. Chambers, "Extensibility, safety, and performance in the SPIN operating system," in Proceedings of the 15th ACM Symposium on Operating Systems Principles, pp. 267-- 284, 1995.

No context found.

Brian Bershad, et al., "Extensibility, Safety and Performance in the SPIN Operating System," in Proceedings of the 15th ACM Symposium on Operating System Principles (SOSP-15). Copper Mountain, CO.

No context found.

B.N. Bershad, S. Savage, P. Pardyak, E.G. Sirer, M.E. Fiuczynski, D. Becker, C. Chamers, and S. Eggers, "Extensibility, Safety, and Performance in the SPIN Operating System," Operating Systems Review, Vol. 29, No. 5, December 1995, pp. 267-84. Available at http://www.cs.washington.edu/research/projects/spin/www/papers/SOSP95/sosp95.ps

No context found.

B. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. Pitsczynski, D. lietket, S. Eggers, and C. Chambers, "Extensibility, safety and performance in the spin operating system," in Proc. 15th Symp. Operating Sytems Principles, Dec. 1995, pp. 267--284.

No context found.

B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. E. Fiuczynski, D. Becker, C. Chambers, and S. Eggers. Extensibility safety and performance in the SPIN operating system. In Proceedings of the 15 ACM Symposium on Operating Systems Principles, pages 267--283. ACM Press, 1995.

No context found.

B. Bershad, etc. "Extensibility, safety, and performance in the SPIN operating system", Proceedings of the 15th ACM Symposium on Operating System Principles, pages 267-284, Copper Mountain, CO, 1995.

No context found.

B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. Fiuczynski, D. Becker, S. Eggers, and C. Chambers, "Extensibility, safety, and performance in the Spin operating system," Proc. of the 15th ACM Symposium on Operating System Principles, pp. 267-284, 1995.

First 50 documents  Next 50

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC