Labels and event processes in the asbestos operating system (2005)
Cached
Download Links
- [www.cs.umass.edu]
- [www.scs.stanford.edu]
- DBLP
Other Repositories/Bibliography
| Venue: | In Proc. 20th ACM Symp. on Operating System Principles (SOSP |
| Citations: | 86 - 11 self |
BibTeX
@INPROCEEDINGS{Efstathopoulos05labelsand,
author = {Petros Efstathopoulos and Maxwell Krohn and Steve Vandebogart and Cliff Frey and David Ziegler and Eddie Kohler and David Mazières and Frans Kaashoek and Robert Morris},
title = {Labels and event processes in the asbestos operating system},
booktitle = {In Proc. 20th ACM Symp. on Operating System Principles (SOSP},
year = {2005},
pages = {17--30}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Asbestos, a new prototype operating system, provides novel labeling and isolation mechanisms that help contain the effects of exploitable software flaws. Applications can express a wide range of policies with Asbestos’s kernel-enforced label mechanism, including controls on inter-process communication and systemwide information flow. A new event process abstraction provides lightweight, isolated contexts within a single process, allowing the same process to act on behalf of multiple users while preventing it from leaking any single user’s data to any other user. A Web server that uses Asbestos labels to isolate user data requires about 1.5 memory pages per user, demonstrating that additional security can come at an acceptable cost.
