Fine grained memory protection for efficient protected services
Abstract: Mondrian memory protection (MMP) is a fine-grained protection scheme that allows multiple protection domains to flexibly share memory and export protected services. In contrast to earlier pagebased systems, MMP allows arbitrary permissions control at the granularity of individual words. We use a compressed permissions table to reduce space overheads and employ two levels of permissions caching to reduce run-time overheads. The protection tables in our implementation add less than 9% overhead to ... (Update)
Cited by: More
RIFLE: An Architectural Framework for User-Centric - Information-Flow Security Neil
(Correct)
Minos: Control Data Attack Prevention Orthogonal to Memory Model - Crandall, Chong (2004)
(Correct)
Legba: Fast Hardware Support for Fine-Grained Protection - Wiggins, Winwood, Tuch.. (2003)
(Correct)
Active bibliography (related documents): More All
0.5: The Design and Implementation of the L4 Microkernel on the.. - Wiggins (1999)
(Correct)
0.3: Improving the Reliability of Commodity Operating Systems - Swift, Bershad, Levy (2003)
(Correct)
0.3: Compressed, Memory Resident, Databases - Cockshott, Gilchrist, McGregor.. (1996)
(Correct)
Similar documents based on text: More All
0.3: Design and Implementation of Message Passing Library on.. - Yamagiwa, Wada
(Correct)
0.3: Hardware Works, Software Doesn't: - Enforcing Modularity With (2003)
(Correct)
0.3: Copyright Protection of Multimedia Data: "The Multimedia.. - Rump (1996)
(Correct)
Related documents from co-citation: More All
11: Architectural Support for Single Address Space Operating Systems
- Chase, Eggers - 1992
9: Architectural support for copy and tamper resistant software
- Lie, Thekkath et al. - 2000
9: aegis: Architecture for tamper-evident and tamper-resistant processing
- Suh, Clarke et al. - 2003
BibTeX entry: (Update)
Emmett Witchel, Josh Cates, and Krste Asanovic. Mondrian Memory Protection. In Architectural Support for Programming Languages and Operating Systems (ASPLOS-X), October 1--3 2002. http://citeseer.ist.psu.edu/witchel02mondrian.html More
@inproceedings{ witchel:asplos10,
author = {E. Witchel and J. Cates and Krste Asanovi\'c},
title = {Mondrian Memory Protection},
booktitle = {Proceedings of ASPLOS-X},
month = "Oct",
year = "2002"},
url = {citeseer.ist.psu.edu/witchel02mondrian.html} }
Citations (may not include all citations):
566
Proof-carrying code
- Necula - 1997
339
Efficient software-based fault isolation
- Wahbe, Lucco et al. - 1993
222
MIPS RISC Architecture (context) - Kane, Heinrich ACM
173
A real-time garbage collector based on the lifetimes of obje..
- Lieberman, Hewitt - 1983 ACM DBLP
131
Fine-grain access control for distributed shared memory
- Schoinas, Falsafi et al. - 1994 ACM DBLP
114
Capability-Based Computer Systems (context) - Levy - 1984
103
software-only approach for supporting finegrain shared memor.. (context) - Scales, Gharachorloo et al. - 1996
100
Programming semantics for multiprogrammed computations
- Dennis, Horn - 1966
95
Virtual memory primitives for user programs
- Appel, Li - 1991 ACM DBLP
79
Intel Architecture Software Developer's Manual (context) - Corporation, Basic - 1997
72
A first step towards automated detection of buffer overrun v..
- Wagner, Foster et al. - 2000
71
net: A user-level network interface for parallel and distrib.. (context) - von Eicken, Basu et al. - 1995
55
Architectural support for single address space operating sys..
- Koldinger, Chase et al. - 1992 DBLP
46
IO-Lite: a unified I/O buffering and caching system
- Pai, Druschel et al. - 2000 DBLP
40
The Mungi single-address-space operating system
- Heiser, Elphinstone et al. - 1998 ACM DBLP
39
EROS: a fast capability system
- Shapiro, Smith et al. - 1999 DBLP
39
Protection and the control of information sharing in Multics (context) - Saltzer - 1974 ACM DBLP
31
Olden: Parallelizing Programs with Dynamic Data Structures o.. (context) - Carlisle - 1996
29
Zero-copy TCP in Solaris
- Chu - 1996 DBLP
23
Hardware support for fast capability-based addressing
- Carter, Keckler et al. - 1994
21
Anonymous RPC: Low-latency protection in a 64-bit address sp..
- Yarvin, Bukowski et al. - 1993
17
Exploiting two-case delivery for fast protected messaging
- Mackenzie, Kubiatowicz et al. - 1998 ACM DBLP
15
Efficient data breakpoints (context) - Wahbe - 1992
11
Whole-program optimization for time and space efficient thre..
- Grunwald, Neves - 1996 ACM DBLP
9
An Operating System Structure for Wide-Address Architectures (context) - Chase - 1995 ACM
8
kernel: A capability-based operating system for Java (context) - von Eicken, Chang et al. - 1999
6
Benchmark health considered harmful
- Zilles - 2001 ACM
4
The FLEX compiler infrastructure (context) - Rinard - 1999
3
IBM System/38 support for capability-based addressing (context) - Houdek, Soltis et al. - 1981
2
ARMT Technical Reference Manual (context) - ARM, Manual et al. - 2000
1
Adobe PDF Plugin (context) - Incorporated - 2002
1
commediaproduct pqcD PurifyPlu unix (context) - Corporation, www et al. - 2002
1
Information Processing System (context) - Corporation, Definition - 1961
1
mod perl (context) - Foundation - 2002
The graph only includes citing articles where the year of publication is known.
Documents on the same site (http://www.cag.lcs.mit.edu/scale/publications.html): More
The Span Cache: Software Controlled Tag Checks and Cache Line.. - Witchel, Asanovic (2001)
(Correct)
Way Memoization to Reduce Fetch Energy in Instruction Caches - Ma, Zhang, Asanovic (2001)
(Correct)
Microprocessor Energy Characterization and Optimization through .. - Krashinsky (2001)
(Correct)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC