Today's complex software systems are neither secure nor reliable. The rudimentary software protection primitives provided by current hardware forces systems to run many distrusting software components (e.g., procedures, libraries, plugins, modules) in the same protection domain, or otherwise suffer degraded performance from address space switches. We present CODOMs (COde-centric memory DOMains), a novel architecture that can provide finer-grained isolation between software components with effect...
Today's complex software systems are neither secure nor reliable. The rudimentary software protection primitives provided by current hardware forces systems to run many distrusting software components (e.g., procedures, libraries, plugins, modules) in the same protection domain, or otherwise suffer degraded performance from address space switches. We present CODOMs (COde-centric memory DOMains), a novel architecture that can provide finer-grained isolation between software components with effectively zero run-time overhead, all at a fraction of the complexity of other approaches. An implementation of CODOMs in a cycle-accurate full-system x86 simulator demonstrates that with the right hardware support, finer-grained protection and run-time performance can peacefully coexist.
Citació
Vilanova, L. [et al.]. CODOMs: Protecting software with code-centric memory domains. A: Annual International Symposium on Computer Architecture. "The 41st Annual International Symposium on Computer Architecture: ISCA 2014, June 14-18 2014, Minneapolis, MN, USA: conference proceedings". Minneapolis, MN: Institute of Electrical and Electronics Engineers (IEEE), 2014, p. 469-480.
06853202.pdf
(1981963 bytes)
Compartir
