Guardrail: a high fidelity approach to protecting hardware devices from buggy drivers
Guardrail: a high fidelity approach to protecting hardware devices from buggy drivers
复制标题
Guardrail：一种保护硬件设备免受错误驱动程序影响的高保真方法
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
T. Mowry
中科院分区：
文献类型：
--
作者：
Olatunji Ruwase;M. Kozuch;Phillip B. Gibbons;T. Mowry
设备驱动程序是现代商用操作系统的致命弱点，造成了太多的系统故障。以前关于驱动程序可靠性的工作主要集中在通过在驱动程序接口插入一个不变检查层来保护内核免受不安全的驱动程序副作用的影响，否则将驱动程序视为一个黑盒。在本文中，我们提出并评估了Guardrail，这是一个更强大的运行时驱动分析框架，它在任意内核模式驱动执行时执行解耦指令粒度动态正确性检查，从而使系统能够检测和减轻更具有挑战性的正确性错误（例如，数据竞争，未初始化的内存访问），这些错误无法被当今的故障隔离技术检测到。我们对Guardrail的评估表明，它可以在需要修复的本地Linux驱动程序中发现严重的数据竞争、内存错误和DMA错误，包括以前未知的错误。此外，通过硬件日志记录支持，Guardrail可以用于在线保护持久设备状态免受驱动程序错误的影响，而大多数标准I/O工作负载的端到端性能开销最多为10%。
Device drivers are an Achilles' heel of modern commodity operating systems, accounting for far too many system failures. Previous work on driver reliability has focused on protecting the kernel from unsafe driver side-effects by interposing an invariant-checking layer at the driver interface, but otherwise treating the driver as a black box. In this paper, we propose and evaluate Guardrail, which is a more powerful framework for run-time driver analysis that performs decoupled instruction-grain dynamic correctness checking on arbitrary kernel-mode drivers as they execute, thereby enabling the system to detect and mitigate more challenging correctness bugs (e.g., data races, uninitialized memory accesses) that cannot be detected by today's fault isolation techniques. Our evaluation of Guardrail shows that it can find serious data races, memory faults, and DMA faults in native Linux drivers that required fixes, including previously unknown bugs. Also, with hardware logging support, Guardrail can be used for online protection of persistent device state from driver bugs with at most 10% overhead on the end-to-end performance of most standard I/O workloads.
DOI：
10.1109/ase.2011.6100049
发表时间：
2011
期刊：
--
影响因子：
--
作者：
Botincan M
通讯作者：
Botincan M