CNS Core: Medium: Operating System Modularity for Safety and Performance on Existing Commodity Hardware

CNS 核心：中：操作系统模块化以确保现有商品硬件的安全性和性能

• 批准号: 1955498
• 负责人: Michael Scott
• 金额: $ 113.55万
• 依托单位: University of Rochester
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1955498&HistoricalAwards=false
• 关键词: CNS; Core; Medium; Operating; System

The operating systems that control most modern computers are built around a monolithic kernel -- a single program comprising hundreds of thousands or millions of lines of code, typically written in the C programming language. A bug or security breach anywhere in that code jeopardizes the integrity of the entire system. This project is developing mechanisms that can be used to modularize the kernel incrementally, allowing pieces to be safely and efficiently isolated from the rest in order to enhance security, reduce the impact of bugs, and allow developers to install updates more easily, safely, and frequently.Specifically, the project makes two key technical contributions. First, it uses newly available hardware features (memory protection keys) on commodity processors to implement protected libraries. These allow a user application to execute operating system functions safely without actually entering the kernel, and to share state safely with library instances in other applications. Second, the project uses hardware, language, and compiler technology to implement protection boundaries between modules of the kernel itself, allowing those modules to be incrementally rewritten in a type-safe language.Research performed as part of the project promises to significantly increase the safety and modularity of both commodity and specialty operating systems -- making them more dependable and easier to modify, upgrade, and customize -- while preserving or enhancing performance for a wide range of applications, in government, industry, science, the arts, and entertainment. Research and training activities will target a diverse group of undergraduate and graduate students. Technology transfer will be facilitated through contacts with multiple commercial partners.Experimental results, raw data, and source code will be freely and publicly available, the latter via open-source license. Technical reports and data sets will be hosted in the University of Rochester's archival repository (http://urresearch.rochester.edu/). Code will be hosted at GitHub or similar sites. Pointers to all resources will be maintained at http://www.cs.rochester.edu/research/os/modularity/This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

控制大多数现代计算机的操作系统都是围绕整体内核构建的——一个由数十万或数百万行代码组成的程序，通常用 C 编程语言编写。 代码中任何地方的错误或安全漏洞都会危及整个系统的完整性。 该项目正在开发可用于增量模块化内核的机制，允许各个部分安全有效地与其他部分隔离，以增强安全性，减少错误的影响，并允许开发人员更轻松、安全和频繁地安装更新。具体来说，该项目做出了两项关键技术贡献。 首先，它使用商用处理器上新可用的硬件功能（内存保护密钥）来实现受保护的库。 这些允许用户应用程序在不实际进入内核的情况下安全地执行操作系统功能，并与其他应用程序中的库实例安全地共享状态。 其次，该项目使用硬件、语言和编译器技术来实现内核本身模块之间的保护边界，从而允许使用类型安全语言逐步重写这些模块。作为该项目的一部分进行的研究有望显着提高商品和专用操作系统的安全性和模块化性，使它们更加可靠且更易于修改、升级和定制，同时保留或增强各种操作系统的性能。 政府、工业、科学、艺术和娱乐领域的应用。 研究和培训活动将针对不同的本科生和研究生群体。 将通过与多个商业合作伙伴的联系来促进技术转让。实验结果、原始数据和源代码将免费公开提供，后者通过开源许可获得。 技术报告和数据集将托管在罗切斯特大学的档案库中 (http://urresearch.rochester.edu/)。 代码将托管在 GitHub 或类似网站上。 所有资源的指针将保存在 http://www.cs.rochester.edu/research/os/modularity/ 该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Transactional Composition of Nonblocking Data Structures

• DOI: 10.1145/3558481.3591079
• 发表时间: 2023-01
• 期刊: Proceedings of the 35th ACM Symposium on Parallelism in Algorithms and Architectures
• 作者: Wentao Cai;Haosen Wen;M. Scott

How Should We Think about Persistent Data Structures?

我们应该如何看待持久数据结构？

• DOI: 10.1145/3519270.3538455
• 发表时间: 2022
• 期刊: 41st ACM Symposium on Principles of Distributed Computing (PODC
• 作者: Scott, Michael L.

Fast Nonblocking Persistence for Concurrent Data Structures

• DOI: 10.4230/lipics.disc.2021.14
• 发表时间: 2021-05
• 作者: Wentao Cai;Haosen Wen;Vladimir Maksimovski;Mingzhe Du;Rafaello Sanna;Shreif Abdallah;M. Scott

A Fast, General System for Buffered Persistent Data Structures

• DOI: 10.1145/3472456.3472458
• 发表时间: 2021-08
• 期刊: Proceedings of the 50th International Conference on Parallel Processing
• 作者: Haosen Wen;Wentao Cai;Mingzhe Du;Louis Jenkins

Fast Nonblocking Persistence for Concurrent Data Structures (extended abstract)

并发数据结构的快速非阻塞持久化（扩展摘要）

• 发表时间: 2022
• 期刊: 13th Annual Non-Volatile Memories Workshop
• 作者: Cai, Wentao;Wen, Haosen;Maksimovski, Vladimir;Du, Mingzhe;Sanna, Rafaello;Abdallah, Shreif;Scott, Michael L.
• 通讯作者: Scott, Michael L.