CNS Core: Medium: Operating System Modularity for Safety and Performance on Existing Commodity Hardware

CNS 核心：中：操作系统模块化以确保现有商品硬件的安全性和性能

• 批准号: 1955498
• 负责人: Michael Scott
• 金额: $ 113.55万
• 依托单位: University of Rochester
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1955498&HistoricalAwards=false
• 关键词: CNS; Core; Medium; Operating; System

The operating systems that control most modern computers are built around a monolithic kernel -- a single program comprising hundreds of thousands or millions of lines of code, typically written in the C programming language. A bug or security breach anywhere in that code jeopardizes the integrity of the entire system. This project is developing mechanisms that can be used to modularize the kernel incrementally, allowing pieces to be safely and efficiently isolated from the rest in order to enhance security, reduce the impact of bugs, and allow developers to install updates more easily, safely, and frequently.Specifically, the project makes two key technical contributions. First, it uses newly available hardware features (memory protection keys) on commodity processors to implement protected libraries. These allow a user application to execute operating system functions safely without actually entering the kernel, and to share state safely with library instances in other applications. Second, the project uses hardware, language, and compiler technology to implement protection boundaries between modules of the kernel itself, allowing those modules to be incrementally rewritten in a type-safe language.Research performed as part of the project promises to significantly increase the safety and modularity of both commodity and specialty operating systems -- making them more dependable and easier to modify, upgrade, and customize -- while preserving or enhancing performance for a wide range of applications, in government, industry, science, the arts, and entertainment. Research and training activities will target a diverse group of undergraduate and graduate students. Technology transfer will be facilitated through contacts with multiple commercial partners.Experimental results, raw data, and source code will be freely and publicly available, the latter via open-source license. Technical reports and data sets will be hosted in the University of Rochester's archival repository (http://urresearch.rochester.edu/). Code will be hosted at GitHub or similar sites. Pointers to all resources will be maintained at http://www.cs.rochester.edu/research/os/modularity/This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

控制大多数现代计算机的操作系统是围绕整体内核构建的 - 一个单个程序，其中包括数十万或数百万行的代码，通常用C编程语言编写。 该代码中任何地方的错误或安全漏洞会危害整个系统的完整性。 该项目正在开发可用于逐步模块化内核的机制，从而使零件可以安全有效地与其余部分隔离，以增强安全性，减少错误的影响，并允许开发人员更轻松，安全，经常安装更新。具体而言，该项目提供了两个关键的技术贡献。 首先，它在商品处理器上使用新的硬件功能（内存保护密钥）来实现受保护的库。 这些允许用户应用程序可以安全地执行操作系统功能，而无需实际输入内核，并与其他应用程序中的库实例安全共享状态。 Second, the project uses hardware, language, and compiler technology to implement protection boundaries between modules of the kernel itself, allowing those modules to be incrementally rewritten in a type-safe language.Research performed as part of the project promises to significantly increase the safety and modularity of both commodity and specialty operating systems -- making them more dependable and easier to modify, upgrade, and customize -- while preserving or enhancing performance for a wide range of在政府，工业，科学，艺术和娱乐中的应用。 研究和培训活动将针对各种各样的本科生和研究生。 技术转移将通过与多个商业合作伙伴的联系来促进。实验结果，原始数据和源代码将自由，公开可用，后者通过开源许可证。 技术报告和数据集将在罗切斯特大学的档案存储库（http://urresearch.rochester.edu/）中托管。 代码将托管在GitHub或类似站点。 所有资源的指示都将在http://www.cs.rochester.edu/research/os/modularity/this Award上保留，反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛的影响审查标准通过评估来进行评估的。

项目成果

Transactional Composition of Nonblocking Data Structures

• DOI: 10.1145/3558481.3591079
• 发表时间: 2023-01
• 期刊: Proceedings of the 35th ACM Symposium on Parallelism in Algorithms and Architectures
• 作者: Wentao Cai;Haosen Wen;M. Scott

How Should We Think about Persistent Data Structures?

我们应该如何看待持久数据结构？

• DOI: 10.1145/3519270.3538455
• 发表时间: 2022
• 期刊: 41st ACM Symposium on Principles of Distributed Computing (PODC
• 作者: Scott, Michael L.

A Fast, General System for Buffered Persistent Data Structures

• DOI: 10.1145/3472456.3472458
• 发表时间: 2021-08
• 期刊: Proceedings of the 50th International Conference on Parallel Processing
• 作者: Haosen Wen;Wentao Cai;Mingzhe Du;Louis Jenkins

Fast Nonblocking Persistence for Concurrent Data Structures

• DOI: 10.4230/lipics.disc.2021.14
• 发表时间: 2021-05
• 作者: Wentao Cai;Haosen Wen;Vladimir Maksimovski;Mingzhe Du;Rafaello Sanna;Shreif Abdallah;M. Scott

Randezvous: Making Randomization Effective on MCUs

• DOI: 10.1145/3564625.3567970
• 发表时间: 2022-12
• 期刊: Proceedings of the 38th Annual Computer Security Applications Conference
• 作者: Zhuojia Shen;Komail Dharsee;J. Criswell