CNS Core:Small:Revisiting Process Isolation with Compound Processes

CNS 核心：小：重新审视复合进程的进程隔离

• 批准号: 2210616
• 负责人: Jakob Eriksson
• 金额: $ 60万
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-08-01 至 2025-07-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2210616&HistoricalAwards=false
• 关键词: CNS; Core; Small; Revisiting; Process

Modern computer software commonly consists of groups of programs executing together. This may be as simple as a web server and a database, or as complex as thousands of virtual machines, each running dozens of programs, all working together toward the same goal. Such groups of related programs are often started by a single user, who may even think of them as a single unit or "stack". Today, this common model of a stack of software, working toward a single goal on behalf of a single user is not reflected in the way the software actually executes. Instead, each individual layer of the stack is painstakingly guarded against incursion by other layers, through a mechanism called process isolation. What is more, many modern stacks consist of groups of virtual machines (VMs), where an additional layer of safeguards is imposed between VMs, often resulting in high overheads and low efficiency. This project introduces a new concept, a "compound process" which better reflects the realities of modern software. A compound process may host several "guest" programs in a single trust domain, eliminating expensive and often redundant safeguards between components of a single software stack, to yield substantial performance benefits. The project will proceed along three main thrusts: (a) a basic compound process loader and support libraries, allowing the user to run arbitrary combinations of programs (guests) as threads in a single compound process, (b) runtime supports for individual guests sharing a single thread, allowing further efficiency improvements, and (c) automatically running all of the processes of an entire a virtual machine as guests within a single compound process. By improving the efficiency of execution of popularly used software stacks, this project aims to reduce the equipment needs and increase the energy efficiency of the software that runs the modern world. Beyond direct research impact, experience from the project will both enrich the computer systems curriculum and provide research opportunities to both undergraduates students at UIC, a Minority (MSI), Asian American and Pacific Islander (AANAPISI) and Hispanic (HSI) Serving Institution.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

现代计算机软件通常由共同执行的程序组组成。这可能与Web服务器和数据库一样简单，或者像数千台虚拟机一样复杂，每个机器都运行了数十个程序，它们都朝着相同的目标努力。这样的相关程序组通常是由单个用户开始的，他们甚至可能将它们视为一个单元或“堆栈”。如今，这种软件堆栈的通用模型，代表单个用户实现单个目标的模型并没有反映出软件实际执行的方式。取而代之的是，堆栈的每个单独层都通过称为工艺隔离的机制艰苦地保护了其他层的入侵。更重要的是，许多现代堆栈由虚拟机（VM）组组成，其中VM之间施加了另外一层的保障措施，通常会导致高架开销和低效率。该项目介绍了一个新概念，即“复合过程”，可以更好地反映现代软件的现实。复合过程可以在单个信任域中托管几个“来宾”程序，从而消除了单个软件堆栈组件之间昂贵且通常是多余的保障措施，从而产生了可观的性能优势。该项目将沿三个主要的力量进行：（a）基本的复合过程加载程序和支持库，使用户可以在单个复合过程中作为线程进行任意组合（访客），（b）运行时支持单个线程共享单个线程的单个线程，允许进一步的效率改进，以及（c）自动运行整个宾客的整个过程中的整个过程中的整个过程。通过提高执行普遍使用的软件堆栈的效率，该项目旨在减少设备需求并提高运行现代世界的软件的能源效率。除了直接研究的影响之外，项目的经验还将丰富计算机系统课程，并为双方提供研究机会，以使UIC的学生，少数群体（MSI），亚裔美国人和太平洋岛民（AANAPISI）和西班牙裔（HSI）（HSI）（HSI）服务机构。这一奖项反映了NSF的法定任务和审查的范围，这是通过评估的范围来进行的。