欢迎访问中国科学院大学学报,今天是
论文

一种可容忍代码错误的专用计算机系统模型

  • 王晶 ,
  • 夏鲁宁 ,
  • 荆继武 ,
  • 顾青
展开
  • 1. 中国科学技术大学电子工程与信息科学系,合肥 23002;
    2. 中国科学院研究生院信息安全国家重点实验室, 北京100049;
    3. 国家863计划信息安全基础设施研究中心,上海 201203

收稿日期: 2009-03-09

  修回日期: 2009-04-28

  网络出版日期: 2009-11-15

基金资助

国家863计划(2006AA01Z454)和电子信息产业发展基金资助 

A fault-tolerant dedicated computer system model

  • WANG Jing ,
  • XIA Lu-Ning ,
  • JING Ji-Wu ,
  • GU Qing
Expand
  • 1. Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei 230027, China;
    2. State Key Lab of Information Security, Graduate University, Chinese Academy of Sciences, Beijing 100049, China;
    3. Research Center of National 863 Program Information Security Infrastructure, Shanghai 201203, China

Received date: 2009-03-09

  Revised date: 2009-04-28

  Online published: 2009-11-15

Supported by

国家863计划(2006AA01Z454)和电子信息产业发展基金资助 

摘要

提出一种新的计算机体系结构模型——超内核系统模型,使专用系统可以容忍代码错误,提高可生存性.并且实现了一个超内核系统开发平台,完成了网络防火墙原型系统.该网络防火墙原型系统在同样的硬件平台上比优化的Linux防火墙包转发延时少大约20%.

本文引用格式

王晶 , 夏鲁宁 , 荆继武 , 顾青 . 一种可容忍代码错误的专用计算机系统模型[J]. 中国科学院大学学报, 2009 , 26(6) : 826 -834 . DOI: 10.7523/j.issn.2095-6134.2009.6.014

Abstract

Security and survivability are important requirements of dedicated computer system. The legacy embedded operating systems with microkernel suffer from lacking of these desired features. In this paper, we propose ultra-kernel model to make dedicated system tolerant code bugs and improve the security of system. We have implemented a prototype firewall system based on our ultra-kernel design in a developing environment. Measurements show that, latency at 10Mbps of ultra-kernel system is about 20% better than at Linux system on the same hardware platform.

参考文献


[1] Dan hildebrand: An architectural overview of QNX //Proceedings of the Workshop on Micro-kernels and Other Kernel Architectures.1992.

[2] Peter G Neumann, Richard J. Feiertag: PSOS revisited //Proceedings of the 19th Annual Computer Security Applications Conference. 2003.

[3] Jean Arlat, Jean-Charles Fabre, Manuel Rodriguez.FrZdZric salles: dependability of COTS microkernel-based systems
[J]. IEEE Transactions on Computers, 2002,51(Issue 2).

[4] Hulse D,Dearle A.Trends in operating systems design: towards a customizable persistent micro-kernel . Report Pastel RT1R4. University of Stirling,1998.

[5] Debian security advisory . . http://www.debian.org/security/2002/dsa-131.

[6] Alexander Gostev. Mobile malware evolution: an overview. Part 2
[M].2006.

[7] Coverity prevent, Linux kernel maintainer mulls "bug fix-only cycle" .http://www.linuxdevices.com/news/NS8779577691.html, .

[8] Tim Leschke. Achieving speed and flexibility by separating management from protection: embracing the Exokernel operating system
[J]. Operating Systems Review,2004,38(4): 5-19.

[9] Engler D R,Kaashoek M F, J OToole Jr.Exokernel: an operating system architecture for application-specific resource management //Proceedings of the Fifteenth ACM Symposium on Operating Systems Principles.1995: 251-266.

[10] Swift M,Bershad B, Levy H.Improving the reliability of commodity operating systems
[J]. ACM Trans Computer Systems, 2005,23:77-110.

[11] Paul N Leroux, Kerry Johnson. Using resource partitioning to build secure survivable embedded systems
[M]. QNX software 2006 white paper section 10, Retrieved from http://www.rtcmagazine.com/home/article.php?id=100749&pg=1 .

[12] Galen C Hunt,James R Larus.Singularity: rethinking the software stack . Microsoft Research Redmond, 2005.

[13] Mark Aiken, Manuel Fhndrich, Chris Hawblitzel, et al.Larus: deconstructing process isolation //ACM SIGPLAN Workshop on Memory Systems Performance and Correctness (MSPC 2006). ASPLOS, 2006.

文章导航

/