A Practical Look at Micro-Kernels and Virtual Machine Monitors

Armand, François; Gien, Michel

doi:10.1109/ccnc.2009.4784874

Cited by 37 publications

(33 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Next, we define a list of requirements that the IS architecture must satisfy. Many of these requirements are common to other virtualization architectures [18]:…”

Section: Assumptions and Requirementsmentioning

confidence: 99%

Integrated Scheduling for a Reliable Dual-OS Monitor

Sangorrin

Honda

Takada

2012

IPSJ Online Transactions

View full text Add to dashboard Cite

Virtualization solutions aimed at the consolidation of a real-time operating system (RTOS) and a generalpurpose operating system (GPOS) onto the same platform are gaining momentum as high-end embedded systems increase their computation power. Among them, the most extended approach for scheduling both operating systems consists of executing the GPOS only when the RTOS becomes idle. Although this approach can guarantee the real-time performance of the RTOS tasks and interrupt handlers, the responsiveness of GPOS time-sensitive activities is negatively affected when the RTOS contains compute-bound activities executing with low priority. In this paper, we modify a reliable hardware-assisted dual-OS virtualization technique to implement an integrated scheduling architecture where the execution priority level of the GPOS and RTOS activities can be mixed with high granularity. The evaluation results show that the proposed approach is suitable for enhancing the responsiveness of the GPOS time-sensitive activities without compromising the reliability and real-time performance of the RTOS.

show abstract

“…Next, we define a list of requirements that the IS architecture must satisfy. Many of these requirements are common to other virtualization architectures [18]:…”

Section: Assumptions and Requirementsmentioning

confidence: 99%

Integrated Scheduling for a Reliable Dual-OS Monitor

Sangorrin

Honda

Takada

2012

IPSJ Online Transactions

View full text Add to dashboard Cite

show abstract

“…In [1], Armand and Gien present several requirements for a virtualization layer to be suitable for embedded systems:…”

Section: Introductionmentioning

confidence: 99%

Temporal and spatial isolation in a virtualization layer for multi-core processor based information appliances

Nakajima¹,

Kinebuchi²,

Shimada³

et al. 2011

16th Asia and South Pacific Design Automation Conference (ASP-DAC 2011)

View full text Add to dashboard Cite

A virtualization layer makes it possible to compose multiple functionalities on a multi-core processor with minimum modifications of OS kernels and applications. A multi-core processor is a good candidate to compose various software independently developed for dedicated processors into one multi-core processor to reduce both the hardware and development cost. In this paper, we present SPUMONE, which is a virtualization layer suitable for developing multi-core processor based-information appliances. I IntroductionMulti-core processors are being increasingly adopted for embedded systems because they improve performance, power consumption and lower development cost. Composing multiple operating systems on a multi-core processor enhances the reusability of software when developing rich functional information appliances. Multiple OS environments enable the product to use two versions of an operating system at the same time. In order to build multiple OS environments, a virtualization layer specialized for embedded systems is necessary 1 , since most of processors for embedded systems support only two protection levels, and there is no hardware support for virtualization. In traditional approaches, an OS kernel runs at the user level to isolate the respective OS kernels to increase reliability, but this approach requires heavy modifications to the guest OSes if there is no proper hardware virtualization support that rarely exists in embedded systems. Therefore existing virtualization solutions are not preferred by the embedded system industry.In [1], Armand and Gien present several requirements for a virtualization layer to be suitable for embedded systems:i.It should run an existing operating system and its supported applications in a virtualized environment, such that modifications required to the operating system are minimized (ideally none), and performance overhead is as low as possible. ii. It should be straightforward to move from one version of an operating system to another one; this is especially important to keep up with frequent Linux evolutions. iii. It should reuse native device drivers from their existing execution environments with no modification. iv. It should support existing legacy often real-time 1 Our virtualization layer can used for various embedded systems, but our current main focus is information appliances.operating systems and their applications while guaranteeing their deterministic real-time behavior.Our project is developing SPUMONE, which is a virtualization layer for multi-core processor-based embedded systems. SPUMONE assumes to use an SMP(Symmetric Multiprocessing)-based multi-core processor, and each core has a core-local memory. Thus, it is easy to share code and data from all cores, but each core can keep some code and data secretly in a core-local memory. SPUMONE uses the characteristics to implement the spatial isolation. SPUMONE satisfies the above requirements, and currently focuses on achieving the following four goals.i.Mapping of virtual cores on physical cores dynamically ...

show abstract

“…Previous attempts to actual use virtualization on embedded systems have mostly been focused on porting of widely used virtualization layers such as Xen [6], [7] or on performance analysis aspects [8].…”

Section: Related Workmentioning

confidence: 99%

Securing DMA through virtualization

Schwarz¹,

Gehrmann²

2012

2012 Complexity in Engineering (COMPENG). Proceedings

View full text Add to dashboard Cite

Abstract-We present a solution for preventing guests in a virtualized system from using direct memory access (DMA) to access memory regions of other guests. The principles we suggest, and that we also have implemented, are purely based on software and standard hardware. No additional virtualization hardware such as an I/O Memory Management Unit (IOMMU) is needed. Instead, the protection of the DMA controller is realized with means of a common ARM MMU only. Overhead occurs only in pre-and postprocessing of DMA transfers and is limited to a few microseconds. The solution was designed with focus on security and the abstract concept of the approach was formally verified.

show abstract

A Practical Look at Micro-Kernels and Virtual Machine Monitors

Cited by 37 publications

References 4 publications

Integrated Scheduling for a Reliable Dual-OS Monitor

Integrated Scheduling for a Reliable Dual-OS Monitor

Temporal and spatial isolation in a virtualization layer for multi-core processor based information appliances

Securing DMA through virtualization

Contact Info

Product

Resources

About