Cali: Compiler-Assisted Library Isolation

Bauer, Markus; Rossow, Christian

doi:10.1145/3433210.3453111

Cited by 12 publications

(15 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Upon domain transition, the gate (1) saves the current domain's registers set, (2) clears registers, and (3) loads function arguments. It then (4) saves the current stack pointer, (5) switches thread permissions, (6) switches the stack, and finally (7) executes the call instruction.…”

Section: Intel Mpk Isolation Backendmentioning

confidence: 99%

“…Compartmentalization Frameworks. Several compartmentalization frameworks have been proposed recently [7,31,33,57,65,74,75,80]. Contrary to FlexOS, none focuses on flexible isolation.…”

Section: Related Workmentioning

confidence: 99%

“…(2) perform static analysis at compile time to identify shared data automatically [6], or (3) perform a mix of static, dynamic, and manual analysis [30]. There is no silver bullet: manual code annotation can be non-trivial, but typically produces precise results that not only take into account what is accessed across modules, but also what should be shared from a security perspective.…”

Section: Compartmentalization Api and Transformationsmentioning

confidence: 99%

“…Stack allocations are slightly more complex. Existing works convert shared stack allocations to shared heap allocations [6,32,44]. This approach is costly from a performance perspective: an allocation+free on the fast path for a modern allocator typically takes 30-60 cycles, and up to thousands of cycles on the slow path [40].…”

Section: Intel Mpk Isolation Backendmentioning

confidence: 99%

“…Regarding application porting, most [32,65,75,80] rely on code annotations. A few studies provide various degrees of porting automation through data flow analysis [6,30,57], but are typically bound to numerous limitations due to the complexity of breaking down monolithic code bases. Nevertheless, some of their principles can be applied to increase the degree of automation of FlexOS' porting process ś something we scope out as future works.…”

Section: Related Workmentioning

confidence: 99%

See 4 more Smart Citations

FlexOS: towards flexible OS isolation

Lefeuvre

Bădoiu

Jung

et al. 2022

Proceedings of the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems

View full text Add to dashboard Cite

At design time, modern operating systems are locked in a specific safety and isolation strategy that mixes one or more hardware/software protection mechanisms (e.g. user/kernel separation); revisiting these choices after deployment requires a major refactoring effort. This rigid approach shows its limits given the wide variety of modern applications' safety/performance requirements, when new hardware isolation mechanisms are rolled out, or when existing ones break.We present FlexOS, a novel OS allowing users to easily specialize the safety and isolation strategy of an OS at compilation/deployment time instead of design time. This modular LibOS is composed of finegrained components that can be isolated via a range of hardware protection mechanisms with various data sharing strategies and additional software hardening. The OS ships with an exploration technique helping the user navigate the vast safety/performance design space it unlocks. We implement a prototype of the system and demonstrate, for several applications (Redis/Nginx/SQLite), FlexOS' vast configuration space as well as the efficiency of the exploration technique: we evaluate 80 FlexOS configurations for Redis and show how that space can be probabilistically subset to the 5 safest ones under a given performance budget. We also show that, under equivalent configurations, FlexOS performs similarly or better than existing solutions which use fixed safety configurations. CCS CONCEPTS• Software and its engineering → Operating systems; • Security and privacy → Operating systems security.

show abstract

Section: Intel Mpk Isolation Backendmentioning

confidence: 99%

“…Compartmentalization Frameworks. Several compartmentalization frameworks have been proposed recently [7,31,33,57,65,74,75,80]. Contrary to FlexOS, none focuses on flexible isolation.…”

Section: Related Workmentioning

confidence: 99%