FlexOS: towards flexible OS isolation
Hugo Lefeuvre, Vlad-Andrei Bădoiu, Alexander Jung, Stefan Lucian Teodorescu, Sebastian Rauch, Felipe Huici, Costin Raiciu, Pierre Olivier
Abstract
At design time, modern operating systems are locked in a specific safety and isolation strategy that mixes one or more hardware/software protection mechanisms (e.g. user/kernel separation); revisiting these choices after deployment requires a major refactoring effort. This rigid approach shows its limits given the wide variety of modern applications' safety/performance requirements, when new hardware isolation mechanisms are rolled out, or when existing ones break.
Topics & Concepts
Isolation (microbiology)Software deploymentComputer scienceCode refactoringVariety (cybernetics)Kernel (algebra)Embedded systemSoftwareSeparation of concernsSoftware engineeringOperating systemDistributed computingMathematicsMicrobiologyArtificial intelligenceBiologyCombinatoricsSecurity and Verification in ComputingAdvanced Malware Detection TechniquesPhysical Unclonable Functions (PUFs) and Hardware Security