Title
Implementing Multiple Protection Domains in Java
Abstract
Abstract Safe language technology can be used for protection within a single address space. This protection is enforced by the language’s type system, which ensures that references to objects cannot be forged. A safe language alone, however, lacks many features taken for granted in more traditional operating systems, such as rights revocation, thread protection, resource management, and support for domain termination. This paper describes the J-Kernel, a portable Java-based protection system that addresses these issues. J-Kernel protection domains can communicate through revocable capabilities, but are prevented from directly sharing unrevocable ,objects references. A number of micro-benchmarks are presented to characterize the costs of language-based protection, and an extensible web server based on the,J-Kernel demonstrates,the use of safe language,techniques in a large application. 1,Introduction Traditional operating systems use virtual memory ,to enforce protection between processes. A process cannot directly read and write other processes’ memory, and communication,between,processes requires traps to the kernel. In the ,past decade ,of operating ,systems research, a large number of fast inter-process communication,mechanisms ,have ,been ,proposed [3,8,25]. Nevertheless, the cost of passing through the kernel and of switching ,address spaces remains orders of magnitude larger than that of calling a procedure. With the increasing adoption of extensible applications
Year
Venue
Keywords
1998
USENIX Technical Conference
language-based protection,traditional operating system,unrevocable objects reference,safe language technology,portable java-based protection system,multiple protection domain,safe language,j-kernel protection domain,safe language technique,type system,thread protection,computer science,resource manager,operating system,language technology,technical report,virtual memory,inter process communication
Field
DocType
Citations 
Address space,Resource management,Protection system,World Wide Web,Computer security,Computer science,Real-time computing,Thread (computing),Revocation,Java,Language technology,Web server
Conference
81
PageRank 
References 
Authors
8.35
19
5
Name
Order
Citations
PageRank
Chris Hawblitzel157835.08
Chi-chao Chang241431.02
Grzegorz Czajkowski3190699.19
Deyu Hu410611.72
Thorsten von Eicken5841108.61