DMCA
Dune: Safe User-level Access to Privileged CPU Features
Cached
Download Links
| Citations: | 40 - 4 self |
BibTeX
@MISC{Belay_dune:safe,
author = {Adam Belay and Andrea Bittau and Ali Mashtizadeh and David Terei and David Mazières and Christos Kozyrakis},
title = {Dune: Safe User-level Access to Privileged CPU Features},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Dune is a system that provides applications with direct but safe access to hardware features such as ring protection, page tables, and tagged TLBs, while preserving the existing OS interfaces for processes. Dune uses the virtualization hardware in modern processors to provide a process, rather than a machine abstraction. It consists of a small kernel module that initializes virtualization hardware and mediates interactions with the kernel, and a user-level library that helps applications manage privileged hardware features. We present the implementation of Dune for 64bit x86 Linux. We use Dune to implement three userlevel applications that can benefit from access to privileged hardware: a sandbox for untrusted code, a privilege separation facility, and a garbage collector. The use of Dune greatly simplifies the implementation of these applications and provides significant performance advantages. 1
Keyphrases
safe user-level access privileged cpu feature virtualization hardware mediates interaction significant performance advantage page table application manage small kernel module machine abstraction modern processor userlevel application x86 linux hardware feature user-level library o interface untrusted code safe access garbage collector privilege separation facility
