CODOMs

Authors:
Open Access
Publisher website
Google Scholar
Abstract
Today's complex software systems are neither secure nor reliable. The rudimentary software protection primitives provided by current hardware forces systems to run many distrusting software components (e.g., procedures, libraries, plugins, modules) in the same protection domain, or otherwise suffer degraded performance from address space switches. We present CODOMs (COde-centric memory DOMains), a novel architecture that can provide finer-grained isolation between software components with effectively zero run-time overhead, all at a fraction of the complexity of other approaches. An implementation of CODOMs in a cycle-accurate full-system x86 simulator demonstrates that with the right hardware support, finer-grained protection and run-time performance can peacefully coexist.
Funding Information
  • Spanish Government through Programa Severo Ochoa (SEV-2011-0067)
  • Ministerio de Economía y Competitividad (TIN2007-60625, TIN2012-34557)
  • RoMoL (GA-321253)
  • Seventh Framework Programme (FP7-249013)
  • Israel Science Foundation (769/12 equipment grant 1719/12)
  • Ministry of Science and Technology, Israel

This publication has 16 references indexed in Scilit: