Tags: Augmenting Microkernel Messages with Lightweight Metadata

Tag;Information flow;Mandatory Security;Interaction verification;Electrical and Computer Engineering

Saif Ur Rehman, Ahmad

University of Waterloo

关键词: Tag;    Information flow;    Mandatory Security;    Interaction verification;    Electrical and Computer Engineering;   

Others  :  https://uwspace.uwaterloo.ca/bitstream/10012/6791/1/Saif_Ur_Rehman_Ahmad.pdf

瑞士|英语

来源: UWSPACE Waterloo Institutional Repository

【 摘 要 】

In this work, we propose Tags, an e cient mechanism that augments microkernel interprocessmessages with lightweight metadata to enable the development of new, systemwidefunctionality without requiring the modi cation of application source code. Therefore, thetechnology is well suited for systems with a large legacy code base and for third-partyapplications such as phone and tablet applications.As examples, we detailed use cases in areas consisting of mandatory security and runtimeveri cation of process interactions. In the area of mandatory security, we use taggingto assess the feasibility of implementing a mandatory integrity propagation model in themicrokernel. The process interaction veri cation use case shows the utility of tagging totrack and verify interaction history among system components.To demonstrate that tagging is technically feasible and practical, we implemented itin a commercial microkernel and executed multiple sets of standard benchmarks on twodi erent computing architectures. The results clearly demonstrate that tagging has onlynegligible overhead and strong potential for many applications.