Flexible memory protection for multicore processors

Memory;Multicore;Processor Architecture;Memory Systems;Memory Protection;Data Structures;Concurrency;Virtual Memory

Johnson, Matthew ; Patel ; Sanjay J.

关键词: Memory;    Multicore;    Processor Architecture;    Memory Systems;    Memory Protection;    Data Structures;    Concurrency;    Virtual Memory;   

Others  :  https://www.ideals.illinois.edu/bitstream/handle/2142/44416/Matthew_Johnson.pdf?sequence=1&isAllowed=y

美国|英语

来源: The Illinois Digital Environment for Access to Learning and Scholarship

【 摘 要 】

A system’s memory access control mechanisms profoundly impact the performance, reliability, security, and composability of the software it runs. Desirable features of an access control mechanism include: the ability to grant arbitrary permissions on any region of memory to any thread in the system; zero-copy sharing between threads with no restrictions on the set of sharers, region granularity, or sharing of pointer-based data structures; time and space overheads dependent only on the fundamental complexity of the access control being requested; and well-defined, hierarchical memory region ownership and permission semantics. The virtual-memory-based access control used in most modern systems, as well as recently proposed enhancements, fall short along one or more of these dimensions.We introduce Lumen, an access control scheme providing security, fault isolation, and efficient shared memory to any number of threads within a single address space. Lumen uses a new concurrent interval skip list (ISL) to scalably maintain and query a set of memory region descriptors containing permissions information. We describe a permissions and ownership system for memory regions that allows safe delegation of privileges between protectiondomains for sandboxing and software reusability purposes. We describe the LumenCache, which caches region permissions to avoid most ISL lookups. We discuss applications of Lumen in debugging, security, and reliability, and extensions to use Lumen for prefetching, profiling, and user-facing memory management features. Lumen offers scalable, flexible memory access controland the ability to trade off security, system reliability, and performance in a way not possible with existing solutions.