HYDRA

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

HYDRA: the kernel of a multiprocessor operating system

Full text

Pdf (1.01 MB)

Source

Communications of the ACM archive
Volume 17 , Issue 6 (June 1974) table of contents

Pages: 337 - 345

Year of Publication: 1974

ISSN:0001-0782

Authors

W. Wulf	Carnegie-Mellon Univ., Pittsburgh, PA
E. Cohen	Carnegie-Mellon Univ., Pittsburgh, PA
W. Corwin	Carnegie-Mellon Univ., Pittsburgh, PA
A. Jones	Carnegie-Mellon Univ., Pittsburgh, PA
R. Levin	Carnegie-Mellon Univ., Pittsburgh, PA
C. Pierson	Carnegie-Mellon Univ., Pittsburgh, PA
F. Pollack	Carnegie-Mellon Univ., Pittsburgh, PA

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): 98, Downloads (12 Months): 421, Citation Count: 121

Additional Information:

abstract references cited by index terms collaborative colleagues

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/355616.364017 What is a DOI?

ABSTRACT

This paper describes the design philosophy of HYDRA—the kernel of an operating system for C.mmp, the Carnegie-Mellon Multi-Mini-Processor. This philosophy is realized through the introduction of a generalized notion of “resource,” both physical and virtual, called an “object.” Mechanisms are presented for dealing with objects, including the creation of new types, specification of new operations applicable to a given type, sharing, and protection of any reference to a given object against improper application of any of the operations defined with respect to that type of object. The mechanisms provide a coherent basis for extension of the system in two directions: the introduction of new facilities, and the creation of highly secure systems.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	Per Brinch Hansen, The nucleus of a multiprogramming system, Communications of the ACM, v.13 n.4, p.238-241, April 1970 [doi>10.1145/362258.362278]
	2	Ole Johan Dahl, Structured Programming, Academic Press, Inc., Orlando, FL, 1972
	3	Edsger W. Dijkstra, The structure of the “THE”-multiprogramming system, Communications of the ACM, v.11 n.5, p.341-346, May 1968 [doi>10.1145/363095.363143]
	4	Dijkstra, E.W., Cooperating sequential processes. In Programming Languages, F. Genuys, (Ed.), Academic Press, New York, 1968, pp. 43-112.
	5	Jack B. Dennis , Earl C. Van Horn, Programming semantics for multiprogrammed computations, Communications of the ACM, v.9 n.3, p.143-155, March 1966 [doi>10.1145/365230.365252]
	6	Anita Katherine Jones, Protection in programmed systems., 1973
	7	Lampson, B.W. Dynamic Protection Structures, Proc. AFIPS 1969 FJCC, Vol. 35, AFIPS Press, Montvale, N.J. pp. 27-38.
	8	Parnas, D.L. On the criteria to be used in decomposing systems into modules. Comput. Sci. Dep. Rep., Carnegie-Mellon U., 1971.
	9	Wulf, W.A., and Bell, C. G. C.mmp-a multi-mini-processor. Proc. AFIPS 1972, FJCC. Vol. 41, AFIPS Press, Montvale, N.J. pp. 765-777.

CITED BY 121

	W. S. Ford , V. C. Hamacher, Hardware support for inter-process communication and processor sharing, ACM SIGARCH Computer Architecture News, v.4 n.4, p.113-118, January 1976
	Anita K. Jones , Richard J. Lipton, The enforcement of security policies for computation, ACM SIGOPS Operating Systems Review, v.9 n.5, p.197-206, November 1975
	D. K. Bradley , B. A.A. Nazief , D. C. Grunwald , D. A. Reed, Picasso: an experiment in hypercube operating system design, Proceedings of the third conference on Hypercube concurrent computers and applications: Architecture, software, computer systems, and general issues, p.364-373, January 19-20, 1988, Pasadena, California, United States
	Thomas Riechmann , Franz J. Hauck, Meta objects for access control: extending capability-based security, Proceedings of the 1997 workshop on New security paradigms, p.17-22, September 23-26, 1997, Langdale, Cumbria, United Kingdom
	L. Boi , P. Michel, An approach to a fault-tolerant system architecture, Proceedings of the 5th annual symposium on Computer architecture, p.123-130, April 03-05, 1978
	Klaus-Peter Löhr, Beyond concurrent Pascal, ACM SIGOPS Operating Systems Review, v.11 n.5, p.173-180, November 1977
	W. Wulf , R. Levin , C. Pierson, Overview of the Hydra Operating System development, ACM SIGOPS Operating Systems Review, v.9 n.5, p.122-131, November 1975
	Brian N. Bershad , Edward D. Lazowska , Henry M. Levy , David B. Wagner, An open enviornment for building parallel programming systems, ACM SIGPLAN Notices, v.23 n.9, p.1-9, Sept. 1988
	H. Massalin , C. Pu, Threads and input/output in the synthesis kernal, ACM SIGOPS Operating Systems Review, v.23 n.5, p.191-201, Dec. 3–6, 1989
	B. Kumar , Timothy A. Gonsalves, Modelling and analysis of distributed software systems, Proceedings of the seventh ACM symposium on Operating systems principles, p.2-8, December 10-12, 1979, Pacific Grove, California, United States
	Guy Mazare, A few examples of how to use a symmetrical multi-micro-processor, ACM SIGARCH Computer Architecture News, v.5 n.7, p.57-62, March 1977
	Gerald Belpaire , Nai-Ting Hsu, Hardware architecture for recursive Virtual Machines, Proceedings of the 1975 annual conference, p.14-18, January 1975
	Thomas Riechmann , Franz J. Hauck, Meta objects for access control: a formal model for role-based principals, Proceedings of the 1998 workshop on New security paradigms, p.30-38, September 22-26, 1998, Charlottesville, Virginia, United States
	J. Liedtke, On micro-kernel construction, ACM SIGOPS Operating Systems Review, v.29 n.5, p.237-250, Dec. 3, 1995
	P. David Stotts , Richard Furuta, Petri-net-based hypertext: document structure with browsing semantics, ACM Transactions on Information Systems (TOIS), v.7 n.1, p.3-29, Jan. 1989
	Henry C. Baker, Jr. , Carl Hewitt, The incremental garbage collection of processes, ACM SIGPLAN Notices, v.12 n.8, p.55-59, August 1977
	Panayiotis Chrysanthis , Krithi Ramamritham , David Stemple , Stephen Vinter, The Gutenberg operating system kernel, Proceedings of 1986 ACM Fall joint computer conference, p.1159-1168, November 1986, Dallas, Texas, United States
	David Dobkin , Anita K. Jones , Richard J. Lipton, Secure databases: protection against user influence, ACM Transactions on Database Systems (TODS), v.4 n.1, p.97-106, March 1979
	Ariel Pashtan, Object oriented operating systems: An emerging design methodology, Proceedings of the ACM '82 conference, p.126-131, January 1982
	Gregory R. Andrews, Partitions and principles for secure operating systems, Proceedings of the 1975 annual conference, p.177-180, January 1975
	K. S. Shankar , C. S. Chandersekaran, Data flow, abstraction levels and specifications for communications switching systems, Proceedings of the 2nd international conference on Software engineering, p.585-591, October 13-15, 1976, San Francisco, California, United States
	A. Silberschatz , R. B. Kieburtz, The external consistency of abstract data types, ACM SIGPLAN Notices, v.15 n.2, p.64-73, February 1980
	Michael D. Schroeder, Engineering a security kernel for Multics, ACM SIGOPS Operating Systems Review, v.9 n.5, p.25-32, November 1975
	R. Levin , E. Cohen , W. Corwin , F. Pollack , W. Wulf, Policy/mechanism separation in Hydra, ACM SIGOPS Operating Systems Review, v.9 n.5, p.132-140, November 1975
	David D. Redell , Yogen K. Dalal , Thomas R. Horsley , Hugh C. Lauer , William C. Lynch , Paul R. McJones , Hal G. Murray , Stephen C. Purcell, Pilot: an operating system for a personal computer, Communications of the ACM, v.23 n.2, p.81-92, Feb. 1980
	Anita K. Jones , Robert J. Chansler, Jr. , Ivor Durham , Karsten Schwans , Steven R. Vegdahl, StarOS, a multiprocessor operating system for the support of task forces, Proceedings of the seventh ACM symposium on Operating systems principles, p.117-127, December 10-12, 1979, Pacific Grove, California, United States
	Bruce W. Arden , Alan D. Berenbaum, A multi-microprocessor computer system architecture, ACM SIGOPS Operating Systems Review, v.9 n.5, p.114-121, November 1975
	Butler W. Lampson , Howard E. Sturgis, Reflections on an operating system design, Communications of the ACM, v.19 n.5, p.251-265, May 1976
	Kinji Mori , Hirokazu Ihara , Katsumi Kawano , Minoru Koizumi , Masayuki Orimo , Kozo Nakai , Hiroaki Nakanishi , Yasuo Suzuki, Autonomous decentralized software structure and its application, Proceedings of 1986 ACM Fall joint computer conference, p.1056-1063, November 1986, Dallas, Texas, United States
	Robert H. Halstead, Jr. , Stephen A. Ward, The MuNet: A scalable decentralized architecture for parallel computation, Proceedings of the 7th annual symposium on Computer Architecture, p.139-145, May 06-08, 1980, La Baule, United States
	Matts Ahlsen , Anders Bjornerstedt , Stefan Britts , Christer Hulten , Lars Soderlund, An architecture for object management in OIS, ACM Transactions on Information Systems (TOIS), v.2 n.3, p.173-196, July 1984
	Michael J. Manthey, A model for and discussion of multi-interpreter systems, Communications of the ACM, v.22 n.5, p.299-309, May 1979
	Paul J. Leach , Bernard L. Stumpf , James A. Hamilton , Paul H. Levine, UIDs as internal names in a distributed file system, Proceedings of the first ACM SIGACT-SIGOPS symposium on Principles of distributed computing, p.34-41, August 18-20, 1982, Ottawa, Canada
	Kevin C. Kahn , William M. Corwin , T. Don Dennis , Herman D'Hooge , David E. Hubka , Linda A. Hutchins , John T. Montague , Fred J. Pollack, iMAX: A multiprocessor operating system for an object-based computer, ACM SIGOPS Operating Systems Review, v.15 n.5, p.127-136, December 1981
	Anita K. Jones , Barbara H. Liskov, A language extension for expressing constraints on data access, Communications of the ACM, v.21 n.5, p.358-367, May 1978
	Naftaly H. Minsky , Abe D. Lockman, Ensuring integrity by adding obligations to privileges, Proceedings of the 8th international conference on Software engineering, p.92-102, August 28-30, 1985, London, England
	Edward D. Lazowska , Henry M. Levy , Guy T. Almes , Michael J. Fischer , Robert J. Fowler , Stephen C. Vestal, The architecture of the Eden system, ACM SIGOPS Operating Systems Review, v.15 n.5, p.148-159, December 1981
	Patricia P. Griffiths , Charles J. Prenner, Verifying formal specifications of synchronous processes, Proceedings of the 3rd ACM SIGACT-SIGPLAN symposium on Principles on programming languages, p.192-208, January 19-21, 1976, Atlanta, Georgia
	Naftaly Minsky, Intentional resolution of privacy protection in database systems, Communications of the ACM, v.19 n.3, p.148-159, March 1976
	Per Brinch Hansen, The invention of concurrent programming, The origin of concurrent programming: from semaphores to remote procedure calls, Springer-Verlag New York, Inc., New York, NY, 2002
	Virgil D. Gligor, Architectural implications of abstract data type implementation, Proceedings of the 6th annual symposium on Computer architecture, p.20-30, April 23-25, 1979
	J. Chase , F. Amador , E. Lazowska , H. Levy , R. Littlefield, The Amber system: parallel programming on a network of multiprocessors, ACM SIGOPS Operating Systems Review, v.23 n.5, p.147-158, Dec. 3–6, 1989
	Gregory R. Andrews , James R. McGraw, Language features for process interaction, ACM SIGOPS Operating Systems Review, v.11 n.2, p.114-127, April 1977
	Theodore A. Linden, The use of abstract data types to simplify program modifications, ACM SIGMOD Record, v.8 n.2, p.12-23, March 1976
	Douglas Cook, In support of domain structure for operating systems, Proceedings of the seventh ACM symposium on Operating systems principles, p.128-130, December 10-12, 1979, Pacific Grove, California, United States
	Dorothy E. Denning, A lattice model of secure information flow, Communications of the ACM, v.19 n.5, p.236-243, May 1976
	Y Paker , T Kindberg, The worm program model: an application centred point of view for distributed architecture design, Proceedings of the 3rd workshop on ACM SIGOPS European workshop: Autonomy or interdependence in distributed systems?, p.1-4, September 18-21, 1988, Cambridge, United Kingdom
	Anita K. Jones , Peter Schwarz, Experience Using Multiprocessor Systems—A Status Report, ACM Computing Surveys (CSUR), v.12 n.2, p.121-165, June 1980
	David L. Parnas, Designing software for ease of extension and contraction, Proceedings of the 3rd international conference on Software engineering, p.264-277, May 10-12, 1978, Atlanta, Georgia, United States
	D. Hagimont , J. Mossière , Cliff W. Hemming, Jr., Hidden capabilities: towards a flexible protection utility for the internet, Proceedings of the 7th workshop on ACM SIGOPS European workshop: Systems support for worldwide applications, September 09-11, 1996, Connemara, Ireland
	R. S. Fabry, How to design a system in which modules can be changed on the fly, Proceedings of the 2nd international conference on Software engineering, p.470-476, October 13-15, 1976, San Francisco, California, United States
	A. Z. Spector, Invited talk: modular architectures for distributed and databases systems, Proceedings of the eighth ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems, p.217-224, March 1989, Philadelphia, Pennsylvania, United States
	L. Casey , N. Shelness, A domain structure for distributed computer systems, ACM SIGOPS Operating Systems Review, v.11 n.5, p.101-108, November 1977
	Guy Almes , George Robertson, An extensible file system for hydra, Proceedings of the 3rd international conference on Software engineering, p.288-294, May 10-12, 1978, Atlanta, Georgia, United States
	David Rine, Possibility theory: As a means for modeling computer security and protection, Proceedings of the eighth international symposium on Multiple-valued logic, p.276-286, January 1978, Rosemont, Illinois, United States
	D. R. Engler , M. F. Kaashoek , J. O'Toole, Jr., Exokernel: an operating system architecture for application-level resource management, ACM SIGOPS Operating Systems Review, v.29 n.5, p.251-266, Dec. 3, 1995
	Peter J. Denning, Fault Tolerant Operating Systems, ACM Computing Surveys (CSUR), v.8 n.4, p.359-389, Dec. 1976
	Alfred Z. Spector , Dean Daniels , Daniel Duchamp , Jeffrey L. Eppinger , Randy Pausch, Distributed transactions for reliable systems, ACM SIGOPS Operating Systems Review, v.19 n.5, p.127-146, Dec. 1-4, 1985
	Dawson Engler , M. Frans Kaashoek , James O'Toole, The operating system kernel as a secure programmable machine, Proceedings of the 6th workshop on ACM SIGOPS European workshop: Matching operating systems to application needs, September 12-14, 1994, Wadern, Germany
	N. Kamibayashi , H. Ogawana , K. Nagayama , H. Aiso, Heart: An operating system nucleus machine implemented by firmware, ACM SIGPLAN Notices, v.17 n.4, p.195-204, April 1982
	Wilfried G. PROBST , Gregor V. BOCHMANN, Operating system design with computer network communication protocols, Proceedings of the fifth symposium on Data communications, p.4.19-4.25, September 27-29, 1977, Snowbird, Utah, United States
	Theodore A. Linden, Operating System Structures to Support Security and Reliable Software, ACM Computing Surveys (CSUR), v.8 n.4, p.409-445, Dec. 1976
	W. K. Giloi , P. Behr, Hierarchical function distribution - a design principle for advanced multicomputer architectures, ACM SIGARCH Computer Architecture News, v.11 n.3, p.318-325, June 1983
	Anand Jagannathan, A technique for the architectural implementation of software subsystems, Proceedings of the 7th annual symposium on Computer Architecture, p.236-244, May 06-08, 1980, La Baule, United States
	Daniel Hagimont , P.-Y. Chevalier , A. Freyssinet , S. Krakowiak , S. Lacourte , J. Mossière , X. Rousset de Pina, Persistent shared object support in the Guide system: evaluation & related work, ACM SIGPLAN Notices, v.29 n.10, p.129-144, Oct. 1994
	MM. L. Boi , P. Michel, Design and principles of a fault tolerant system, Proceedings of the 3rd international conference on Software engineering, p.207-214, May 10-12, 1978, Atlanta, Georgia, United States
	B. D. Fleisch, Distributed shared memory in a loosely coupled distributed system, ACM SIGCOMM Computer Communication Review, v.17 n.5, p.317-327, Oct./Nov. 1987
	Philip Enslow, Jr., Multiprocessor Organization—a Survey, ACM Computing Surveys (CSUR), v.9 n.1, p.103-129, March 1977
	Swamy Kutti, Why a distributed kernel?, ACM SIGOPS Operating Systems Review, v.18 n.4, p.5-11, October 1984
	Ming-Syan Chen , Kang G. Shin, Addressing, Routing, and Broadcasting in Hexagonal Mesh Multiprocessors, IEEE Transactions on Computers, v.39 n.1, p.10-18, January 1990
	Yvonne Coady , Gregor Kiczales, Back to the future: a retroactive study of aspect evolution in operating system code, Proceedings of the 2nd international conference on Aspect-oriented software development, p.50-59, March 17-21, 2003, Boston, Massachusetts
	Anita K. Jones, Capability architecture revisited, ACM SIGOPS Operating Systems Review, v.14 n.3, p.33-35, July 1980
	P. A. Janson, Using type-extension to organize virtual-memory mechanisms, ACM SIGOPS Operating Systems Review, v.15 n.4, p.6-38, October 1981
	Tatsuya Hayashi, A new approach to construction of computer systems, Proceedings of the 1975 annual conference, p.19-23, January 1975
	Robert E. Strom , Shaula Yemini, NIL: An integrated language and system for distributed programming, Proceedings of the 1983 ACM SIGPLAN symposium on Programming language issues in software systems, p.73-82, June 27-29, 1983, San Francisco, California, United States
	J. D. Bagley , E. R. Floto , S. C. Hsieh , V. Watson, Sharing data and services in a virtual machine system, ACM SIGOPS Operating Systems Review, v.9 n.5, p.82-88, November 1975
	Roger B. Dannenberg , Peter G. Hibbard, A Butler process for resource sharing on Spice machines, ACM Transactions on Information Systems (TOIS), v.3 n.3, p.234-252, July 1985
	Fred J. Pollack , Kevin C. Kahn , Roy M. Wilkinson, The iMAX-432 object filing system, ACM SIGOPS Operating Systems Review, v.15 n.5, p.137-147, December 1981
	K. Ranai, Design requirements of a single-user operating system, ACM SIGSMALL/PC Notes, v.12 n.2, p.8-14, May 1986
	Peter M. Schwarz , Alfred Z. Spector, Synchronizing shared abstract types, ACM Transactions on Computer Systems (TOCS), v.2 n.3, p.223-250, Aug. 1984
	Prasun Dewan , HongHai Shen, Flexible meta access-control for collaborative applications, Proceedings of the 1998 ACM conference on Computer supported cooperative work, p.247-256, November 14-18, 1998, Seattle, Washington, United States
	Garth A. Gibson , David F. Nagle , Khalil Amiri , Jeff Butler , Fay W. Chang , Howard Gobioff , Charles Hardin , Erik Riedel , David Rochberg , Jim Zelenka, A cost-effective, high-bandwidth storage architecture, ACM SIGOPS Operating Systems Review, v.32 n.5, p.92-103, Dec. 1998
	Lawrence Robinson , Karl N. Levitt , Peter G. Neumann , Ashok R. Saxena, On attaining reliable software for a secure operating system, ACM SIGPLAN Notices, v.10 n.6, p.267-284, June 1975
	Hideharu Amano , Taisuke Boku , Tomohiro Kudoh, (SM)/sup 2/-II: A Large-Scale Multiprocessor for Sparse Matrix Calculations, IEEE Transactions on Computers, v.39 n.7, p.889-905, July 1990
	Calton Pu , Jerre D. Noe , Andrew Proudfoot, Regeneration of Replicated Objects: A Technique and its Eden Implementation, IEEE Transactions on Software Engineering, v.14 n.7, p.936-945, July 1988
	L. Ciminiera , A. Valenzano, Authentication Mechanisms in Microprocessor-Based Local Area Networks, IEEE Transactions on Software Engineering, v.15 n.5, p.654-658, May 1989
	Andrew S. Tanenbaum , Sape J. Mullender, An overview of the Amoeba distributed operating system, ACM SIGOPS Operating Systems Review, v.15 n.3, p.51-64, July 1981
	Naftaly Minsky, Another look at data-bases, ACM SIGMOD Record, v.6 n.4, p.9-17, 1974
	Colin Whitby-Strevens, Current research in computer networks: a personal view, ACM SIGCOMM Computer Communication Review, v.6 n.2, p.13-40, April 1976
	Johannes Madsen, A computer system supporting data abstraction, ACM SIGOPS Operating Systems Review, v.15 n.1, p.45-72, January 1981
	Barry C. Goldstein , Thomas W. Scrutchin, A machine-oriented resource management architecture, ACM SIGARCH Computer Architecture News, v.3 n.4, p.214-219, December 1974
	Johannes Madsen, A computer system supporting data abstraction, ACM SIGOPS Operating Systems Review, v.15 n.2, p.38-78, April 1981
	Joerg M. Haake , Anja Haake , Till Schümmer , Mohamed Bourimi , Britta Landgraf, End-user controlled group formation and access rights management in a shared workspace system, Proceedings of the 2004 ACM conference on Computer supported cooperative work, November 06-10, 2004, Chicago, Illinois, USA
	William A. Wulf, Reliable hardware-software architecture, ACM SIGPLAN Notices, v.10 n.6, p.122-130, June 1975
	Peter Hibbard, Multiprocessor software design, Proceedings of the ACM 1980 annual conference, p.527-536, January 1980
	Yasuhiko Yokote , Fumio Teraoka , Atsushi Mitsuzawa , Nobuhisa Fujinami , Mario Tokoro, The muse object architecture: a new operating system structuring concept, ACM SIGOPS Operating Systems Review, v.25 n.2, p.22-46, April 1991
	Gary H. Sockut, Firmware/hardware support for operating systems: principles and selected history, ACM SIGMICRO Newsletter, v.6 n.4, p.17-26, December 1975
	Douglas P. Ghormley , David Petrou , Steven H. Rodrigues , Thomas E. Anderson, SLIC: an extensibility system for commodity operating systems, Proceedings of the Annual Technical Conference on USENIX Annual Technical Conference, 1998, p.4-4, June 15-19, 1998, New Orleans, Louisiana
	Yvonne Coady , Gregor Kiczales , Joon Suan Ong , Andrew Warfield , Michael Feeley, Brittle systems will break - not bend: can aspect-oriented programming help?, Proceedings of the 10th workshop on ACM SIGOPS European workshop: beyond the PC, July 01-01, 2002, Saint-Emilion, France
	Andrew Whitaker , Richard S. Cox , Marianne Shaw , Steven D. Grible, Constructing services with interposable virtual hardware, Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation, p.13-13, March 29-31, 2004, San Francisco, California
	Roxana Geambasu , Magdalena Balazinska , Steven D. Gribble , Henry M. Levy, Homeviews: peer-to-peer middleware for personal data sharing applications, Proceedings of the 2007 ACM SIGMOD international conference on Management of data, June 11-14, 2007, Beijing, China
	Bennet Yee , J. D. Tygar, Secure coprocessors in electronic commerce applications, Proceedings of the 1st conference on USENIX Workshop on Electronic Commerce, p.14-14, July 11-12, 1995, New York, New York
	Wayne A. Christopher , Steven J. Procter , Thomas E. Anderson, The Nachos instructional operating system, Proceedings of the USENIX Winter 1993 Conference Proceedings on USENIX Winter 1993 Conference Proceedings, p.4-4, January 25-29, 1993, San Diego, California
	Spencer E. Minear, Providing policy control over object operations in a mach based system, Proceedings of the 5th conference on USENIX UNIX Security Symposium, p.13-13, June 05-07, 1995, Salt Lake City, Utah
	Trent Jaeger , Aviel D. Rubin , Atul Prakash, Building systems that flexibly control downloaded executable context, Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography, p.14-14, July 22-25, 1996, San Jose, California
	Trent Jaeger , Jochen Liedtke , Nayeem Islam, Operating system protection for fine-grained programs, Proceedings of the 7th conference on USENIX Security Symposium, 1998, p.11-11, January 26-29, 1998, San Antonio, Texas
	H. Rex Hartson , David K. Hsiao, A semantic model for data base protection languages, Proceedings of the second international conference on Systems for Large Data Bases, p.27-42, September 08-10, 1976, Brussels, Belgium, North Holland
	Deborah Downs , Gerald J. Popek, Data base management systems security and INGRES, Proceedings of the fifth international conference on Very Large Data Bases, p.280-290, October 03-05, 1979, Rio de Janeiro, Brazil
	Oleg Kiselyov , Chung-chieh Shan, Lightweight Static Capabilities, Electronic Notes in Theoretical Computer Science (ENTCS), v.174 n.7, p.79-104, June, 2007
	Andrew P. Black , Norman C. Hutchinson , Eric Jul , Henry M. Levy, The development of the Emerald programming language, Proceedings of the third ACM SIGPLAN conference on History of programming languages, p.11-1-11-51, June 09-10, 2007, San Diego, California
	Trent Jaeger , Jochen Liedtke , Vsevolod Panteleenko , Yoonho Park , Nayeem Islam, Security architecture for component-based operating systems, Proceedings of the 8th ACM SIGOPS European workshop on Support for composing distributed applications, p.222-228, September 1998, Sintra, Portugal
	Mark Sullivan , Michael Stonebraker, Using Write Protected Data Structures To Improve Software Fault Tolerance in Highly Available Database Management Systems, Proceedings of the 17th International Conference on Very Large Data Bases, p.171-180, September 03-06, 1991
	Roy Campbell , Garry Johnston , Vincent Russo, Choices (class hierarchical open interface for custom embedded systems), ACM SIGOPS Operating Systems Review, v.21 n.3, p.9-17, July 1987
	Volkmar Uhlig, The mechanics of in-kernel synchronization for a scalable microkernel, ACM SIGOPS Operating Systems Review, v.41 n.4, July 2007
	Stephen Russell, Single-user capabilities in interprocess communication, ACM SIGOPS Operating Systems Review, v.22 n.2, p.45-52, April, 1988
	Dawson R. Engler , M. Frans Kaashoek , James W. O'Toole, Jr., The operating system kernel as a secure programmable machine, ACM SIGOPS Operating Systems Review, v.29 n.1, p.78-82, Jan. 1995
	Alberto R. Cunha , Carlos N. Ribeiro , José A. Marques, The architecture of a memory management unit for object-oriented systems, ACM SIGARCH Computer Architecture News, v.19 n.4, p.109-116, June 1991
	Anita K. Jones , Robert J. Chansler, Jr. , Ivor Durham , Peter Feiler , Karsten Schwans, Software management of Cm*: a distributed multiprocessor, Proceedings of the June 13-16, 1977, national computer conference, June 13-16, 1977, Dallas, Texas
	Paritosh Shroff , Scott F. Smith , Mark Thober, Securing information flow via dynamic capture of dependencies, Journal of Computer Security, v.16 n.5, p.637-688, November 2008
	Derek G. Murray , Steven Hand, Privilege separation made easy: trusting small libraries not big processes, Proceedings of the 1st European workshop on system security, March 31-31, 2008, Glasgow, Scotland
	Roxana Geambasu , Cherie Cheung , Alexander Moshchuk , Steven D. Gribble , Henry M. Levy, Organizing and sharing distributed personal web-service data, Proceeding of the 17th international conference on World Wide Web, April 21-25, 2008, Beijing, China