Incommunicado: efficient communication for isolates

ABSTRACT

Executing computations in a single instance of safe language virtual machine can improve performance and overall platform scalability. It also poses various challenges. One of them is providing a fast inter-application communication mechanism. In addition to being efficient, such a mechanism should not violate any functional and non-functional properties of its environment, and should also support enforcement of application-specific security policies. This paper explores the design and implementation of a communication substrate for applications executing within a single Java virtual machine modified to enable safe and interference-free execution of isolated computations. Designing an efficient extension that does not break isolation properties and at the same time pragmatically offers an intuitive API has proven non-trivial. This paper demonstrates a set of techniques that lead to at least an eight-fold performance improvement over the in-process inter-application communication using standard mechanisms offered by the Java platform.

REFERENCES

• 1: G. Back, W. H. Hsieh, and J. Lepreau. Processes in KaffeOS: Isolation, resource management, and sharing in java. In Proceedings of the 4th Symposium on Operating Systems Design and Implementation (OSDI-00), Berkeley, October 2000.
• 2: Brian N. Bershad , Thomas E. Anderson , Edward D. Lazowska , Henry M. Levy, Lightweight remote procedure call, ACM Transactions on Computer Systems (TOCS), v.8 n.1, p.37-55, Feb. 1990 [doi>10.1145/77648.77650]
• 3: Walter Binder , Jane G. Hulaas , Alex Villazón, Portable resource control in Java, Proceedings of the 16th ACM SIGPLAN conference on Object oriented programming, systems, languages, and applications, p.139-155, October 14-18, 2001, Tampa Bay, FL, USA
• 4: Andrew D. Birrell , Bruce Jay Nelson, Implementing remote procedure calls, ACM Transactions on Computer Systems (TOCS), v.2 n.1, p.39-59, February 1984 [doi>10.1145/2080.357392]
• 5: Ciarán Bryce , Chrislain Razafimahefa, An approach to safe object sharing, Proceedings of the 15th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications, p.367-381, October 2000, Minneapolis, Minnesota, United States
• 6: Chi-Chao Chang , Thorsten von Eicken, Interfacing Java to the virtual interface architecture, Proceedings of the ACM 1999 conference on Java Grande, p.51-57, June 12-14, 1999, San Francisco, California, United States [doi>10.1145/304065.304095]
• 7: Grzegorz Czajkowski , Laurent Daynés, Multitasking without comprimise: a virtual machine evolution, Proceedings of the 16th ACM SIGPLAN conference on Object oriented programming, systems, languages, and applications, p.125-138, October 14-18, 2001, Tampa Bay, FL, USA
• 8: Grzegorz Czajkowski , Thorsten von Eicken, JRes: a resource accounting interface for Java, Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications, p.21-35, October 18-22, 1998, Vancouver, British Columbia, Canada
• 9: T. Downing. Java RMI. IDG Books, 1998.
• 10: T. Fraser, L. Badger, and M. Feldman. Hardening COTS software with generic software wrappers. In Proceedings of the 1999 IEEE Symposium on Security and Privacy (SSP '99), May 1999.
• 11: Li Gong, Inside Java 2 platform security architecture, API design, and implementation, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1999
• 12: G. Hamilton and P. Kougiouris. The Spring nucleus: a microkernel for objects. In Summer USENIX Conference, June 1993.
• 13: C. Hawblitzel, C. Chang, G. Czajkowski, D. Hu, and T. von Eicken. Implementing multiple protection domains in Java. In Proceedings of the USENIX 1998 Annual Technical Conference, New Orleans, LA, June 1998.
• 14: Java Community Process. Application Isolation API Specification. http://jcp.org/jsr/detail/121.jsp, 2002.
• 15: Michael B. Jones, Interposition agents: transparently interposing user code at the system interface, Proceedings of the fourteenth ACM symposium on Operating systems principles, p.80-93, December 05-08, 1993, Asheville, North Carolina, United States
• 16: V. Krishnaswamy, D. Walther, S. Bhola, E. Bommaiah, G. Riley, B. Topol, and M. Ahamad. Efficient implementations of Java remote method invocation. In Proceedings of the 4th Conference on Object-Oriented Technologies and Systems (COOTS-98), Berkeley, April 1998.
• 17: Douglas Lea, Concurrent Programming in Java(TM): Design Principles and Patterns (3rd Edition) (Java (Addison-Wesley)), Addison-Wesley Professional, 2006
• 18: Henry M. Levy, Capability-Based Computer Systems, Butterworth-Heinemann, Newton, MA, 1984
• 19: Jason Maassen , Rob van Nieuwpoort , Ronald Veldema , Henri E. Bal , Aske Plaat, An efficient implementation of Java's remote method invocation, Proceedings of the seventh ACM SIGPLAN symposium on Principles and practice of parallel programming, p.173-182, May 04-06, 1999, Atlanta, Georgia, United States
• 20: Christian Nester , Michael Philippsen , Bernhard Haumacher, A more efficient RMI for Java, Proceedings of the ACM 1999 conference on Java Grande, p.152-159, June 12-14, 1999, San Francisco, California, United States [doi>10.1145/304065.304117]
• 21: Sun Microsystems, Ind. Java 2 SDK, Standard Edition Documentation, 2001.
• 22: A. Tanenbaum, S. Mullender, and R. van Renesse. Using Sparse Capabilities in a Distributed Operating System. In The 6th International Conference on Distributed Computing Systems, May 1986.
• 23: J. Vitek. The Seal Calculus of mobile computation. PhD thesis, University of Geneva, 1999.
• 24: Jan Vitek , Boris Bokowski, Confined types in Java, Software—Practice & Experience, v.31 n.6, p.507-532, May 2001 [doi>10.1002/spe.369]
• 25: Ciarán Bryce , Jan Vitek, The JavaSeal Mobile Agent Kernel, Autonomous Agents and Multi-Agent Systems, v.4 n.4, p.359-384, December 2001 [doi>10.1023/A:1012715226170]
• 26: Dan S. Wallach , Dirk Balfanz , Drew Dean , Edward W. Felten, Extensible security architectures for Java, Proceedings of the sixteenth ACM symposium on Operating systems principles, p.116-128, October 05-08, 1997, Saint Malo, France

INDEX TERMS

Keywords:
application isolation, inter-application communication