Sharing and protection in a single-address-space operating system

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Sharing and protection in a single-address-space operating system

Full text

Pdf (2.87 MB)

Source

ACM Transactions on Computer Systems (TOCS) archive
Volume 12 , Issue 4 (November 1994) table of contents
Special issue on computer architecture

Pages: 271 - 307

Year of Publication: 1994

ISSN:0734-2071

Authors

Jeffrey S. Chase	University of Washington
Henry M. Levy	University of Washington
Michael J. Feeley	University of Washington
Edward D. Lazowska	University of Washington

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): 18, Downloads (12 Months): 149, Citation Count: 51

Additional Information:

abstract references cited by index terms collaborative colleagues

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/195792.195795 What is a DOI?

Warning: The download time has expired please click on the item to try again.

ABSTRACT

This article explores memory sharing and protection support in Opal, a single-address-space operating system designed for wide-address (64-bit) architectures. Opal threads execute within protection domains in a single shared virtual address space. Sharing is simplified, because addresses are context independent. There is no loss of protection, because addressability and access are independent; the right to access a segment is determined by the protection domain in which a thread executes. This model enables beneficial code-and data-sharing patterns that are currently prohibitive, due in part to the inherent restrictions of multiple address spaces, and in part to Unix programming style.We have designed and implemented an Opal prototype using the Mach 3.0 microkernel as a base. Our implementation demonstrates how a single-address-space structure can be supported alongside of other environments on a modern microkernel operating system, using modern wide-address architectures. This article justifies the Opal model and its goals for sharing and protection, presents the system and its abstractions, describes the prototype implementation, and reports experience with integrated applications.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	J. E. Allchin , M. S. McKendry, Synchronization and recovery of actions, Proceedings of the second annual ACM symposium on Principles of distributed computing, p.31-44, August 17-19, 1983, Montreal, Quebec, Canada [doi>10.1145/800221.806708]
	2	ALMES, G. T., BLACK, A. P., LAZOWSKA, E. D., AND NOE, J. D. 1985. The Eden system: A technical review. IEEE Trans. Softw. Eng. SE-11, I (Jan.), 43-59.
	3	ANDERSON, M., POSE, R. D., AND WALLACE, C. S. 1986. The password-capability system. Comput. J. 29, I (Feb.), 1-8.
	4	Thomas E. Anderson , Brian N. Bershad , Edward D. Lazowska , Henry M. Levy, Scheduler activations: effective kernel support for the user-level management of parallelism, ACM Transactions on Computer Systems (TOCS), v.10 n.1, p.53-79, Feb. 1992 [doi>10.1145/146941.146944]
	5	Brian N. Bershad , Thomas E. Anderson , Edward D. Lazowska , Henry M. Levy, Lightweight remote procedure call, ACM Transactions on Computer Systems (TOCS), v.8 n.1, p.37-55, Feb. 1990 [doi>10.1145/77648.77650]
	6	BEgSHAD, B., ZEKAUSKAS, M., AND SAWDON, W. 1993. The Midway distributed shared memory system. In Proceedings of the 1993 IEEE Computer Conference. 1EEE, New York.
	7	John B. Carter , John K. Bennett , Willy Zwaenepoel, Implementation and performance of Munin, Proceedings of the thirteenth ACM symposium on Operating systems principles, p.152-164, October 13-16, 1991, Pacific Grove, California, United States
	8	Albert Chang , Mark F. Mergen, 801 storage: architecture and programming, ACM Transactions on Computer Systems (TOCS), v.6 n.1, p.28-50, Feb. 1988 [doi>10.1145/35037.42270]
	9	CHAO, C., MACKEY, M., AND SEARS, B. 1990. Mach on a virtually addressed cache architecture. In Usenix Mach Workshop Proceedings. USENIX Association, Berkeley, Calif., 31-51.
	10	J. Chase , F. Amador , E. Lazowska , H. Levy , R. Littlefield, The Amber system: parallel programming on a network of multiprocessors, Proceedings of the twelfth ACM symposium on Operating systems principles, p.147-158, November 1989
	11	COCKSHOT, W. P., ATKINSON, M. P., AND CHISHOLM, K.J. 1984. Persistent object management system. Softw. Pract. Exp. 14, i (Jan.).
	12	Helen Custer, Inside Windows NT, Microcomputer Applications, Suisun City, CA, 1992
	13	Robert C. Daley , Jack B. Dennis, Virtual memory, processes, and sharing in MULTICS, Communications of the ACM, v.11 n.5, p.306-312, May 1968 [doi>10.1145/363095.363139]
	14	Jack B. Dennis , Earl C. Van Horn, Programming semantics for multiprogrammed computations, Communications of the ACM, v.9 n.3, p.143-155, March 1966 [doi>10.1145/365230.365252]
	15	DIGITAL EQUIPMENT CORPORATION. 1992. Alpha Architecture Handbook. Digital Equipment Corp., Maynard, Mass.
	16	DRUSCHEL, P. AND PETERSON, L. 1992a. High performance cross-domain data transfer. Tech. Rep. 92-11, Dept. of Computer Science, Univ. of Arizona, Tucson, Ariz.
	17	DRUSCHEL, P., PETERSON, L. L., AND HUTCHINSON, N. C. 1992b. Decoupling modularity and protection in Lipto. In Proceedings of the 12th International Conference on Distributed Computing Systems. IEEE, New York.
	18	R. S. Fabry, Capability-based addressing, Communications of the ACM, v.17 n.7, p.403-412, July 1974 [doi>10.1145/361011.361070]
	19	FEELEY, M. J., CHASE, J. S., AND LAZOWSKA, E.D. 1993. User-level threads and interprocess communication. Tech. Rep. 93-02-03, Dept. of Computer Science and Engineering, Univ. of Washington, Seattle, Wash.
	20	GARRETT, W., SCOTT, M., BIANCHINI, R., KONTOTHANASSiS, L., MCCALLUM, R., THOMAS, J., WISNIEWSKI, R., AND LUK, S. 1993. Linking shared segments. In Proceedings of the Winter 1993 Usenix. USENIX Association, Berkeley, Calif.
	21	GRISWOLD, W. AND NOTKIN, D. 1990. Program restructuring to aid software maintenance. Tech. Rep. 90-08-05, Dept. of Computer Science and Engineering, Univ. of Washington, Seattle, Wash.
	22	GROVES, R. D. AND OEHLER, R. 1990. RISC system/6000 processor architecture. IBM RISC System/6000 Technology, M. Misra, Ed. International Business Machines, Armonk, N.Y.
	23	Merle E. Houdek , Frank G. Soltis , Roy L. Hoffman, IBM System/38 support for capability-based addressing, Proceedings of the 8th annual symposium on Computer Architecture, p.341-348, May 12-14, 1981, Minneapolis, Minnesota, United States
	24	Jerry Huck , Jim Hays, Architectural support for translation table management in large address space machines, Proceedings of the 20th annual international symposium on Computer architecture, p.39-50, May 16-19, 1993, San Diego, California, United States
	25	INTERNATIONAL BUSINESS MACHINES. 1988. Application System/400 Technology. International Business Machines, Armonk, N.Y.
	26	Eric Jul , Henry Levy , Norman Hutchinson , Andrew Black, Fine-grained mobility in the Emerald system, ACM Transactions on Computer Systems (TOCS), v.6 n.1, p.109-133, Feb. 1988 [doi>10.1145/35037.42182]
	27	KALET, I., JACKY, J., I~OMHOUT-SHIRO, S., NIEHAUS, M., SWEENEY, C., AND UNGER, J. 1991. The Prism radiation treatment planning system. Tech. Rep. 91-10-03, Radiation Oncology Dept., Univ. of Washington, Seattle, Wash.
	28	Eric J. Koldinger , Jeffrey S. Chase , Susan J. Eggers, Architecture support for single address space operating systems, Proceedings of the fifth international conference on Architectural support for programming languages and operating systems, p.175-186, October 12-15, 1992, Boston, Massachusetts, United States
	29	David Kotz , Preston Crow, The expected lifetime of “single-address-space” operating systems, Proceedings of the 1994 ACM SIGMETRICS conference on Measurement and modeling of computer systems, p.161-170, May 16-20, 1994, Nashville, Tennessee, United States
	30	S. Krakowiak , M. Meysembourg , H. Nguyen Van , M. Riveill , C. Roisin , X. Rousset de Pina, Design and implementation of an object-oriented strongly typed language for distributed applications, Journal of Object-Oriented Programming, v.3 n.3, p.11-22, Sep./Oct. 1990
	31	Charles Lamb , Gordon Landis , Jack Orenstein , Dan Weinreb, The ObjectStore database system, Communications of the ACM, v.34 n.10, p.50-63, Oct. 1991 [doi>10.1145/125223.125244]
	32	Ruby B. Lee, Precision Architecture, Computer, v.22 n.1, p.78-91, January 1989 [doi>10.1109/2.19825]
	33	Henry M. Levy, Capability-Based Computer Systems, Butterworth-Heinemann, Newton, MA, 1984
	34	McCABE, T. 1991. Programming with mediators: Developing a graphical mesh environment. Master's thesis, Dept. of Computer Science and Engineering, Univ. of Washington, Seattle, Wash.
	35	MCJONES, P. R. AND SWART, G. F. 1987. Evolving the Unix system interface to support multithreaded programs. Tech. Rep. 21, DEC Systems Research Center, Palo Alto, Calif.
	36	MIPS COMPUTER SYSTEMS. 1991. MIPS R4000 Microprocessor User's Manual. 1st ed. MIPS Computer Systems, Inc., Sunnyvale, Calif.
	37	MULLENDER, S. AND TANENBAUM, A. 1986. The design of a capability-based operating system. Comput. J. 29, 4, 289-299.
	38	Kevin Murray , Tim Wilkinson , Peter Osmon , Ashley Saulsbury , Tom Stiemerling , Paul Kelly, Design and Implementation of an Object-Oriented 64-bit Single Address Space Microkernel, USENIX Microkernels and Other Kernel Architectures Symposium, p.31-44, September 20-23, 1993
	39	Toshio Okamoto , Hiaeo Segawa , Sung Ho Shin , Hiroshi Nozue , Ken-ichi Maeda , Mitsuo Saito, A Micro-Kernel Architecture for Next Generation Processor, Proceedings of the Workshop on Micro-kernels and Other Kernel Architectures, p.83-94, April 27-28, 1992
	40	Elliot I. Organick, A programmer's view of the Intel 432 system, McGraw-Hill, Inc., New York, NY, 1983
	41	Fred J. Pollack , Kevin C. Kahn , Roy M. Wilkinson, The iMAX-432 object filing system, Proceedings of the eighth ACM symposium on Operating systems principles, p.137-147, December 14-16, 1981, Pacific Grove, California, United States
	42	David D. Redell , Yogen K. Dalal , Thomas R. Horsley , Hugh C. Lauer , William C. Lynch , Paul R. McJones , Hal G. Murray , Stephen C. Purcell, Pilot: an operating system for a personal computer, Communications of the ACM, v.23 n.2, p.81-92, Feb. 1980 [doi>10.1145/358818.358822]
	43	ROSENnERC, J. 1992. Architectural and operating system support for orthogonal persistence. Comput. Syst. 5, 3 (July).
	44	ROSENBERG, J. AND ABRAMSON, D. 1985. MONADS-PC: A capability-based workstation to support software engineering. In Proceedings of the 18th Hawai International Conference on System Sciences. ACM, New York.
	45	ROZlER, M., ABROSSIMOV, V., ARMAND, F., BOULE, I., GLEN, M., GUILLEMONT, M., HERRMANN, F., LEONARD, P., LANGLOIS, S., AND NEUHAUSER, W. 1988. Chorus distributed operating systems. Comput. Syst. 1, 4.
	46	M. L. Scott , T. J. LeBlanc , B. D. Marsh, Multi-model parallel programming in psyche, Proceedings of the second ACM SIGPLAN symposium on Principles & practice of parallel programming, p.70-78, March 14-16, 1990, Seattle, Washington, United States
	47	SHAPIRO, M. 1986. Structure and encapsulation in distributed systems: The proxy principlo. In Proceedings of the 6th International Conference on Distributed Computing Systems.
	48	SHEKITA, E. AND ZWILLING, m. 1990. Cricket: A mapped, persistent object store. In Proceedings of the 4th International Workshop on Persistent Object Systems: Design, Implementation and Use.
	49	Daniel P. Siewiorek , G. Bell , A. C. Newell, Computer Structures: Principles and Examples, McGraw-Hill, Inc., New York, NY, 1982
	50	SOLTIS, F.G. 1981. Design of a small business data processing system. IEEE Comput. 14, 9 (Sept.).
	51	Kevin J. Sullivan , David Notkin, Reconciling environment integration and software evolution, ACM Transactions on Software Engineering and Methodology (TOSEM), v.1 n.3, p.229-268, July 1992 [doi>10.1145/131736.131744]
	52	Daniel C. Swinehart , Polle T. Zellweger , Richard J. Beach , Robert B. Hagmann, A structural view of the Cedar programming environment, ACM Transactions on Programming Languages and Systems (TOPLAS), v.8 n.4, p.419-490, Oct. 1986 [doi>10.1145/6465.6466]
	53	VOCHTELLO, J., RUSSELL, S., AND HEISER, G. 1993. Capability-based protection in a persistent global virtual memory system. In the 3rd International Workshop on Object-Oriented Memory Systems. IEEE, New York.
	54	Paul R. Wilson, Pointer swizzling at page fault time: efficiently supporting huge address spaces on standard hardware, ACM SIGARCH Computer Architecture News, v.19 n.4, p.6-13, June 1991 [doi>10.1145/122576.122577]
	55	W. Wulf , R. Levin , C. Pierson, Overview of the Hydra Operating System development, Proceedings of the fifth ACM symposium on Operating systems principles, p.122-131, November 19-21, 1975, Austin, Texas, United States
	56	YARVIN, C., BUKOWSKI, R., AND ANDERSON, T. 1993. Anonymous RPC: Low Latency protection in a 64-bit address space. In Proceedings of the Summer USENIX Conference. USENIX Association, Berkeley, Calif.
	57	M. Young , A. Tevanian , R. Rashid , D. Golub , J. Eppinger, The duality of memory and communication in the implementation of a multiprocessor operating system, Proceedings of the eleventh ACM Symposium on Operating systems principles, p.63-76, November 08-11, 1987, Austin, Texas, United States

CITED BY 51

	Antony L. Hosking , Jiawan Chen, Mostly-copying reachability-based orthogonal persistence, ACM SIGPLAN Notices, v.34 n.10, p.382-398, Oct. 1999
	M. J. Feeley , W. E. Morgan , E. P. Pighin , A. R. Karlin , H. M. Levy , C. A. Thekkath, Implementing global memory management in a workstation cluster, ACM SIGOPS Operating Systems Review, v.29 n.5, p.201-212, Dec. 3, 1995
	Tzi-cker Chiueh , Ganesh Venkitachalam , Prashant Pradhan, Integrating segmentation and paging protection for safe, efficient and transparent software extensions, ACM SIGOPS Operating Systems Review, v.33 n.5, p.140-153, Dec. 1999
	Chandramohan A. Thekkath , Timothy Mann , Edward K. Lee, Frangipani: a scalable distributed file system, ACM SIGOPS Operating Systems Review, v.31 n.5, p.224-237, Dec. 1997
	Kingsley Cheung , Gernot Heiser, A resource management framework for priority-based physical-memory allocation, Australian Computer Science Communications, v.24 n.3, p.47-56, January-February 2002
	Jeffrey S. Chase , Darrell C. Anderson , Prachi N. Thakar , Amin M. Vahdat , Ronald P. Doyle, Managing energy and server resources in hosting centers, ACM SIGOPS Operating Systems Review, v.35 n.5, Dec. 2001
	Peter J. Denning, Virtual memory, ACM Computing Surveys (CSUR), v.28 n.1, p.213-216, March 1996
	M. Talluri , M. D. Hill , Y. A. Khalidi, A new page table for 64-bit address spaces, ACM SIGOPS Operating Systems Review, v.29 n.5, p.184-200, Dec. 3, 1995
	Grzegorz Czajkowski , Thorsten von Eicken, JRes: a resource accounting interface for Java, ACM SIGPLAN Notices, v.33 n.10, p.21-35, Oct. 1998
	C. Bryce , V. Issarny , G. Muller , I. Puaut, Towards safe and efficient customization in distributed systems, Proceedings of the 6th workshop on ACM SIGOPS European workshop: Matching operating systems to application needs, September 12-14, 1994, Wadern, Germany
	Xiaogang Qiu , Michel Dubois, Options for dynamic address translation in COMAs, ACM SIGARCH Computer Architecture News, v.26 n.3, p.214-225, June 1998
	D. Hagimont , J. Mossière , Cliff W. Hemming, Jr., Hidden capabilities: towards a flexible protection utility for the internet, Proceedings of the 7th workshop on ACM SIGOPS European workshop: Systems support for worldwide applications, September 09-11, 1996, Connemara, Ireland
	John Rosenberg , Alan Dearle , David Hulse , Anders Lindström , Stephen Norris, Operating system support for persistent and recoverable computations, Communications of the ACM, v.39 n.9, p.62-69, Sept. 1996
	David Kotz , Preston Crow, The expected lifetime of “single-address-space” operating systems, ACM SIGMETRICS Performance Evaluation Review, v.22 n.1, p.161-170, May 1994
	D. R. Engler , M. F. Kaashoek , J. O'Toole, Jr., Exokernel: an operating system architecture for application-level resource management, ACM SIGOPS Operating Systems Review, v.29 n.5, p.251-266, Dec. 3, 1995
	Miguel Castro , Atul Adya , Barbara Liskov , Andrew C. Meyers, HAC: hybrid adaptive caching for distributed storage systems, ACM SIGOPS Operating Systems Review, v.31 n.5, p.102-115, Dec. 1997
	Ashley Saulsbury , Fredrik Dahlgren , Per Stenström, Recency-based TLB preloading, ACM SIGARCH Computer Architecture News, v.28 n.2, p.117-127, May 2000
	Michel Cekleov , Michel Dubois, Virtual-Address Caches Part 1: Problems and Solutions in Uniprocessors, IEEE Micro, v.17 n.5, p.64-71, September 1997
	Michael M. Swift , Brian N. Bershad , Henry M. Levy, Improving the reliability of commodity operating systems, Proceedings of the nineteenth ACM symposium on Operating systems principles, October 19-22, 2003, Bolton Landing, NY, USA
	Jorge Buenabad-Chávez , Henk L. Muller , Paul W. A. Stallard , David H. D. Warren, Virtual memory on data diffusion architectures, Parallel Computing, v.29 n.8, p.1021-1052, 1 August 2003
	Michael M. Swift , Brian N. Bershad , Henry M. Levy, Improving the reliability of commodity operating systems, ACM Transactions on Computer Systems (TOCS), v.23 n.1, p.77-110, February 2005
	Sung-Soo Lim , Kihwal Lee , Lui Sha, Ensuring integrity and service availability in a web-based control laboratory, Real-time system security, Nova Science Publishers, Inc., Commack, NY, 2003
	Robert Grimm , Brian N. Bershad, Separating access control policy, enforcement, and functionality in extensible systems, ACM Transactions on Computer Systems (TOCS), v.19 n.1, p.36-70, Feb. 2001
	Nael B. Abu-Ghazaleh , Dhananjay S. Phatak, Verification caching: towards efficient and secure mobile code execution environments, Proceedings of the 2002 ACM symposium on Applied computing, March 11-14, 2002, Madrid, Spain
	Chris Bentley , Scott A. Watterson , David K. Lowenthal , Barry Rountree, Implicit java array bounds checking on 64-bit architecture, Proceedings of the 18th annual international conference on Supercomputing, June 26-July 01, 2004, Malo, France
	Michel Cekleov , Michel Dubois, Virtual-Address Caches, Part 2: Multiprocessor Issues, IEEE Micro, v.17 n.6, p.69-74, November 1997
	Lanfranco Lopriore, Access Control Mechanisms in a Distributed, Persistent Memory System, IEEE Transactions on Parallel and Distributed Systems, v.13 n.10, p.1066-1083, October 2002
	S. Antonatos , P. Akritidis , E. P. Markatos , K. G. Anagnostakis, Defending against hitlist worms using network address space randomization, Proceedings of the 2005 ACM workshop on Rapid malcode, November 11-11, 2005, Fairfax, VA, USA
	Xiaogang Qiu , Michel Dubois, Moving Address Translation Closer to Memory in Distributed Shared-Memory Multiprocessors, IEEE Transactions on Parallel and Distributed Systems, v.16 n.7, p.612-623, July 2005
	Ronald Pose, Password-capabilities: their evolution from the password-capability system into walnut and beyond, Australian Computer Science Communications, v.23 n.4, p.105-113, January 2001
	Amit Vasudevan , Ramesh Yerraballi , Ashish Chawla, A high performance Kernel-Less Operating System architecture, Proceedings of the Twenty-eighth Australasian conference on Computer Science, p.287-296, January 01, 2005, Newcastle, Australia
	Yuji Chiba, Heap protection for Java virtual machines, Proceedings of the 4th international symposium on Principles and practice of programming in Java, August 30-September 01, 2006, Mannheim, Germany
	Godmar Back , Patrick Tullmann , Leigh Stoller , Wilson C. Hsieh , Jay Lepreau, Techniques for the design of java operating systems, Proceedings of the Annual Technical Conference on 2000 USENIX Annual Technical Conference, p.17-17, June 18-23, 2000, San Diego, California
	Chris Bentley , Scott A. Watterson , David K. Lowenthal , Barry Rountree, Implicit array bounds checking on 64-bit architectures, ACM Transactions on Architecture and Code Optimization (TACO), v.3 n.4, p.502-527, December 2006
	S. Antonatos , P. Akritidis , E. P. Markatos , K. G. Anagnostakis, Defending against hitlist worms using network address space randomization, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.51 n.12, p.3471-3490, August, 2007
	Godmar Back , Wilson C. Hsieh , Jay Lepreau, Processes in KaffeOS: isolation, resource management, and sharing in java, Proceedings of the 4th conference on Symposium on Operating System Design & Implementation, p.23-23, October 22-25, 2000, San Diego, California
	Leendert van Doorn, A secure java^TM virtual machine, Proceedings of the 9th conference on USENIX Security Symposium, p.2-2, August 14-17, 2000, Denver, Colorado
	Frank W. Miller, Simple Memory Protection for Embedded Operating System Kernels, Proceedings of the FREENIX Track: 2002 USENIX Annual Technical Conference, p.299-308, June 10-15, 2002
	Roxana Geambasu , Magdalena Balazinska , Steven D. Gribble , Henry M. Levy, Homeviews: peer-to-peer middleware for personal data sharing applications, Proceedings of the 2007 ACM SIGMOD international conference on Management of data, June 11-14, 2007, Beijing, China
	Michael Golm , Meik Felser , Christian Wawersich , Jürgen Kleinöder, The JX Operating System, Proceedings of the General Track: 2002 USENIX Annual Technical Conference, p.45-58, June 10-15, 2002
	Li Gong , Marianne Mueller , Hemma Prafullchandra , Roland Schemers, Going beyond the sandbox: an overview of the new security architecture in the java^TM development Kit 1.2, Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems, p.10-10, December 08-11, 1997, Monterey, California
	Arindam Banerji , John Michael Tracey , David L. Cohn, Protected shared libraries: a new approach to modularity and sharing, Proceedings of the Annual Technical Conference on Proceedings of the USENIX 1997 Annual Technical Conference, p.5-5, January 06-10, 1997, Anaheim, California
	Luke Deller , Gernot Heiser, Linking programs in a single address space, Proceedings of the Annual Technical Conference on 1999 USENIX Annual Technical Conference, p.21-21, June 06-11, 1999, Monterey, California
	Francis M. David , Jeffrey C. Carlyle , Ellick M. Chan , Philip A. Reames , Roy H. Campbell, Improving dependability by revisiting operating system design, Proceedings of the 3rd conference on Third Workshop on Hot Topics in System Dependability, p.1-1, June 26, 2007, Edinburgh, UK
	Antony L. Hosking , Jiawan Chen, PM3: An Orthogonal Persistent Systems Programming Language - Design, Implementation, Performance, Proceedings of the 25th International Conference on Very Large Data Bases, p.587-598, September 07-10, 1999
	Vitaliy B. Lvin , Gene Novark , Emery D. Berger , Benjamin G. Zorn, Archipelago: trading address space for reliability and security, ACM SIGOPS Operating Systems Review, v.42 n.2, March 2008
	Yuji Chiba, Java heap protection for debugging native methods, Science of Computer Programming, v.70 n.2-3, p.149-167, February, 2008
	Derek G. Murray , Steven Hand, Privilege separation made easy: trusting small libraries not big processes, Proceedings of the 1st European workshop on system security, March 31-31, 2008, Glasgow, Scotland
	Roxana Geambasu , Cherie Cheung , Alexander Moshchuk , Steven D. Gribble , Henry M. Levy, Organizing and sharing distributed personal web-service data, Proceeding of the 17th international conference on World Wide Web, April 21-25, 2008, Beijing, China
	Diwaker Gupta , Ludmila Cherkasova , Rob Gardner , Amin Vahdat, Enforcing performance isolation across virtual machines in Xen, Proceedings of the ACM/IFIP/USENIX 2006 International Conference on Middleware, November 01-01, 2006, Melbourne, Australia
	Peter J. Denning, Virtual memory, Encyclopedia of Computer Science, 4th edition, John Wiley and Sons Ltd., Chichester, 2003