research-article

Hypercallbacks: Decoupling Policy Decisions and Execution

Authors:

Nadav Amit,

Michael Wei,

Cheng-Chun TuAuthors Info & Claims

HotOS '17: Proceedings of the 16th Workshop on Hot Topics in Operating Systems

Pages 37 - 41

https://doi.org/10.1145/3102980.3102987

Published: 07 May 2017 Publication History

Get Access

References

[1]

Carl A. Waldspurger. Memory resource management in VMware ESX server. ACM SIGOPS Operating Systems Review (OSR), 36:181--194, 2002.

Digital Library

Google Scholar

[2]

Jonathan Corbet. BPF: the universal in-kernel virtual machine. LWN.nethttps://lwn.net/Articles/599755/, 2014.

Google Scholar

[3]

Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, and Andrew Warfield. Xen and the art of virtualization. In ACM Symposium on Operating Systems Principles (SOSP), 2003.

Digital Library

Google Scholar

[4]

Andrew Whitaker, Marianne Shaw, and Steven D Gribble. Scale and performancein the Denali isolation kernel. ACM SIGOPS Operating Systems Review (OSR), 36(SI):195--209, 2002.

Google Scholar

[5]

Zach Amsden, Daniel Arai, Daniel Hecht, Anne Holler, and Pratap Sub-rahmanyam. Vmi: An interface for paravirtualization. In Ottawa Linux Symposium (OLS), pages 371--386, 2006.

Google Scholar

[6]

Tal Garfinkel, Mendel Rosenblum, et al. A virtual machine introspection based architecture for intrusion detection. In Network & Distributed System Security Symposium (NDSS), volume 3, pages 191--206, 2003.

Google Scholar

[7]

Grzegorz Miłós, Derek G Murray, Steven Hand, and Michael A Fetterman. Satori: Enlightened page sharing. In USENIX Annual Technical Conference (ATC), 2009.

Digital Library

Google Scholar

[8]

Justin M Forbes. Why virtualization fragmentation sucks. In Ottawa Linux Symposium (OLS), volume 1, pages 125--130, 2007.

Google Scholar

[9]

Linus Torvalds. Re: Xen is a feature. http://yarchive.net/comp/linux/xen.html, 2009.

Google Scholar

[10]

Adam Belay, Andrea Bittau, Ali José Mashtizadeh, David Terei, David Mazieres, and Christos Kozyrakis. Dune: Safe user-level access to privileged cpu features. In OSDI, pages 335--348, 2012.

Digital Library

Google Scholar

[11]

Aleksandar Milenkoski, Marco Vieira, Bryan D Payne, Nuno Antunes, and Samuel Kounev. Technical information on vulnerabilities of hypercall handlers. Technical Report SPEC-RG-2014-001, Spec Research, 2014.

Google Scholar

[12]

Aaron Adams. Some notes about the Xen XSA-122 bug. https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2015/may/some-notes-about-the-xen-xsa-122-bug/, 2015.

Google Scholar

[13]

Joshua LeVasseur, Volkmar Uhlig, Matthew Chapman, Peter Chubb, Ben Leslie, and Gernot Heiser. Pre-virtualization: Slashing the cost of virtualization. Technical Report 2005-30, Fakultät für Informatik, Universität Karlsruhe (TH), 2005.

Google Scholar

[14]

XenParavirtOps. https://wiki.xenproject.org/wiki/XenParavirtOps, 2016.

Google Scholar

[15]

Sanjay Kumar, Himanshu Raj, Karsten Schwan, and Ivan Ganev. Rearchitecting VMMs for multicore systems: The sidecore approach. In Workshop on Interaction between Opearting Systems & Computer Architecture (WIOSCA), 2007.

Google Scholar

[16]

Rusty Russell. virtio: towards a de-facto standard for virtual I/O devices. ACM SIGOPS Operating Systems Review (OSR), 42(5):95--103, 2008.

Digital Library

Google Scholar

[17]

Stephen T. Jones, Andrea C. Arpaci-Dusseau, and Remzi H. Arpaci-Dusseau. Antfarm: tracking processes in a virtual machine environment. In USENIX Annual Technical Conference (ATC), page 1, 2006.

Digital Library

Google Scholar

[18]

Nadav Amit, Dan Tsafrir, and Assaf Schuster. VSwapper: A memory swapper for virtualized environments. In ACM Architectural Support for Programming Languages & Operating Systems (ASPLOS), pages 349--366, 2014.

Digital Library

Google Scholar

[19]

Ole Agesen, Jim Mattson, Radu Rugina, and Jeffrey Sheldon. Software techniques for avoiding hardware virtualization exits. In USENIX Annual Technical Conference (ATC), 2011.

Digital Library

Google Scholar

[20]

Gleb Natapov. Asynchronous page faults - AIX did it. www.linux-kvm.org/wiki/images/a/ac/2010-forum-Async-page-faults.pdf.

Google Scholar

[21]

Kapil Arya, Yury Baskakov, and Alex Garthwaite. Tesseract: reconciling guest I/O and hypervisor swapping in a VM. In ACM SIGPLAN Notices, volume 49, pages 15--28. ACM, 2014.

Google Scholar

[22]

Balbir Singh. Page/slab cache control in a virtualized environment. In Ottawa Linux Symposium (OLS), volume 1, pages 252--262, 2010.

Google Scholar

[23]

Dan Magen heimer, Chris Mason, Dave McCracken, and Kurt Hackel. Transcendent memory and Linux. In Ottawa Linux Symposium (OLS), pages 191--200, 2009.

Google Scholar

[24]

Martin Schwidefsky, Hubertus Franke, Ray Mansell, Himanshu Raj, Damian Osisek, and JongHyuk Choi. Collaborative memory management in hosted Linux environments. In Ottawa Linux Symposium (OLS), volume 2, pages 313--328, 2006.

Google Scholar

[25]

Prateek Sharma and Purushottam Kulkarni. Singleton: system-wide page deduplication in virtual environments. In International Symposium on High Performance Distributed Computer (HPDC), pages 15--26, 2012.

Digital Library

Google Scholar

[26]

Orathai Sukwong and Hyong S. Kim. Is co-scheduling too expensive for SMP VMs? In ACM SIGOPS European Conference on Computer Systems (EuroSys), pages 257--272, 2011.

Digital Library

Google Scholar

[27]

Thomas Friebel. How to deal with lock-holder preemption. Xen Summit http://www.amd64.org/fileadmin/user_upload/pub/LHP-slides.pdf, 2008.

Google Scholar

[28]

Sanidhya Kashyap, Changwoo Min, and Taesoo Kim. Opportunistic spinlocks: Achieving virtual machine scalability in the clouds. ACM SIGOPS Operating Systems Review (OSR), 50(1):9--16, 2016.

Digital Library

Google Scholar

[29]

Jiannan Ouyang, John R Lange, and Haoqiang Zheng. Shoot4U: Using VMM assists to optimize TLB operations on preempted vCPUs. In ACM/USENIX International Conference on Virtual Execution Environments (VEE), 2016.

Google Scholar

[30]

Joergen Gross. Patch: x86: reduce paravirtualized spinlock overhead. Xen mailing list, https://lists.gt.net/xen/devel/379478, 2015.

Google Scholar

[31]

Chuliang Weng, Zhigang Wang, Minglu Li, and Xinda Lu. The hybrid scheduling framework for virtual machine systems. In ACM/USENIX International Conference on Virtual Execution Environments (VEE), pages 111--120, 2009.

Digital Library

Google Scholar

[32]

Xiang Song, Jicheng Shi, Haibo Chen, and Binyu Zang. Schedule processes, not VCPUs. In ACM Asia-Pacific Workshop on Systems (APSys), 2013.

Digital Library

Google Scholar

[33]

Douglas B Terry, Vijayan Prabhakaran, Ramakrishna Kotla, Mahesh Balakrishnan, Marcos K Aguilera, and Hussam Abu-Libdeh. Consistency-based service level agreements for cloud storage. In Proceedings of the Twenty-Fourth ACM Symposium on Operating Systems Principles, pages 309--324. ACM, 2013.

Digital Library

Google Scholar

[34]

Jiuxing Liu. Evaluating standard-based self-virtualizing devices: A performance study on 10 GbE NICs with SR-IOV support. In IEEE International Parallel & Distributed Processing Symposium (IPDPS), 2010.

Crossref

Google Scholar

[35]

George C Necula and Peter Lee. Safe kernel extensions without runtime checking. In USENIX Symposium on Operating Systems Design & Implementation (OSDI), volume 96, pages 229--243, 1996.

Digital Library

Google Scholar

[36]

Feng Zhou, Jeremy Condit, Zachary Anderson, Ilya Bagrak, Rob Ennals, Matthew Harren, George Necula, and Eric Brewer. SafeDrive: Safe and recoverable extensions using language-based techniques. In USENIX Symposium on Operating Systems Design & Implementation (OSDI), pages 45--60, 2006.

Digital Library

Google Scholar

[37]

Úlfar Erlingsson, Martín Abadi, MichaelVrable, MihaiBudiu, and GeorgeC Necula. XFI: Software guards for system address spaces. In USENIX Symposium on Operating Systems Design & Implementation (OSDI), pages 75--88, 2006.

Google Scholar

[38]

Miguel Castro, Manuel Costa, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Paul Barham, and Richard Black. Fast byte-granularity software fault isolation. In ACM Symposium on Operating Systems Principles (SOSP), pages 45--58, 2009.

Digital Library

Google Scholar

[39]

Jonathan Corbet. Extending extended BPF. LWN.nethttps://lwn.net/Articles/603983/, 2014.

Google Scholar

[40]

Keegan McAllister.

Google Scholar

[41]

Elena Reshetova, Filippo Bonazzi, and N. Asokan. Randomization cant stop BPF JIT spray. In Black Hat Europe, 2016.

Google Scholar

[42]

Xiaolin Wang, Jiarui Zang, Zhenlin Wang, Yingwei Luo, and Xiaoming Li. Selective hardware/software memory virtualization. In ACM/USENIX International Conference on Virtual Execution Environments (VEE), pages 217--226, 2011.

Digital Library

Google Scholar

[43]

Henry Wong. TLB and pagewalk coherence in x86 processors. http://blog.stuffedcow.net/2015/08/pagewalk-coherence/, 2016.

Google Scholar

[44]

Avi Kivity, Yaniv Kamay, Dor Laor, Uri Lublin, and Anthony Liguori. KVM: the Linux Virtual Machine Monitor. Ottawa Linux Symposium (OLS), 2007.

Google Scholar

[45]

Alexey Kopytov. SysBench: a system performance benchmark. sysbench.sourceforge.net.

Google Scholar

Cited By

View all

Qiu YLiu HAnderson TLin YChen AAngel SKasikci BKohler E(2021)Toward reconfigurable kernel datapaths with learned optimizationsProceedings of the Workshop on Hot Topics in Operating Systems10.1145/3458336.3465288(175-182)Online publication date: 1-Jun-2021
https://dl.acm.org/doi/10.1145/3458336.3465288
Gershuni EAmit NGurfinkel ANarodytska NNavas JRinetzky NRyzhyk LSagiv MMcKinley KFisher K(2019)Simple and precise static analysis of untrusted Linux kernel extensionsProceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation10.1145/3314221.3314590(1069-1084)Online publication date: 8-Jun-2019
https://dl.acm.org/doi/10.1145/3314221.3314590

Recommendations

Efficient Java exception handling in just-in-time compilation
Research Articles

Java uses exceptions to provide elegant error handling capabilities during program execution. However, the presence of exception handlers complicates the job of the just-in-time (JIT) compiler, while exceptions are rarely used in most programs. This ...
A posteriori compliance control
SACMAT '07: Proceedings of the 12th ACM symposium on Access control models and technologies

While preventative policy enforcement mechanisms can provide theoretical guarantees that policy is correctly enforced, they have limitations in practice. They are inflexible when unanticipated circumstances arise, and most are either inflexible with ...
PoCo: A Language for Specifying Obligation-Based Policy Compositions
ICSCA '20: Proceedings of the 2020 9th International Conference on Software and Computer Applications

Existing security-policy-specification languages allow users to specify obligations, but challenges remain in the composition of complex obligations, including effective approaches for resolving conflicts between policies and obligations and allowing ...

Comments

Information & Contributors

Information

Published In

HotOS '17: Proceedings of the 16th Workshop on Hot Topics in Operating Systems

May 2017

185 pages

ISBN:9781450350686

DOI:10.1145/3102980

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 07 May 2017

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Qualifiers

Research-article
Research
Refereed limited

Conference

HotOS '17

Sponsor:

SIGOPS

HotOS '17: Workshop on Hot Topics in Operating Systems

May 7 - 10, 2017

BC, Whistler, Canada

Upcoming Conference

HOTOS '25

Sponsor:
sigops

Workshop on Hot Topics in Operating Systems

May 14 - 16, 2025

Banff or Lake Louise , AB , Canada

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
348
Total Downloads

Downloads (Last 12 months)6
Downloads (Last 6 weeks)1

Reflects downloads up to 09 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Qiu YLiu HAnderson TLin YChen AAngel SKasikci BKohler E(2021)Toward reconfigurable kernel datapaths with learned optimizationsProceedings of the Workshop on Hot Topics in Operating Systems10.1145/3458336.3465288(175-182)Online publication date: 1-Jun-2021
https://dl.acm.org/doi/10.1145/3458336.3465288
Gershuni EAmit NGurfinkel ANarodytska NNavas JRinetzky NRyzhyk LSagiv MMcKinley KFisher K(2019)Simple and precise static analysis of untrusted Linux kernel extensionsProceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation10.1145/3314221.3314590(1069-1084)Online publication date: 8-Jun-2019
https://dl.acm.org/doi/10.1145/3314221.3314590

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Recommendations

Efficient Java exception handling in just-in-time compilation

A posteriori compliance control

PoCo: A Language for Specifying Obligation-Based Policy Compositions

Comments

Published In

Sponsors

Publisher

Publication History

Permissions

Check for updates

Qualifiers

Conference

Upcoming Conference

Other Metrics

Article Metrics

Other Metrics

Cited By

Login options

Full Access

PDF

eReader

References

Cited By

Recommendations

Efficient Java exception handling in just-in-time compilation

A posteriori compliance control

PoCo: A Language for Specifying Obligation-Based Policy Compositions

Comments

Information

Published In

Sponsors

Publisher

Publication History

Permissions

Check for updates

Qualifiers

Conference

Upcoming Conference

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

Get Access

Login options

Full Access

View options

PDF

eReader

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations