检索结果-内蒙古大学图书馆

4th symposium on operating systems design and implementation (osdi 2000)

作者： Howell, J Kotz, D Consystant Design Technologies Department of Computer Science Dartmouth College

ISBN: (纸本)1880446162

Many boundaries impede the how of authorization information, forcing applications that span those boundaries into hop-by-hop approaches to authorization. We present a unified approach to authorization. Our approach allows applications that span administrative, network, abstraction, and protocol boundaries to understand the end-to-end authority that justifies any given request. the resulting distributed systems are more secure and easier to audit. We describe boundaries that can interfere with end-to-end authorization, and outline our unified approach. We describe the system we built and the applications we adapted to use our unified authorization system, and measure its costs. We conclude that our system is a practical approach to the desirable goal of end-to-end authorization.

关键词：

来源：评论

学校读者我要写书评

暂无评论

design and evaluation of a continuous consistency model for replicated services 4

Design and evaluation of a continuous consistency model for ...

引用

4th conference on symposium on operating system design and implementation, osdi 2000

作者： Yu, Haifeng Vahdat, Amin Computer Science Department Duke University DurhamNC27708 United States

the tradeoffs between consistency, performance, and availability are well understood. Traditionally, however, designers of replicated systems have been forced to choose from either strong consistency guarantees or none at all. this paper explores the semantic space between traditional strong and optimistic consistency models for replicated services. We argue that an important class of applications can tolerate relaxed consistency, but benefit from bounding the maximum rate of inconsistent access in an application-specific manner. thus, we develop a set of metrics, Numerical Error, Order Error, and Staleness, to capture the consistency spectrum. We then present the design and implementation of TACT, a middleware layer that enforces arbitrary consistency bounds among replicas using these metrics. Finally, we show that three replicated applications demonstrate significant semantic and performance benefits from using our framework.

关键词： Semantics

来源：评论

学校读者我要写书评

暂无评论

How to build a trusted database system on untrusted storage 4

How to build a trusted database system on untrusted storage

引用

4th symposium on operating systems design and implementation (osdi 2000)

作者： Maheshwari, U Vingralek, R Shapiro, W InterTrust Technol Corp Star Lab Santa Clara CA 95054 USA

ISBN: (纸本)1880446162

Some emerging applications require programs to maintain sensitive state on untrusted hosts. this paper presents the architecture and implementation of a trusted database system, TDB, which leverages a small amount of trusted storage to protect a scalable amount of untrusted storage. the database is encrypted and validated against a collision-resistant hash kept in trusted storage, so untrusted programs cannot: read the database or modify it undetectably. TDB integrates encryption and hashing with a low-level data model, which protects data and metadata uniformly, unlike systems built on top of a conventional database system. the implementation exploits synergies between hashing and log-structured storage. Preliminary performance results show that TDB outperforms an off-the-shelf embedded database system, thus supporting the suitability of the TDB architecture.

关键词： Database systems

来源：评论

学校读者我要写书评

暂无评论

system support for bandwidth management and content adaptation in Internet applications 4

System support for bandwidth management and content adaptati...

引用

4th symposium on operating systems design and implementation (osdi 2000)

作者： Andersen, D Bansal, D Curtis, D Seshan, S Balakrishnan, H MIT Comp Sci Lab Cambridge MA 02139 USA

ISBN: (纸本)1880446162

this paper describes the implementation and evaluation of an operating system module, the Congestion Manager (CM), which provides integrated network flow management and exports a convenient programming interface that allows applications to be notified of, and adapt to, changing network conditions. We describe the API by which applications interface with the CM, and the architectural considerations that factored into the design. To evaluate the architecture and API, we describe our implementations of TCP;a streaming layered audio/video application;and an interactive audio application using the GM, and show that they achieve adaptive behavior without incurring much end-system overhead. All flows including TCP benefit from the sharing of congestion information, and applications am able to incorporate new functionality such as congestion control and adaptive behavior.

关键词： Application programming interfaces (API)

来源：评论

学校读者我要写书评

暂无评论

Proactive recovery in a Byzantine-fault-tolerant system 4

Proactive recovery in a Byzantine-fault-tolerant system

引用

4th symposium on operating systems design and implementation (osdi 2000)

作者： Castro, M Liskov, B MIT Comp Sci Lab Cambridge MA 02139 USA

ISBN: (纸本)1880446162

this paper describes an asynchronous state-machine replication system that tolerates Byzantine faults, which can be caused by malicious attacks or software errors. Our system is the first to recover Byzantine-faulty replicas proactively and it performs well because it uses symmetric rather than public-key cryptography for authentication. the recovery mechanism allows us to tolerate any number of faults over the lifetime of the system provided fewer than 1/3 of the replicas become faulty within a window of vulnerability that is small under normal conditions. the window may increase under a denial-of-service attack but we can detect and respond to such attacks. the paper presents results of experiments showing that overall performance is good and that even a small window of vulnerability has little impact on service latency.

关键词： Public key cryptography

来源：评论

学校读者我要写书评

暂无评论

Fast and secure distributed read-only file system 4

Fast and secure distributed read-only file system

引用

4th symposium on operating system design and implementation, osdi 2000

作者： Fu, Kevin Kaashoek, M. Frans Mazières, David MIT Laboratory for Computer Science 545 Technology Square CambridgeMA02139 United States

Internet users increasingly rely on publicly available data for everything from software installation to investment decisions. Unfortunately, the vast majority of public content on the Internet comes with no integrity or authenticity guarantees. this paper presents the self-certifying read-only file system, a content distribution system providing secure, scalable access to public, read-only data. the read-only file system makes the security of published content independent from that of the distribution infrastructure. In a secure area (perhaps off-line), a publisher creates a digitally-signed database out of a file system's contents. the publisher then replicates the database on untrusted content-distribution servers, allowing for high availability. the read-only file system protocol furthermore pushes the cryptographic cost of content verification entirely onto clients, allowing servers to scale to a large number of clients. Measurements of an implementation show that an individual server running on a 550 Mhz Pentium III with FreeBSD can support 1,012 connections per second and 300 concurrent clients compiling a large software package. © 2000 E-flow ACM (Association for Computing Machinery).All right reserved.

关键词： Investments

来源：评论

学校读者我要写书评

暂无评论

Fast and secure distributed read-only file system

引用

ACM TRANSACTIONS ON COMPUTER systemS 2002年第1期20卷 1-24页

作者： Fu, K Kaashoek, MF Mazières, D MIT Comp Sci Lab Cambridge MA 02139 USA NYU Dept Comp Sci New York NY 10012 USA

Internet users increasingly rely on publicly available data for everything from software installation to investment decisions. Unfortunately, the vast majority of public content on the Internet comes with no integrity or authenticity guarantees. this paper presents the self-certifying read-only file system, a content distribution system providing secure, scalable access to public, read-only data. the read-only file system makes the security of published content independent from that of the distribution infrastructure. In a secure area (perhaps off-line), a publisher creates a digitally signed database out of a file system's contents. the publisher then replicates the database on untrusted content-distribution servers, allowing for high availability. the read-only file system avoids performing any cryptographic operations on servers and keeps the overhead of cryptography low on clients, allowing servers to scale to a large number of clients. Measurements of an implementation show that an individual server running on a 550-Mhz Pentium III with FreeBSD can support 1,012 connections per second and 300 concurrent clients compiling a large software package.

关键词： design management performance security file systems read-only security

来源：评论

学校读者我要写书评

暂无评论

Checking system rules using system-specific, programmer-written compiler extensions 4

Checking system rules using system-specific, programmer-writ...

引用

4th symposium on operating systems design and implementation (osdi 2000)

作者： Engler, D Chelf, B Chou, A Hallem, S Stanford Univ Comp Syst Lab Stanford CA 94305 USA

ISBN: (纸本)1880446162

systems software such as OS kernels, embedded systems, and libraries must obey many rules for both correctness and performance. Common examples include "accesses to variable A must be guarded by lock B," "system calls must check user pointers for validity before using them," and "message handlers should free their buffers as quickly as possible to allow greater parallelism." Unfortunately, adherence to these rules is largely unchecked. this paper attacks this problem by showing how system implementors can use meta-level compilation (MC) to write simple, system-specific compiler extensions that automatically check their code for rule violations. By melding domain-specific knowledge with the automatic machinery of compilers, MC brings the benefits of language-level checking and optimizing to the higher, "meta" level of the systems implemented in these languages. this paper demonstrates the effectiveness of the MC approach by applying it to four complex, real systems: Linux, OpenBSD, the Xok exokernel, and the FLASH machine's embedded software. MC extensions found roughly 500 errors in these systems and led to numerous kernel patches. Most extensions were less than a hundred lines of code and written by implementers who had a limited understanding of the systems checked.

关键词： Machinery

来源：评论

学校读者我要写书评

暂无评论

GoJournal: a verified, concurrent, crash-safe journaling system 15

GoJournal: a verified, concurrent, crash-safe journaling sys...

引用

USENIX Annual Technical conference / 15th USENIX symposium on operating systems design and implementation (osdi)

作者： Chajed, Tej Tassarotti, Joseph theng, Mark Jung, Ralf Kaashoek, M. Frans Zeldovich, Nickolai MIT CSAIL Cambridge MA 02139 USA Boston Coll Newton MA USA MPI SWS Saarbrucken Germany

ISBN: (纸本)9781939133229

the main contribution of this paper is GoJournal, a verified, concurrent journaling system that provides atomicity for storage applications, together with Perennial 2.0, a framework for formally specifying and verifying concurrent crash-safe systems. GoJournal's goal is to bring the advantages of journaling for code to specs and proofs. Perennial 2.0 makes this possible by introducing several techniques to formalize GoJournal's specification and to manage the complexity in the proof of GoJournal's implementation. Lifting predicates and crash framing make the specification easy to use for developers, and logically atomic crash specifications allow for modular reasoning in GoJournal, making the proof tractable despite complex concurrency and crash interleavings. GoJournal is implemented in Go, and Perennial is implemented in the Coq proof assistant. While verifying GoJournal, we found one serious concurrency bug, even though GoJournal has many unit tests. We built a functional NFSv3 server, called GoNFS, to use GoJournal. Performance experiments show that GoNFS provides similar performance (e.g., at least 90% throughput across several benchmarks on an NVMe disk) to Linux's NFS server exporting an ext4 file system, suggesting that GoJournal is a competitive journaling system. We also verified a simple NFS server using GoJournal's specs, which confirms that they are helpful for application verification: a significant part of the proof doesn't have to consider concurrency and crashes.

关键词： Specifications

来源：评论

学校读者我要写书评

暂无评论

Global Memory Management for a Multi Computer system 4

Global Memory Management for a Multi Computer System

引用

4th Usenix Windows systems symposium

作者： Milojicic, D Hoyle, S Messer, A Munoz, A Russell, L Wylegala, T Vellanki, V Childs, S Georgia Tech HP Labs Atlanta GA USA

ISBN: (纸本)1880446200

In this paper, we discuss the design and implementation of fault-aware Global Memory Management (GMM) for a multi-kernel architecture. Scalability of today's systems is limited by SMP hardware, as well as by the underlying commodity operating systems (OS), such as Microsoft Windows or Linux. High availability is limited by insufficiently robust software and by hardware failures. Improving scalability and high availability are the main motivations for a multikernel architecture, and GMM plays a key role in achieving this. In our design, we extend the underlying OS with GMM supported by a set of software failure recovery modules in the form of device drivers. While the underlying OS manages the virtual address space and the local physical address space, the GMM module manages the global physical address space. We describe the GMM design, prototype implementation, and the use of GMM.

关键词： Scalability

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：