集成保护和分散式抽象的可扩展操作系统

Protection and abstraction are traditional advantages of operating system that provide for application-pro-grammer. How to change Protection and abstraction in order to ensure the new Extensible Operating Systems havinghigh performance and good flexibility is the most crucial problem to build Extensible Operating Systems. We bringforward a new approach--Protected Decentralizing abstractions, integrating Decentralizing OS abstractions and Pro-tected abstractions, and use it to implement a prototype library operating system -- EXLinux/LibOS . A novel wayto safely share user-level abstractions in the prototype, enables unprivileged and untrusted applications to be definedand securely shared generic abstractions at run-time ,in which the same abstraction is invoked repeatedly.

基于保护分散式抽象方法的可扩展操作系统设计

为了提供高性能和柔性,操作系统内核应该只保留最小的功能。今天的操作系统大而低效、更缺乏柔性。我们提出了保护分散式操作系统抽象方法,集成了分散式操作系统抽象和保护抽象的方法,这种新的安全方式在分散式抽象系统里共享用户级的抽象,能够使非特权、不信任的任务在运行时定义并安全的共享生成的抽象。它在对相同的抽象重复调用时,通过消除上下文切换的需求和对通常情况进行优化,可获得较好的柔性。保护分散式抽象的设计强调简单并正确性证明,易于理解和使用。文章介绍了保护分散式操作系统抽象方法,并运用该方法开发了一个基于共享库的原型操作系统——EXLinux/LibOS。