Commodity operating systems execute core kernel subsystems in a single address space
along with hundreds of dynamically loaded extensions and device drivers. Lack of isolation …

Modern operating systems are monolithic. Today, however, lack of isolation is one of the
main factors undermining security of the kernel. Inherent complexity of the kernel code and …

A recent surge of security attacks has triggered a renewed interest in hardware support for
isolation. Extended page table switching with VMFUNC, memory protection keys (MPK), and …

Methods, apparatus, Systems, and computer program prod ucts for invoking remote process
calls and facilitating inter process communications in a protected memory system employ a …

This thesis marks the end of a remarkable period in my life for which I am indebted to many
people. First and foremost, I would like to thank my mentors, Andy Tanenbaum and Herbert …

The manner in which data is represented, accessed and transmitted has an affect upon the
efficiency of any computing system. In the domain of high performance computing, traditional …

The rapid proliferation of mobile handheld computing devices, such as cellphones and
PDAs, has led to an unfortunate conflict. On one hand, we have light mobile computing …

Interface definition languages are omnipresent in microkernel-based operating systems for
providing a time-tested solution for realizing communication between user-level …

We present a literature survey of commodity x86 hardware virtualization. We also consider
virtualization security from two viewpoints: we first develop a security model for virtualization …

Component-based programming systems have shown themselves to be a natural way of
constructing extensible software. Well-defined interfaces, encapsulation, late binding and …