Applications in microkernel systems often rely on several service
layers. These dependencies cause undesirable interaction between
unrelated tasks. For instance, an application could stale another
one by depleting the memory of a commonly used server
(denial-of-service attack). Servers that use client-provided
resources to provide their service can eliminate these couplings.
In the particular case of memory, the L4 microkernel already
offers memory mapping mechanisms to exchange memory access rights
between tasks. However, the server still has to deal with the
issue of resource revocation as well as other design constraints
that come with memory trading. During this presentation, I will
present two memory trading mechanisms (a direct one and an
indirect one) and discuss the specific constraints that they
entail for server design.
Revocability of Resources
Verteidigung der Diplom-Arbeit