CODOMs: Protecting software with Code-centric memory Domains

Lluis Vilanova, Muli Ben-Yehuda, Nacho Navarro, Yoav Etsion, Mateo Valero

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Today's complex software systems are neither secure nor reliable. The rudimentary software protection primitives provided by current hardware forces systems to run many distrusting software components (e.g., procedures, libraries, plugins, modules) in the same protection domain, or otherwise suffer degraded performance from address space switches. We present CODOMs (COde-centric memory DOMains), a novel architecture that can provide finer-grained isolation between software components with effectively zero run-time overhead, all at a fraction of the complexity of other approaches. An implementation of CODOMs in a cycle-accurate full-system x86 simulator demonstrates that with the right hardware support, finer-grained protection and run-time performance can peacefully coexist.

Original languageEnglish
Title of host publication41st Annual International Symposium on Computer Architecture, ISCA 2014 - Conference Proceedings
Pages469-480
Number of pages12
DOIs
StatePublished - 2014
Event2014 ACM/IEEE 41st International Symposium on Computer Architecture, ISCA 2014 - Minneapolis, MN, United States
Duration: 14 Jun 201418 Jun 2014

Publication series

NameProceedings - International Symposium on Computer Architecture

Conference

Conference2014 ACM/IEEE 41st International Symposium on Computer Architecture, ISCA 2014
Country/TerritoryUnited States
CityMinneapolis, MN
Period14/06/1418/06/14

All Science Journal Classification (ASJC) codes

  • Hardware and Architecture

Fingerprint

Dive into the research topics of 'CODOMs: Protecting software with Code-centric memory Domains'. Together they form a unique fingerprint.

Cite this