Efficient software-based fault isolation

摘要: One way to provide fault isolation among cooperating software modules is place each in its own address space. However, for tightly-coupled modules, this solution incurs prohibitive context switch overhead. In paper, we present a approach implementing within single space.Our has two parts. First, load the code and data distrusted module into do main, logically separate portion of application's Second, modify object prevent it from writing or jumping an outside domain. Both these operations are portable programming language independent.Our poses tradeoff relative hardware isolation: substantially faster communication between domains, at cost slightly increased execution time modules. We demonstrate that frequently communicating rather than can improve end-to-end application performance.