Native Client: A Sandbox for Portable, Untrusted x86 Native Code

摘要: This paper describes the design, implementation and evaluation of Native Client, a sandbox for untrusted x86 native code. Client aims to give browser-based applications computational performance without compromising safety. uses software fault isolation secure runtime direct system interaction side effects through interfaces managed by Client. provides operating portability binary code while supporting performance-oriented features generally absent from web application programming environments, such as thread support, instruction set extensions SSE, use compiler intrinsics hand-coded assembler. We combine these properties in an open architecture that encourages community review 3rd-party tools.