Labels and event processes in the Asbestos operating system

摘要: Asbestos, a new operating system, provides novel labeling and isolation mechanisms that help contain the effects of exploitable software flaws. Applications can express wide range policies with Asbestos's kernel-enforced labels, including controls on interprocess communication system-wide information flow. A event process abstraction defines lightweight, isolated contexts within single process, allowing one to act behalf multiple users while preventing it from leaking any user's data others. Web server demonstration application uses these primitives isolate private user data. Since untrusted workers respond client requests are constrained by exploited cannot directly expose except as allowed policy. The requires 1.4 memory pages per for up 145,000 achieves connection rates similar Apache, demonstrating additional security come at an acceptable cost.