Verifiable secure operating system software
Published 1 January 1974Open access
Gerald J. Popek, Charles S. Kline
Citations49
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
While the desire for reliable security in multiuser computer systems has grown significantly, the computing community's knowledge of how to provide the requisite protection is still inadequate.
Abstract
While the desire for reliable security in multiuser computer systems has grown significantly, the computing community's knowledge of how to provide the requisite protection is still inadequate. Security is a "weak link" phenomenon; one link whose condition is unsatisfactory is the operating system software. It has often been pointed out that currently "no protection system implementation of any major multiuser computer system is known to have withstood serious attempts at circumvention by determined and skilled users." The community is replete with apocryphal claims of secure systems that inevitably have failed.
Keywords
Computer Science
Communications of the ACMFormal requirements for virtualizable third generation architectures
949 Citations1974Gerald J. Popek, Robert P. Goldberg
A model of a third-generation-like computer system is developed and formal techniques are used to derive precise sufficient conditions to test whether such an architecture can support virtual machines.
Communications of the ACMHYDRA
491 Citations1974W. Wulf, Ellis Cohen +5 more
This paper describes the design philosophy of HYDRA—the kernel of an operating system for C.mmp, the Carnegie-Mellon Multi-Mini-Processor, through the introduction of a generalized notion of “resource,” both physical and virtual, called an “object.”
Computer network development to achieve resource sharing
354 Citations1970Lawrence G. Roberts, Barry D. Wessler
An overview of the need for a computer network, the requirements of a computer communication system, a description of the properties of the communication system chosen, and the potential uses of such a network are described.
Communications of the ACMThe nucleus of a multiprogramming system
335 Citations1970Per Brinch Hansen
This paper describes the philosophy and structure of a multi-programming system that can be extended with a hierarchy of operating systems to suit diverse requirements of program scheduling and resource allocation.
Protection
224 Citations1971G. Scott Graham, Peter J. Denning
The protection mechanisms of computer systems control the access to objects, especially information objects, and the range of responsibilities of these mechanisms includes at one extreme completely isolating executing programs from each other, and at the other extreme permitting complete cooperation and shared access among executing programs.
Architecture of virtual machines
175 Citations1973Robert P. Goldberg
By providing an efficient facsimile of one or more complete computer systems, virtual machines have extended the multi-access, multi-programming, multi -processing systems of the past decade to be multi-environment systems as well.
Dynamic protection structures
166 Citations1969Butler Lampson
This paper deals with one aspect of the subject, which might be called the meta-theory of protection systems: how can the information which specifies protection and authorizes access, itself be protected and manipulated.
Architecture of virtual machines
93 Citations1973R. P. Goldberg
A model which represents the addressing of resources by processes executing on a virtual machine is developed and a general approach for implementing virtual machines which follows directly from the model is introduced.
On measured behavior of the ARPA network
85 Citations1974Leonard Kleinrock, W. E. Naylor
The purpose of this paper is to present and evaluate the results of recent measurements of the ARPA network, and to describe a particular experiment, which consisted of data collection over a continuous seven day period.
ACM SIGOPS Operating Systems ReviewFormal requirements for virtualizable third generation architectures
68 Citations1973Gerald J. Popek, Robert P. Goldberg
Protection and control of information sharing in multics
50 Citations1973Jerome H. Saltzer
Seven design principles help provide insight into the tradeoffs among different possible designs of mechanisms to control sharing of information in the Multics system.
The evolution of virtual machine architecture
49 Citations1973Jeffrey P. Buzen, Ugo O. Gagliardi
In the early 1960's two major evolutionary steps were taken with regard to computing systems architecture: the emergence of I/O processors and the use of multiprogramming to improve resource utilization and overall performance.
ACM SIGOPS Operating Systems ReviewProtection and control of information sharing in multics
25 Citations1973Jerome H. Saltzer