Главная
Study mode:
on
1
Intro
2
Driver vulnerabilities
3
Driver isolation architecture
4
Isolation performance
5
Challenge: Large interface boundary
6
Challenge: Complex data structures
7
Challenge: Low-level kernel/C idioms
8
Challenge: Concurrency primitives
9
KSplit design choices
10
Shared field analysis
11
Program Dependence Graph
12
Boundary Data Access Analysis: exa
13
Atomic Region Analysis
14
Infer marshaling requirements for po
15
Classify Pointers with Nescheck
16
Evaluation
17
Ixgbe: data synchronization optimization
18
Ixgbe: synchronization primitives
19
Ixgbe: pointer classification
20
Ixgbe: Manual work
21
Manual Work average across isolated
22
Performance overhead: memcached
23
Conclusions
Description:
Explore an innovative framework for automating device driver isolation in modern kernels through this OSDI '22 conference talk. Dive into the challenges of isolating device drivers and learn how KSplit addresses them by performing automated analyses on unmodified kernel and driver source code. Discover how KSplit identifies shared state between the kernel and driver, computes synchronization requirements for efficient isolation, and handles ambiguous pointers. Examine the evaluation of KSplit on nine Linux kernel subsystems, covering 354 device drivers, with a focus on the complex Ixgbe driver. Gain insights into the practical application of KSplit, including the minimal manual changes required and its potential for automating key tasks in driver isolation. Understand the performance implications and the broader impact of this approach on kernel security and reliability.

KSplit - Automating Device Driver Isolation

USENIX
Add to list
0:00 / 0:00