From: Alexander G Balikov (alexgb_at_u.washington.edu)
Date: Mon Jan 12 2004 - 17:33:16 PST
In this paper the authors present the design of the kernel of a multiprogramming system developed at Carnegie-Mellon University. In their design the kernel provides very basic functionality for resource management and protection, but still powerfull enough to implement an operating system on top of it.
I liked this paper very much. Even though the authors did not try to present a theory about designing multiprogramming systems, their presentation based on the design of this particular system was abstract enough and interesting to read. I liked the phrase "Protection is a mechanism and security is a policy". By clearly distinguishing between mechanisms and policies it seemed to me that they were successful in implementing very powerful and not limiting kernel.
The description of the capability lists and their usage was clear. I liked the fact that the protection mechanism could be used to implement code access control - notion which I saw for a first time in Microsoft's .NET Framework and thought to be innovative - well, this paper is 20 years old.
This archive was generated by hypermail 2.1.6 : Mon Jan 12 2004 - 17:33:17 PST