Article

Design and implementation of a kernel resource protector for robustness of Linux module programming

Authors:

Jongmoo Choi,

Seungjae Baek,

Sung Y. ShinAuthors Info & Claims

SAC '06: Proceedings of the 2006 ACM symposium on Applied computing

Pages 1477 - 1481

https://doi.org/10.1145/1141277.1141621

Published: 23 April 2006 Publication History

Get Access

Abstract

Loadable kernel modules supported by Linux provides lots of benefits such as a small-sized kernel, on-demand loading, and easy software upgrading. However, since modules are executed in a privileged mode, trivial misuses in a module may cause critical system halts or deadlock situations. This paper presents a kernel resource protector which prevents kernel from faults generated by modules. The protector models the system in two objects: module object and resource object. By observing the interrelations between the two objects, the protector can detect misuses of modules and take actions to resolve the erroneous situations. Implementation study has shown that the protector can find out memory leaks wasted by modules and can reclaim leaks without degrading system performance. The proposed protector makes Linux more robust, which is required indispensably in the system equipped with NVRAM (Non Volatile RAM) such as FRAM and PRAM.

References

[1]

William Stalling, "Operating Systems: Internals and Design Principles", 5th Edition, Pearson Prentice Hall, 2004.

Digital Library

Google Scholar

[2]

Daniel P. Bovet and Marco Cesati, "Understanding the Linux Kernel", 2nd Edition, O'Reilly, 2002.

Digital Library

Google Scholar

[3]

Robert Love, "Linux Kernel Development", Developer's Library, 2003.

Digital Library

Google Scholar

[4]

Linux Cross Reference, http://lxr.linux.no.

Google Scholar

[5]

Cal Erickson, "Memory Leak Detection in Embedded System", http://www.linuxjournal.com

Digital Library

Google Scholar

[6]

SecurityFocus, "Linux Kernel Netfilter Memory Leak Local DOS Vulnerability", Error! Hyperlink reference not valid.

Google Scholar

[7]

David Evans, "Static Detection of Dynamic Memory Errors", PLDI 1996, http://www.cs.virginia.edu/~evans/

Digital Library

Google Scholar

[8]

Jim Patrick, "Handling memory leaks in JAVA programs", http://www-106.ibm.com/developerworks/java/library/j-leaks/

Google Scholar

[9]

Memory Leak Checker, http://www.thefreecountry.com/sourcecode/

Google Scholar

Cited By

View all

Bai JWang YLiu HHu S(2015)Automated resource release in device driversProceedings of the 2015 IEEE 26th International Symposium on Software Reliability Engineering (ISSRE)10.1109/ISSRE.2015.7381811(172-182)Online publication date: 2-Nov-2015
https://dl.acm.org/doi/10.1109/ISSRE.2015.7381811
Zhang KTian HRuan LXiao LLi YLiu Y(2013)A Framework for Porting Linux OS to a cc-NUMA Server Based on Loongson ProcessorsEmerging Technologies for Information Systems, Computing, and Management10.1007/978-1-4614-7010-6_25(215-222)Online publication date: 2013
https://doi.org/10.1007/978-1-4614-7010-6_25

Index Terms

Design and implementation of a kernel resource protector for robustness of Linux module programming

Recommendations

Linux kernel vulnerabilities: state-of-the-art defenses and open problems
APSys '11: Proceedings of the Second Asia-Pacific Workshop on Systems

Avoiding kernel vulnerabilities is critical to achieving security of many systems, because the kernel is often part of the trusted computing base. This paper evaluates the current state-of-the-art with respect to kernel protection techniques, by ...
Hotswapping Linux kernel modules

Contemporary operating system kernels are able to improve their functionality by installing kernel extensions at runtime. However, when an existing kernel extension needs to be upgraded, it must be completely removed before the new kernel extension is ...
Using kernel hypervisors to secure applications
ACSAC '97: Proceedings of the 13th Annual Computer Security Applications Conference

The paper describes an approach for selectively controlling COTS components to provide robustutess and security. Using the concept of a loadable module, "kernel hypervisors" have been implemented on a Linux kernel. These kernel hypervisors provide ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

SAC '06: Proceedings of the 2006 ACM symposium on Applied computing

April 2006

1967 pages

ISBN:1595931082

DOI:10.1145/1141277

Conference Chair:
Hisham M. Haddad
Kennesaw State University, Kennesaw, Georgia

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 23 April 2006

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Article

Conference

SAC06

Sponsor:

SIGAPP

SAC06: The 2006 ACM Symposium on Applied Computing

April 23 - 27, 2006

Dijon, France

Acceptance Rates

Overall Acceptance Rate 1,650 of 6,669 submissions, 25%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
414
Total Downloads

Downloads (Last 12 months)1
Downloads (Last 6 weeks)0

Reflects downloads up to 29 Sep 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Bai JWang YLiu HHu S(2015)Automated resource release in device driversProceedings of the 2015 IEEE 26th International Symposium on Software Reliability Engineering (ISSRE)10.1109/ISSRE.2015.7381811(172-182)Online publication date: 2-Nov-2015
https://dl.acm.org/doi/10.1109/ISSRE.2015.7381811
Zhang KTian HRuan LXiao LLi YLiu Y(2013)A Framework for Porting Linux OS to a cc-NUMA Server Based on Loongson ProcessorsEmerging Technologies for Information Systems, Computing, and Management10.1007/978-1-4614-7010-6_25(215-222)Online publication date: 2013
https://doi.org/10.1007/978-1-4614-7010-6_25

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

Linux kernel vulnerabilities: state-of-the-art defenses and open problems

Hotswapping Linux kernel modules

Using kernel hypervisors to secure applications