基于用户态JVM的安全驱动模型的设计与实现

设备驱动等内核扩展模块被认为是造成操作系统不稳定的主要原因,而目前对操作系统稳定性的研究也主要集中在研究如何将其与内核的主体部分分离.本文结合现有的研究成果,提出了利用用户态的Java虚拟机(JVM)将驱动程序与内核分离的架构.在这样的架构中,驱动程序运行在受限的JVM中,所有驱动程序的错误都将被捕获而不致影响到内核的其他部分.利用这样的架构,在Linux系统下实现了新的USB协议栈,并对其进行了性能测试.测试结果表明,与原内核驱动程序相比,新的驱动架构表现出更高的稳定性,而在性能方面,对于时间和数据量要求不高的设备,其性能与原驱动程序相当接近;而对于需要进行大量数据处理的设备,其性能有一定程度的下降.

The Design and Implementation of a Safe Device Driver Model

Kernel extensions,such as device drivers in operating systems,are proved to be much more unreliable than other parts of kernel.Recent researches on OS reliability are focusing on the isolation of extension modules from kernel.In this paper,a new architecture is proposed to isolate device drivers.Drivers are restricted in user-mode java virtual machine(JVM),which is an independent user-process.Bugs in drivers will be captured and well handled by JVM,and therefore,prevented from ruining the whole kernel.A new USB protocol stack in Linux is implemented based on this architecture.Performance test reveals that new architecture ensures a more reliable operating system with an acceptable performance overhead compared with traditional drivers.