Time: Fridays, noon - 1:05pm (PT)
+Location: The Internet / The LSD Lab (Engineering 2, Room 398)
+Organizers: Lindsey Kuper and Tyler Sorensen
+ +
The Languages, Systems, and Data Seminar meets weekly to discuss interesting topics in the areas of programming languages, systems, databases, formal methods, security, software engineering, verification, architecture, and beyond. Our goal is to encourage interactions and discussions between students, researchers, and faculty with interests in these areas. The seminar is open to everyone interested. Participating UCSC students should register for the 2-credit course CSE 280O (let the organizers know if you’re an undergrad and need a permission code).
+ +For fall 2023, we will continue to host the LSD Seminar in a hybrid fashion. Anyone can attend on Zoom, and local folks can gather in person in the lab. Speakers can join either in person or on Zoom, whichever is convenient.
+ +Talks will be advertised on the ucsc-lsd-seminar-announce (for anyone) and lsd-group (for UCSC-affiliated people) mailing lists.
+ +Date | +Speaker | +Title | +
---|---|---|
Sept. 29 | +Vikram Narayanan | +Towards fine-grained compartmentalization of operating system kernels | +
Oct. 6 | ++ | + |
Oct. 13 | ++ | + |
Oct. 20 | ++ | + |
Oct. 27 | ++ | + |
Nov. 3 | ++ | + |
Nov. 17 | ++ | + |
Dec. 1 | ++ | + |
Dec. 8 | ++ | + |
Sept. 29
+ +Speaker: Vikram Narayanan
+ +Title: Towards fine-grained compartmentalization of operating system kernels
+ +Abstract: Commodity operating systems execute core kernel subsystems in a single +address space along with hundreds of dynamically loaded extensions and +device drivers. Lack of isolation within the kernel implies that a +vulnerability in any of the kernel subsystems or device drivers opens +a way to mount a successful attack on the entire kernel. Historically, +isolation within the kernel remained prohibitive due to the high cost +of hardware isolation primitives. Recent CPUs, however, bring a new +set of mechanisms. Extended page-table (EPT) switching with VM +functions and memory protection keys (MPKs) provide memory isolation +and invocations across boundaries of protection domains with overheads +comparable to system calls.
+ +I will talk about how we developed a collection of techniques for +lightweight isolation of privileged kernel code(LXDs and LVDs) that +demonstrates near-native performance of two (network, block) +high-performance device drivers. I will present KSplit, a framework +for isolating unmodified device drivers in a modern, full featured +kernel that performs automated analyses on the unmodified source code +of the kernel and the driver to identify shared state and +synchronization requirements for efficient isolation.
+ +Oct. 6
+ +Oct. 13
+ +Oct. 20
+ +Oct. 27
+ +Nov. 3
+ +Nov. 17
+ +Dec. 1
+ +Dec. 8
+ ++ + + +