Fault Isolation for Device Drivers

被引：18

作者：

Herder, Jorrit N. ^{[1
]}

Bos, Herbert ^{[1
]}

Gras, Ben ^{[1
]}

Homburg, Philip ^{[1
]}

Tanenbaum, Andrew S. ^{[1
]}

机构：

[1] Vrije Univ Amsterdam, Dept Comp Sci, Amsterdam, Netherlands

来源：

2009 IEEE/IFIP INTERNATIONAL CONFERENCE ON DEPENDABLE SYSTEMS & NETWORKS (DSN 2009) | 2009年

关键词：

Operating Systems; Device Drivers; Bugs; Dependability; Fault Isolation; SWIFI Testing;

D O I：

10.1109/DSN.2009.5270357

中图分类号：

TP3 [计算技术、计算机技术];

学科分类号：

0812 ;

摘要：

This work explores the principles and practice of isolating low-level device drivers in order to improve OS dependability. In particular, we explore the operations drivers can perform and how fault propagation in the event a bug is triggered can be prevented. We have prototyped our ideas in an open-source multiserver OS (MINIX 3) that isolates drivers by strictly enforcing least authority and iteratively refined our isolation techniques using a pragmatic approach based on extensive software-implemented fault-injection (SWIFI) testing. In the end, out of 3,400,000 common faults injected randomly into 4 different Ethernet drivers using both programmed I/O and DMA, no fault was able to break our protection mechanisms and crash the OS. In total, we experienced only one hang, but this appears to be caused by buggy hardware.

引用

页码：33 / 42

页数：10