Cooperation of Mutually Suspicious Subsystems in a Computer Utility
Name
MIT-LCS-TR-104.pdf
Size
4.19 MB
Format
Adobe PDF
Checksum (MD5)
be79a9469dd7585c6fff93f72af53c56
Author(s)
Schroeder, Michael D.
Advisor(s)
Saltzer, Jerome H.
Date Issued
September 1972
Series/Report no.
MIT-LCS-TR-104
MAC-TR-104
Abstract
This thesis describes practical protection mechanisms that allow mutually suspicious subsystems to cooperate in a single computation and still be protected from one another. The mechanisms are based on the division of a computation into independent domains of access privilege, each of which may encapsulate a protected subsystem. The central component of the mechanisms is a hardware processor that automatically enforces the access constraints associated with a multidomain computation implemented as a single execution point in a segmented virtual memory.
Persistent DSpace Link
