[cap-talk] Domain change (IPC?) overhead

[Mark Miller]

On Tue, Mar 25, 2008 at 9:31 AM, Jed Donnelley <capability at webstart.com> wrote:
>  I think an explanation of how language systems support domain
>  separation would go a long way toward clarifying any differences.

Can someone recommend a good high level overview of memory-safe
language implementation techniques? I'm sure explanations of Scheme,
Java, and ML implementations are available, but I'm not sure what to
recommend.

Jed, after reviewing how languages implementations can be memory safe,
take a look at Jonathan Rees' thesis
<http://mumble.net/~jar/pubs/secureos/> to see how to leverage memory
safety for object-capability security (integrity, not availability).

-- 
Text by me above is hereby placed in the public domain

 Cheers,
 --MarkM