Isolating legacy applications with Lind
Date
2013-03-27
Authors
Matthews, Christopher James
Journal Title
Journal ISSN
Volume Title
Publisher
Abstract
Legacy applications, often written in C, can be riddled with bugs. Sarcastically referred to as "veritable bug ranches", pre-existing legacy applications of substantial size and complexity are still commonplace. In this dissertation, I motivate, build and evaluate Lind, a sandbox for legacy applications. Lind decreases the impact of buggy programs on the system that runs them. It does this without changing their code or destroying the non-functional characteristics of the programs---such as performance, portability, light-weightedness and ease of deployment---which are the primary motivators for legacy software written in C. Lind borrows many principles of secure system design to help it isolate legacy applications so
they cannot impact the rest of the system. To assess Lind, I evaluate
how well legacy applications perform in Lind, how strong the isolation
Lind provides is, and how easy it is to port applications to Lind---all to conclude that Lind is a viable proof-of-concept platform for legacy applications.
Description
Keywords
Isolation, Sandboxing, Programming, Software bugs, Virtualization