ATLAS: Adaptable Thread-Level Address Spaces (DFG: LO 1719/7-1 and DI 2840/1-1)
ATLAS is a joint project with IBR (Co-PI: Christian Dietrich).
Traditionally, an OS process contains a single address space with code and data segments that are shared among all of its threads. The fork() system call creates a new address space (and process) that, even though it starts as an exact clone of its ancestor, provides strong isolation between the respective threads by means of copy-on-write.
The core idea of ATLAS is to provide processes with additional address spaces that are, however, kept in sync with their ancestor: Changes to one of them – we call them address-space views – become immediately visible in the others. Views diverge only in explicitly specified areas. As they still belong to the same process, the threads of this process can be migrated individually between views.
Address-space views provide an efficient mean to implement temporary or permanent thread-level variations in the "view of the world", while threads can still interact with each other regarding the shared parts. In the figure, the code segment diverges and provides a thread-specific variation (e.g., an client-specific optimization or restriction of functionality), while the data segment is shared, so that th1 can still transparently interact with th2 and th3. Such variations can be arbitrary small or complex. They can be prepared in the background in a new view and atomically applied to individual threads by migrating them to the new address space.
Implementation
Address-space views are currently implemented as an extension for the Linux Kernel. The source code is available on Github (luhsra/linux-mmview).
Applications
In our OSDI '20 paper, we present a first application of these technique to implement WfPatch, a wait-free dynamic code-patching approch for large multi-threaded server applications.
People
Latest News
Niklas Gollenstede from TUBS presents our joint paper MMCaps: Towards Fast and Secure IPC using MMU-Accelerated Memory Capabilities at the 19th European Workshop on Systems Security (EuroSec '26) in Edingburgh, Scotland, UK.
In the paper we present MMCaps, an OS abstraction designed for fast and secure zero-copy asynchronous Inter-Process Communication (IPC). It uses globally-unique capabilities for shareable buffers at process-local addresses, allowing the Memory Management Unit (MMU) to enforce access controls in hardware. This design entirely removes the need for kernel mediation and Time-of-Check to Time-of-Use (TOCTOU) protections. The paper is related to the ATLAS and got the best paper award!
Congrats, Niklas!
Florian Rommel receives an award for the best doctoral thesis in the field of operating systems. The award is granted annually by the SIG on Operating Systems of the German Computer Association (GI Fachgruppe Betriebssysteme) solely on the base of scientific excellence. It includes a price money of 500 €. Congrats, Florian!
In his dissertation Address-Space Views: A Kernel Concept for Thread-Level Memory Polymorphism, Florian designs and implements address-space views, a new kernel concept for thread-specific address-space specialization.
With this approach, he can overcome many difficulties that arise from nonatomicity in multithreaded server software. He demonstrates this on the example of wait-free runtime-patching, thread-role tailored attack-space reduction, and better kernel debugging on multicore systems.
Publications
-
Thesis
Address-Space Views: A Kernel Concept for Thread-Level Memory Polymorphism -
PHD thesisLeibniz Universität Hannover2025.
PDF 10.15488/19722 [BibTex]
-
EMSOFT
Journal
A
KPAC: Efficient Emulation of the ARM Pointer Authentication Instructions -
IEEE Transactions on Computer-Aided Design of Integrated Circuits and SystemsIEEE Computer Society Press2024.
PDF 10.1109/TCAD.2024.3443773 [BibTex]
-
USENIX
Conference
A
MELF: Multivariant Executables for a Heterogeneous World -
2023 USENIX Annual Technical Conference (USENIX '23)USENIX Association2023.
PDF Details [BibTex]
-
LCTES
Conference
B
Thread-Level Attack-Surface Reduction -
Proceedings of the 24th ACM SIGPLAN/SIGBED International Conference on Languages, Compilers, and Tools for Embedded SystemsACM Press2023.
PDF Details Slides Video 10.1145/3589610.3596281 [BibTex]
-
LCTES
Conference
B
reUpNix: Reconfigurable and Updateable Embedded Systems -
Proceedings of the 24th ACM SIGPLAN/SIGBED International Conference on Languages, Compilers, and Tools for Embedded SystemsACM Press2023.
PDF Slides Raw Data 10.1145/3589610.3596273 [BibTex]
-
OSDI
Conference
A*
From Global to Local Quiescence: Wait-Free Code Patching of Multi-Threaded Processes -
14th Symposium on Operating System Design and Implementation (OSDI '20)2020.
PDF Details Video [BibTex]
Theses
Finished Theses
Synchronized Thread-Level Address-Space Views for the Dragonfly BSD Kernel
- Typ
- Bachelorarbeit
- Status
- abgeschlossen
- Supervisors
- Florian Rommel
Dominik Töllner
Daniel Lohmann
Hardening Rust: Extending the Compiler and Runtime for Dynamic Object Layout Randomization
- Typ
- Masterarbeit
- Status
- abgeschlossen
- Supervisors
- Florian Rommel
Dominik Töllner - Bearbeiter
- Jan Neugebauer
Predictive Run-Time Attack-Space Reduction
- Typ
- Bachelorarbeit
- Status
- abgeschlossen
- Supervisors
- Florian Rommel
Daniel Lohmann
What You See Is What I Want: Extending the LLVM Linker for View-Local Data in Multivariant ELFs
- Typ
- Bachelorarbeit
- Status
- abgeschlossen
- Supervisors
- Florian Rommel
Dominik Töllner
Daniel Lohmann - Bearbeiter
- Max Känner (abgegeben: 19. Sep 2022)
Size does matter: Extending the LLVM Linker for Fine-Granular Multivariant ELF Executables
- Typ
- Bachelorarbeit
- Status
- abgeschlossen
- Supervisors
- Dominik Töllner
Florian Rommel
Daniel Lohmann - Bearbeiter
- Jan Luca Willke (abgegeben: 11. Aug 2022)
Multivariant ELF Executables for Dynamic Variability via Address-Space Views
- Typ
- Masterarbeit
- Status
- abgeschlossen
- Supervisors
- Florian Rommel
Daniel Lohmann - Bearbeiter
- Dominik Töllner
Extending DragonFly BSD for Synchronized Thread-Level Address-Space Views
- Typ
- Bachelorarbeit
- Status
- abgeschlossen
- Supervisors
- Florian Rommel
Daniel Lohmann

