I-JVM: a Java Virtual Machine for Component Isolation in OSGi

Nicolas Geoffray 1 Gaël Thomas 1 Gilles Muller 1 Pierre Parrend 2 Stéphane Frénot 2 Bertil Folliot 1
1 Regal - Large-Scale Distributed Systems and Applications
LIP6 - Laboratoire d'Informatique de Paris 6, Inria Paris-Rocquencourt
2 AMAZONES - Ambient Middleware Architectures: Service-Oriented, Networked, Efficient and Secured
Inria Grenoble - Rhône-Alpes, CITI - CITI Centre of Innovation in Telecommunications and Integration of services
Abstract : The OSGi framework is a Java-based, centralized, component oriented platform. It is being widely adopted as an execution environment for the development of extensible applications. However, current Java Virtual Machines are unable to isolate components from each other. For instance, a malicious component can freeze the complete platform by allocating too much memory or alter the behavior of other components by modifying shared variables. This paper presents I-JVM, a Java Virtual Machine that provides a lightweight approach to isolation while preserving compatibility with legacy OSGi applications. Our evaluation of I-JVM shows that it solves the 8 known OSGi vulnerabilities that are due to the Java Virtual Machine. Overall, the overhead of I-JVM compared to the JVM on which it is based is below 20%.
Type de document :
[Research Report] RR-6801, INRIA. 2009, pp.21
Liste complète des métadonnées

Littérature citée [27 références]  Voir  Masquer  Télécharger

Contributeur : Nicolas Geoffray <>
Soumis le : mardi 20 janvier 2009 - 13:01:56
Dernière modification le : vendredi 31 août 2018 - 09:25:54
Document(s) archivé(s) le : mardi 8 juin 2010 - 20:56:43


Fichiers produits par l'(les) auteur(s)


  • HAL Id : inria-00354580, version 1



Nicolas Geoffray, Gaël Thomas, Gilles Muller, Pierre Parrend, Stéphane Frénot, et al.. I-JVM: a Java Virtual Machine for Component Isolation in OSGi. [Research Report] RR-6801, INRIA. 2009, pp.21. 〈inria-00354580〉



Consultations de la notice


Téléchargements de fichiers