The Design, Modeling, and Implementation of Group Scheduling for Isolation of Computations from Adversarial Interference

To isolate computations from denial of service (DoS) at-tacks and other forms of adversarial interference, it is nec-essary to constrain the effects of interactions among com-putations. This paper makes four contributions to research on isolation of computations from adversarial interference: (1) it describes the design and implementation of a kernel-level scheduling policy to control the effects of adversar-ial attacks on computations ’ execution; (2) it presents for-mal models of the system components that are involved in a representative DoS attack scenario; (3) it shows how model checking can be used to analyze that example sce-nario, under default Linux scheduling semantics and under our scheduling policy design; and (4) it presents empirical studies we have conducted to validate our scheduling pol-icy implementation. Our results show that, with careful de-sign, scheduling and detailed monitoring of computations’ behavior can be combined effectively to mitigate interfer-ence of attacks with computations ’ execution. 1