• Enforcing Privacy Policies with Meta-Code 

      Johansen, Håvard; Birrell, Eleanor; Van Renesse, Robbert; Schneider, Fred B.; Stenhaug, Magnus; Johansen, Dag (Konferansebidrag; Conference object, 2015)
      This paper proposes a mechanism for expressing and enforcing security policies for shared data. Security policies are expressed as stateful meta-code operations; meta-code can express a broad class of policies, including access-based policies, use-based policies, obligations, and sticky policies with declassification. The meta-code is interposed in the filesystem access path to ensure policy ...
    • An introduction to the TACOMA distributed system. Version 1.0 

      Johansen, Dag; Renesse, Robbert van; Schneider, Fred B. (Research report; Forskningsrapport, 1995-06)
      This report briefly introduces TACOMA Version 1.0. This distributed system supports agents, computations that can roam the internet. The report presents the TACOMA project, the computational model, how to get started, and the basic TACOMA abstractions.
    • Omni-Kernel: An Operating System Architecture for Pervasive Monitoring and Scheduling 

      Kvalnes, Åge; Johansen, Dag; Renesse, Robbert van; Schneider, Fred B.; Valvåg, Steffen (Research report; Forskningsrapport, 2013)
      Clouds commonly employ virtual machine technology to leverage and efficiently utilize computational resources in data centers. The workloads encapsulated by virtual machines contend for the resources of their hosting machines, and interference from resource sharing can cause unpredictable performance. Despite the use of virtual machine technology, the role of the operating system as an arbiter of ...