Native client (Евгений Эльцин)

Native Client Native Client Evgeny Eltsin

Overview ,[object Object],[object Object],[object Object],[object Object],[object Object]

Why Native Client? Close the gap between desktop and web apps ,[object Object],[object Object],[object Object]

Why Native Client? Close the gap between desktop and web apps ,[object Object],[object Object]

Web Apps Interpreted languages (JavaScript) ,[object Object],[object Object]

How to Improve? Just-In-Time compiler ,[object Object],[object Object]

Web Apps Native code "as is" (ActiveX) ,[object Object],[object Object]

How to Improve? Make native code "manageable"? ,[object Object]

What is Native Client? NaCl — system for safe execution of untrusted native code ,[object Object],[object Object],Open-source http://code.google.com/p/nativeclient

What is it Good for? Port desktop apps to web ,[object Object],[object Object]

What is it Good for? Enhance web apps with ,[object Object],[object Object]

What is it Good for? Sandbox existing plugins ,[object Object]

Lunch isn't Free Must recompile from source ,[object Object],Part of system interfaces are unavailable Still work in progress

What is Safe? No side effects except via explicit secure interfaces

Runtime Sandbox No side effects ... ,[object Object],... except via explicit secure interfaces ,[object Object]

How it Works? Runtime sandbox is created via an agreement between ,[object Object],[object Object],Trusted part is simple

What Code Validation is? First, disassemble all executable code ,[object Object],[object Object]

Control Flow Integrity Do we jump to code we know? ,[object Object],[object Object]

Instruction Bundles Every bundle-aligned code address is a potential jump target ,[object Object],[object Object],Bundle is 32-bytes (chosen from experiment)

Instruction Bundles Indirect jump always go to a bundle-aligned address ,[object Object],[object Object]

i386 Example ,[object Object],[object Object],[object Object],[object Object]

Checking Read, Write and Jump i386 Example ,[object Object],[object Object],[object Object]

System Calls Trampoline to outer stuff ,[object Object],[object Object],[object Object]

Ecosystem Availability ,[object Object],[object Object],[object Object],[object Object]

Portability PNaCl - work in progress ,[object Object],[object Object],[object Object]

Deployment ,[object Object],[object Object],[object Object]

What works? Gallery at http://code.google.com/p/nativeclient And much more stuff ,[object Object],[object Object],[object Object]

Developer Stuff ,[object Object],[object Object],[object Object],[object Object]

Native Client SDK http://code.google.com/p/nativeclient-sdk Ported Gnu toolchain ,[object Object],[object Object]

Native Client Ports http://code.google.com/p/naclports ,[object Object],[object Object],[object Object],[object Object],[object Object]

Developers Welcome! Lot of fun projects ,[object Object],[object Object],[object Object]

Native client (Евгений Эльцин)

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Native client (Евгений Эльцин)

Similar to Native client (Евгений Эльцин) (20)

More from Ontico

More from Ontico (20)

Recently uploaded

Recently uploaded (20)

Native client (Евгений Эльцин)