Monday, September 21, 2009

Gardian: A Fault-Tolerant OS Environment

Guardian was the OS used by Tandem starting in the 1970'2. Its goal was to eliminate all single sources of failures in an effort to create an extremely reliable system, and became popular for ATMs an other critical infrastructure.

Security was not a strong point of this architecture. The only thing guarding privileged code is the location and privilege bit in a register. If these can be manipulated, admin access can be achieved by untrusted components.

Due to the messaging bottleneck and other overhead, the system was not very fast or terribly scalable. This led to its downfall as regular hardware became more reliable without sacrificing speed.

No comments:

Post a Comment