User-level Resource-constrained Sandboxing

Fangzhe Chang

Ayal Itzkovitz

Vijay Karamcheti

The popularity of mobile and networked applications has resulted in an increased demand for execution "sandboxes"--environments that impose irrevocable restrictions on resource usage. Existing approaches rely on kernel modification for enforcing quantitative restrictions (e.g., limiting CPU utilization of an application to 25%). However, the general applicability of such approaches is constrained by the difficulty of modifying shrink-wrapped operating systems such as Windows NT.