Bibliography

[Ackerman 671 W. B. Ackerman and W. W. Plummer. An Implementation of a

Multiprocessing Computer System. In Proceedings of the ACM Symposium on Operating System Principles. October 1967.

[Almes 781 G. Almes and G. Robertson. An Extensible File System for Hydra.

In Proceedings of 3rd International Conference on Software Engi- neering, pages 288-294. ACM, May 1978.

[Almes 801 G. T. Almes. Garbage Collection in an Object-Oriented System.

Ph.D. thesis, Carnegie-Mellon University, June 1980.

[Bell 761 G. Bell and W. D. Strecker. Computer Structures: What Have We

Learned From the PDP-ll? In Proceedings of the 3rd Annual Symposium on Computer Architecture, pages 1-14. January 1976.

[Bennett 821 J. K. Bennett. A Comparison of Four Object-Oriented Systems. Tech-

nical Report TR 82-11-03, Department of Computer Science, University of Washington, 1982.

[Berstis 80a] V. Berstis. Security and Protection of Data in the IBM Systemi38.

In Proceedings of the 7th Symposium ‘on Computer Architecture, pages 245-252. May 1980.

[Berstis 80b] V. Berstis, C. D. Truxal and J. G. Ranweller. System/38 Address-

ing and Authorization. In IBM System138 Technical Develop- ments. IBM GSD G580-0237-1, 1980. 207

Bibliography

208

[Bierman 811 E. M. Bierman. A Comparative Study of Network-Based Object-Ori-

ented File Systems. Master’s thesis, University of Washington, 1981.

[Birrell 781 A. D. Birrell and R. M. Needham. An Asynchronous Garbage Col-

lector for the CAP Filing Systems. Operating Systems Review 12(2):31-33, April 1978.

[Bishop 771 P. B. Bishop. Computer Systems with a Very Large Address Space and

Garbage Collection. Ph.D. thesis, MIT, May 1977. [Brinch Hansen 781

P. B. Hansen. Distributed Processes: A Concurrent Programming Concept. Communications of the ACM 24(11):934-941, Novem- ber 1978.

[Burroughs 611 The Descriptor-a Definition of the BSOOO Information Processing

System. Burroughs Corporation, Detroit, Michigan, 1961. [Cohen 751

E. Cohen and D. Jefferson. Protection in the Hydra Operating Sys- tem. In Proceedings of the 5th Symposium on Operating Systems Principles, pages 141-160. November 1975.

[Cohen 761 E. Cohen, W. Corwin, D. Jefferson, T. Lane, R. Levin, J. New-

comer, F. Pollack, and W. Wulf. Hydra Kernel Reference Manual. Department of Computer Science, Carnegie-Mellon University, 1976.

[Cook 78a] D. Cook. The Cost of Using the CAP Computer’s Protection Facili-

ties. Operating Systems Review 12(l), April 1978. [Cook 78b]

D. J. Cook. The Evaluation of a Protection System. Ph.D. thesis, University of Cambridge, 1978.

[Cook 791 D. Cook. In Support of Domain Structure for Operating Systems.

In Proceedings of the 7th Symposium on Operating Systems Princi- ples, pages 128-130. December 1979.

[Cosserat 721 D. C. Cosserat. A Capability Oriented Multi-Processor System for

Real-Time Applications. In Proceedings of the International Con- ference on Computer Communications. October 1972.

[Cosserat 741 D. C. Cosserat. A Data Model Based on the Capability Protection

Mechanism. In Proceedings of the International Workshop on Pro- tection in Operating Systems. August 1974.

[Cox 831 Bibliography G. W. Cox, W. M. Corwin, K. K. Lai, and F. J. Pollack. Inter-

process Communication and Processor Dispatching on the Intel 432. ACM Transactions on Computer Systems l(l), February 1983.

[Dahl 661 0. J. Dahl and K. Nygaard. Simula-An Algol-Based Simulation

Language. Communications of the ACM 9(9), September 1966.

[Dahlby 801 S. H. Dahlby, G. G. Henry, D. N. Reynolds, and P. T. Taylor.

System/38-a High-Level Machine. In IBM System138 Technical Developments. IBM GSD G580-0237-1, 1980.

[Denning 761 I?. J. Denning. Fault-Tolerant Operating Systems. Computing Sur-

veys 8(4), December 1976.

[Dennis 661 J. B. Dennis and E. C. Van Horn. Programming Semantics for

Multiprogrammed Computations. Communications of the ACM 9(3), March 1966.

[Dennis 801 T. D. Dennis. A Capability Architecture. Ph.D. thesis, Purdue Uni-

versity, May 1980.

[Dijkstra 781 E. W. Dijkstra, L. Lamport, A. M. Martin, C. S. Scholten, and

E. F. M. Steffens. On-the-Fly Garbage Collection: An Exercise in Cooperation. Communications of the ACM 21(1 l), November 1978.

[DOD SO] Reference Manual for the Ada Programming Language. United States

Department of Defense, 1980.

[England 72a] D. M. Eng!and. Architectural Features of System 250. In Infotech

State of the Art Report on Operating Systems. Infotech, 1972.

[England 72b] D. M. England. Operating System of System 250. In Proceedings of

International Switching Symposium. June 1972.

[England 741 D. M. England. Capability Concept Mechanism and Structure in

System 250. In Proceedings of the International Workshop on Pro- tection in Operating Systems. August 1974.

[Fabry 671 R. Fabry. A User’s View of Capabilities. In ICR Quarterly Report,

pages Cl-C8. U. of Chicago Institute for Computer Research, November 1967. 209

Bibliography

210

[Fabry 681 R. S. Fabry. Preliminary Description of a Supervisor for a Machine

Oriented Around Capabilities. In ICR Quarterly Report, pages Bl-B97. U. of Chicago Institute for Computer Research, August 1968.

[Fabry 711 R. S. Fabry. List-Structured Addressing. Ph.D. thesis, University of

Chicago, March 1971.

[Fabry 741 R. S. Fabry. Capability-Based Addressing. Communications of the

ACM 17(7):403-412, July 1974.

[Feustel 721 E. A. Feustel. The Rice Research Computer-A Tagged Architec-

ture. In Proceedings of the Spring Joint Computer Conference, pages 369-377. IFIPS, 1972.

[Feustel 731 E. A. Feustel. On the Advantages of Tagged Architectures. IEEE

Transactions on Computers C-22(7):644-656, July 1973.

[Fuller 781 S. H. Fuller and S. P. Harbison. The C.mmp Multiprocessor. Tech-

nical Report, Department of Computer Science, Carnegie-Mel- lon University, 1978.

[Gehringer 791 E. F. Gehringer. Variable-Length Capabilities as a Solution to the

Small-Object Problem. In Proceedings of the 7th Symposium on Operating Systems Principles, pages 131-142. December 1979.

[Gehringer 8 l] E. F. Gehringer and R. J. Chansler, Jr. STAROS User and System

Structure Manual, Department of Computer Science, Carnegie- Mellon University, 1981.

[Gehringer 821 E. F. Gehringer. Capability Architectures and Small Objects. UMI

Research Press, 1982.

[Goldberg 831 A. Goldberg and D. Robson. Smalltalk-80: The Language and Its

Implementation. Addison-Wesley, 1983.

[Goodenough 751 J. B. Goodenough. Exception Handling: Issues and a Proposed

Notation. Communications of the ACM 18(12):683-696, Decem- ber 1975.

[Graham 721 G. S. Graham and P. J. Denning. Protection-Principles and Prac-

tice. In Proceedings of the SpringJoint Computer Conference, pages 417-429. 1972.

[Halton 721 Bibliography D. Halton. Hardware of the System 250 for Communication Con-

trol. In Proceedings of International Switching Symposium. June 1972.

[Hamer-Hodges 721 K. J. Hamer-Hodges. Fault Resistance and Recovery Within Sys-

tem 250. In Proceedings of the International Conference on Com- puter Communications. October 1972.

[Hamilton 791 .

J. Hamilton. Location Dependencies in Distributed Operating Sys- tems. In Proceedings of the Louisiana Computer Exposition. March 1979.

[Hansen 821 I?. M. Hansen, M. A. Linton, R. N. Mayo, M. Murphy, and D. A.

Patterson. A Performance Evaluation of the Intel iAPX 432. Computer Architecture News 10(4):17-26, June 1982.

[Harrison 751 M. A. Harrison, W. L. RUZZO, and J. D. Ullman. On Protection in

Operating Systems. In Proceedings of the 5th Symposium on Oper- ating Systems Principles, pages 14-24. November 1975.

[Herbert 77a] A. J. Herbert, editor. CAP Hardware Manual. Computer Labora-

tory, University of Cambridge, 1977.

[Herbert 77b] A. J. Herbert, editor. CAP System Programmer’s Manual. Com-

puter Laboratory, University of Cambridge, 1977.

[Herbert 77~1 A. J. Herbert, editor. CAP Operating System Manual. Computer

Laboratory, University of Cambridge, 1977.

[Herbert 78a] A. J. Herbert. A New Protection Architecture for the Cambridge

Capability Computer. Operating Systems Review 12(l), January 1978.

[Herbert 78b] A. J. Herbert. A Microprogrammed Operating System Kernel. Ph.D.

thesis, University of Cambridge, 1978.

[Herbert 791 A. J. Herbert. A Hardware-Supported Protection Architecture. In

D. Lanciaux, editor, Operating Systems. North Holland, 1979.

[Hoare 741 C. A. R. Hoare. Monitors: An Operating System Structuring Con-

cept. Communications of the ACM 17(10):549-557, October 1974. 271

Bibliography

212

[Hoch 801 C. Hoch and J. C. Browne. An Implementation of Capabilities on

the PDF’-11145. Operating Systems Review 14(3), July 1980.

[Hoffman 801 R. L. Hoffman and F. G. Soltis. Hardware Organization of the

Systemi38. In IBM System138 Technical Developments. IBM GSD G580-0237-1, 1980.

[Houdek 801 M. E. Houdek and G. R. Mitchell. Translating a Large Virtual

Address. In IBM System138 Technical Developments. IBM GSD G580-0237-1, 1980.

[Houdek 811 M. E. Houdek, F. G. Soltis, and R. L. Hoffman. IBM System/38

Support for Capability-Based Addressing. In Proceedings of the 8th Symposium on Computer Architecture. ACM/IEEE, May 1981.

w 74 HP 3000 Computer System Reference Manual. Hewlett-Packard

Company, Cupertino, California, 1972.

[IBM 801 IBM System138 Functional Reference Manual. IBM GA21-9331-3,

1982.

[IBM 82a] IBM System138 Technical Developments. IBM GSD G580-0237-1,

1980. (A collection of 30 short papers on Systemi38).

[IBM 82b] IBM System138 Functional Concepts Manual. IBM GA21-9330-1,

1982.

[Iliffe 621 J. K. Iliffe and J. G. Jodeit. A Dynamic Storage Allocation

Scheme. Computer Journal 5(3):200-209, October 1962.

[Iliffe 681 J. K. Iliffe. Basic Machine Principles. American Elsevier, Inc., New

York, 1968.

[Iliffe 691 J. K. Iliffe. Elements of BLM. Computer Journal 12(3):251-258,

August 1969.

[Iliffe 821 J. K. Iliffe. Advanced Computer Design. Prentice/Hall Interna-

tional, 1982.

[Ingalls 781 D. H. H. Ingalls. The Smalltalk- Programming System Design

and Implementation. In Proceedings of the 5th ACM Symposium on Principles of Programming Languages. January 1978.

[Ingalls 811 Bibliography D. H. H. Ingalls. Design Principles Behind Smalltalk. Byte 6(8),

1981.

[Intel 811 iAPX 432 General Data Processor Architecture Reference Manual.

Preliminary edition, Intel Corp., Aloha, Oregon, 1981.

[Intel 821 iAPX 432 General Data Processor Architecture Reference Manual.

Revision 3 (Advance Partial Issue) edition, Santa Clara, Califor- ma, 1982.

[Jagannathan 801 A. Jagannathan. A Technique for the Architectural Implementa-

tion of Software Subsystems. In Proceedings of the 7th Symposium on Computer Architecture, pages 236-244. May 1980.

[Jensen 751 K. Jensen and N. Wirth. Pascal User Manual and Re$ort.

Springer-Verlag, 1975.

[ Jodeit 681 J. G. Jodeit. Storage Organization in Programming Systems. Com-

munications of the ACM 1 l( 1 l), November 1968.

[Jones 731 A. K. Jones. Protection in Programmed Systems. Ph.D. thesis, Car-

negie-Mellon University, June 1973.

[Jones 78a] A. K. Jones, R. J. Chansler, Jr., I. Durham, K. Schwans and S. R.

Vegdahl. STAROS, A Multiprocessor Operating System for the Support of Task Forces. In Proceeding of the 7th Symposium on Operating Systems Principles, pages 117-127. December 1978.

[Jones 78b] A. K. Jones. The Object Model: A Conceptual Tool for Structuring

Software. In R. Bayer, R.M. Graham, and G. Seegmuller, (edi- tors), Operating Systems-AtqAdvanced Course. Springer-Verlag, 1978.

[Jones 80a] A. K. Jones and E. F. Gehringer, editors. The Cm* Multiprocessor

Project: A Research Review. Technical Report, Department of Computer Science, Carnegie-Mellon University, July 1980.

[Jones 80b] A. K. Jones. Capability Architecture Revisited. Operating Systems

Review 14(3), July 1980.

[Kaehler 811 T. Kaehler. Virtual Memory for an Object-Oriented Language.

Byte 6(8), August 1981. 213

Bibliography

274

[Kahn 811 K. C. Kahn, W. M. Corwin, T. D. Dennis, H. D’Hooge, D. E.

Hubka, L. A. Hutchins, J. T. Montague, and F. J. Pollack. iMAX: A Multiprocessor Operating System for an Object-Based Computer. In Proceedings of the 8th Symposium on Operating Sys- tem Principles. December 198 1.

[Krasner 8 l] G. Krasner. The Smalltalk- Virtual Machine. Byte 6(8), 1981.

[Lampson 691 B. W. Lampson. Dynamic Protection Structures. In Proceedings of

Fall Joint Computer Conference, pages 27-38. IFIPS, 1969.

[Lampson 711 B. W. Lampson. Protection. In Proceedings of the Fifth Princeton

Symposium on Information Sciences and Systems, pages 437-443. March 1971. Reprinted in Operating Systems Review, 8(l), Janu- ary 1974.

[Lampson 761 B. W. Lampson and H. E. Sturgis. Reflections on an Operating

System Design. Communications of the ACM 19(5):251-265, May 1976.

[Lampson 801 B. W. Lampson and D. P. Redell. Experience with Processes and

Monitors in Mesa. Communications of the ACM 23(2):105-117, February 1980.

[Lazowska 8 l] E. D. Lazowska, H. M. Levy, G. T. Almes, M. J. Fischer, R. J.

Fowler, and S. C. Vestal. The Architecture of the Eden System. In Proceedings of the 8th Symposium on Operating Systems Princi- ples. December 1981.

[Levin 751 R. Levin, E. Cohen, W. Corwin, F. Pollack, and W. Wulf. Policy/

Mechanism Separation in Hydra. In Proceedings of the 5th Sympo- sium on Operating Systems Principles, pages 132-140. November 1975.

[Levin 771 R. Levin. Program Structures for Exceptional Condition Handling.

Ph.D. thesis, Carnegie-Mellon University, June 1977.

Pw 811 H. M. Levy. A Comparative Study of Capability-Based Computer

Architectures. Master’s thesis, University of Washington, 1981. [Linden 761

T. A. Linden. Operating System Structures to Support Security and Reliable Software. Computing Surveys 8(4), December 1976.

[Liskov 771 B. Liskov, A. Snyder, R. Atkinson, and C. Schaffert. Abstraction

Mechanisms in CLU. Communications of the ACM Bibliography 20(8):564-576, August 1977.

[Liskov 79a] B. H. Liskov and A. Snyder. Exception Handling in CLU. IEEE

Transactions on Software Engineering (6):546-558, October 1979.

[Liskov 79b] B. Liskov, R. Atkinson, T. Bloom, E. Moss, C. Schaffert, B.

Scheifler, and A. Snyder. CLU Reference Manual. Technical Report LCSiTR-225, MIT, October 1979.

[Luniewski 791 A. W. Luniewski. The Architecture of an Object Based Personal Com-

puter. Ph.D. thesis, MIT, 1979.

[MIT 711 PDP-1 Computer Instruction Manual, Part S-MTA’s and IVK’s.

Electrical Engineering Department Document PDP-35-1, MIT, Cambridge, Mass., 1971.

[Morris 73a] J. H. Morris, Jr., Types Are Not Sets. In Symposzum on the Princi-

ples of Programming Languages, pages 120-121. October 1973.

[Morris 73b] J. H. Morris, Jr. Protection in Programming Languages. Communi-

cations of the ACM 16(1):15-21, January 1973.

[Myers 801 G. J. Myers and B. R. S. Buckingham. A Hardware Implementa-

tion of Capability-Based Addressing. Operating Systems Review 14(4), October 1980.

[Myers 821 G. J. Myers. Advances in Computer Architecture, Second Edition.

John Wiley & Sons, 1982.

[Needham 721 R. M. Needham. Protection Systems and Protection Implementa-

tions. In Proceedings of the FallJoint Computer Conference, pages 571-578. 1972.

[Needham 741 R. M. Needham and M. V. Wilkes. Domains of Protection and the

Management of Processes. The Computer Journal 17(2), 1974.

[Needham 77a] R. M. Needham and R. D. H. Walker. The Cambridge CAP Com-

puter and its Protection System. In Proceedings of the 6th Sympo- sium on Operating System Principles, pages l-10. November 1977.

[Needham 77b] R. M. Needham. The CAP Project-an Interim Evaluation. In

Proceedings of the 6th Symposium on Operating System Principles, pages 17-22. November 1977. 215

Bibliography

216

[Needham 77~1 R. M. Needham and A. D. Birrell. The CAP Filing System. In

Proceedings of the 6th Symposium on Operating System Principles, pages 11-16. November 1977.

[Organick 831 E. I. Organick. A Programmer’s View of the Intel 432 System.

McGraw-Hill, 1983.

[Ousterhout 80a] J. K. Ousterhout, D. A. Scelza, and P. S. Sindhu. Medusa: An

Experiment in Distributed Operating System Structure. Commu- nications of the ACM 23(2), February 1980.

[Ousterhout 80b] J. K. Ousterhout. Partitioning and Cooperation in a Distributed Mul-

tiprocessor Operating System: Medusa. Ph.D. thesis, Carnegie- Mellon University, April 1980.

parnas 721 D. L. Parnas. On The Criteria To Be Used In Decomposing Sys-

tems Into Modules. Communications of the ACM 15(12), Decem- ber 1972.

[Pashtan 821 A. Pashtan. Object Oriented Operating Systems: An Emerging

Design Methodology. In Proceedings of ACM 82, pages 126-131. October 1982.

[Pinnow 801 K. W. Pinnow, J. G. Ranweller, and J. F. Miller. System/38 Ob-

ject-oriented Architecture. In IBM System138 Technical Develop- ments. IBM GSD G580-0237-1, 1980.

JPollack 8 l] F. J. Pollack, K. C. Kahn, and R. M. Wilkinson. The iMAX-

Object Filing System. In Proceedings of the 8th Symposium on Operating System Principles. December 198 1.

[Pollack 821 F. J. Pollack, G. W. Cox, D. W. Hammerstrom, K. C. Kahn,

K. K. Lai, and J. R. Rattner. Supporting Ada Memory Manage- ment in the iAPX-432. In Proceedings of the Symposium on Archi- tectural Support for Programming Languages and Operating Sys- tems, pages 117-131. March 1982.

pattner 8 l] J. Rattner and W. W. Lattin. Ada Determines Architecture of 32-

bit Microprocessor. Electronics 54(4), February 24, 1981.

pedell 74a] D. D. Redell. Naming and Protection in Extendible Operating Sys-

tems. Ph.D. thesis, University of California, Berkeley, Septem- ber 1974. Available also as MIT project MAC TR-140.

[Redell 74b] Bibliography D. Redell and R. Fabry. Selective Revocation of Capabilities. In

International Workshop on Protection in Operating Systems. IRIA, August 1974.

[Saltzer 741 J. H. Saltzer. Protection and the Control of Information Sharing in

Multics. Communications of the ACM 17(7):388-402, July 1974.

[Saltzer 751 J. H. Saltzer and M. D. Schroeder. The Protection of Information

in Computer Systems. Proceedings of the IEEE 63(9), September 1975.

[Shepherd 681 J. H. Shepherd. Principal Design Features of the Multi-Computer.

In ICR Quarterly Report, pages Cl-C13. U. of Chicago Institute for Computer Research, November 1968.

[Snyder 791 A. Snyder. A Machine Architecture to Support an Object-Oriented

Language. Ph.D. thesis, MIT, March 1979.

[Soltis 791 F. G. Soltis and R. L. Hoffman, Design Considerations for the

IBM Systemi38. In Proceedings of Compcon 79. Spring 1979.

[Soltis 811 F. G. Soltis. Design of a Small Business Data Processing System.

Computer, September 1981.

[Spier 731 M. J. Spier, T. N. Hastings, and D. N. Cutler. An Experimental

Implementation of the Kernel/Domain Architecture. In Proceed- ings of the Fourth Symposium on Operating System Principles, pages 8-21. October 1973.

[Sturgis 741 H. E. Sturgis. A Postmortem for a Timesharing System. Ph.D. thesis,

University of California, Berkeley, 1974. Reprinted as Xerox Part report CSL-74-l.

[Swan 781 R. J. Swan. The Switching Structure and Addressing Architecture of an

Extensible Multiprocessor: Cm*. Ph.D. thesis, Carnegie-Mellon University, August 1978.

[Walker 731 R. D. H. Walker. The Structure of a Well-Protected Computer. Ph.D.

thesis, University of Cambridge, 1973.

[Wilkes 681 M. V. Wilkes. Time-Sharing Computer Systems. American Elsevier,

Inc., New York, 1968. 217

Bibliography [Wilkes 791 M. V. Wilkes and R. M. Needham. The Cambridge CAP Computer

and its Operating System. North Holland, New York, 1979.

[Wilkes 821 M. V. Wilkes. Hardware Support for Memory Protection. In Pro-

ceedings of the Symposium on Architectural Support for Program- ming Languages and Operating Systems, pages 107-l 16. March 1982.

mulf 74a] W. Wulf, E. Cohen, W. Corwin, A. Jones, R. Levin, C. Pierson,

and F. Pollack. Hydra: The Kernel of a Multiprocessor Operat- ing System. Communications of the ACM 17(6), June 1974.

JWulf 74b] W. A. Wulf. Alphard: Toward a Language to Support Structured Pro-

grams. Technical Report, Carnegie-Mellon University, Computer Science Department, 1974.

DJoulf 751 W. Wulf, R. Levin, and C. Pierson. Overview of the Hydra Oper-

ating System Development. In Proceedings of the Fifth Symposium on Operating Systems Principles, pages 122-13 1. November 1975.

[Wulf 781 W. A. Wulf, and S. P. Harbison. Reflections in a Pool of Proces-

sors: An Experience Report on Cmmp. In 1978 National Com- 1 purer Conference. AFIPS Press, 1978.

[Wulf 811 W. A. Wulf, R. Levin, and S. P. Harbison. HYDRAlC.mmp: An

Experimental Computer System. McGraw-Hill, New York, 1981. [Yngve 681

V. H. Yngve. The Chicago Magic Number Computer. In ZCR Quarterly Report, pages Bl-B20. U. of Chicago Institute for Computer Research, November 1968.

[Zeigler 811 S. Zeigler, N. Allegre, R. Johnson, and J. Morris. Ada for the Intel

432 Microcomputer. Computer 14(6):47-56, June 1981.

218