[ge-talk] Security services provided by OS

[Danny Robson]

Adrian Sanabria wrote:
> Sure, but wouldn't you be incurring extra overhead for each 
> virtualization instance? What would the total impact then be on a 
> running system? 10%? 20%?
> 

Yes, you would get some form of overhead. But careful design can 
mitigate this to a large extent; There are some really neat ideas out 
there what with virtualisation being the research flavour of the month. 
But as always it's a question of tradeoffs and to what extent you would 
like virtualisation.

But you can get a number of interesting benefits for free: 
Saving/rollback of program state, stricter seperation guarantees, and 
more. (Think about distributing all applications as saved virtualisation 
instances, as opposed to bundles. Not sure how useful it'd be, but damn 
would it be cool).

-- Danny