From 823c7c9967afafedd3f37218c85d50cff7b77212 Mon Sep 17 00:00:00 2001 From: linse Date: Sat, 16 Sep 2017 18:08:57 -0400 Subject: [PATCH] Reword. --- Technology | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/Technology b/Technology index 213ab01..2f7d631 100644 --- a/Technology +++ b/Technology @@ -36,7 +36,7 @@ the interface on which OCaml runs. OCaml is a functional programming language that minimizes side effects and mutable state. Its functional programming concepts give us a list of security advantages for MirageOS. -## Running a unikernel & system security +## Running unikernel, system security Aside from automated memory management to avoid memory corruption, and type checking to avoid many common programming errors, the major advantage of functional programming is localized reasoning about program code. @@ -90,8 +90,8 @@ A MirageOS unikernel is much smaller than a comparable UNIX virtual machine. By avoiding superfluous code we decrease the attack surface immensly. -As example, the lines of code of the [Bitcoin Piñata](/Projects/Pinata) compared -to a virtual machine using Linux and OpenSSL, in thousands of lines of code: +Consider the breakdown of the code of the example system [Bitcoin Piñata](/Projects/Pinata) compared +to a virtual machine using Linux and OpenSSL, measured in thousands of lines of code: @@ -102,10 +102,7 @@ to a virtual machine using Linux and OpenSSL, in thousands of lines of code:
LinuxMirageOS
Total2560102
- -The choice of programming language avoids several attack vectors. Immutable data -structures, type checking and the OCaml runtime memory manager ensure memory -safety in OCaml. By minimising each unikernel to its minimal footprint, +By minimising each unikernel to its minimal footprint, security breaches are contained to the information the unikernel contains. ### Secure updates