Device drivers typically execute in supervisor mode and thus must be fully trusted. This paper describes how to move them out of the trusted computing base, by running them without supervisor privileges and constraining their interactions with hardware devices. An implementation of this approach in the Nexus operating system executes drivers in user space, leveraging hardware isolation and chec...

Software-based control of life-critical embedded systems has become increasingly complex, and to a large extent has come to determine the safety of the human being. For example, implantable cardiac pacemakers have over 80,000 lines of code which are responsible for maintaining the heart within safe operating limits. As firmware-related recalls accounted for over 41% of the 600,000 devices recal...

To address the issue of safely accessing and securing wheeled mobility devices in motor vehicles, more information characterizing current-production devices was needed. In a recent effort, frame characteristics of wheeled mobility devices were defined and a database developed for recording characteristics relevant to access and securement. A representative number of devices have been surveyed t...

This work reports on the author’s experience designing, implementing, and formally verifying a low-level piece of system software. The timing model and the adaptation of an existing information flow policy to a monadic framework are reasonably novel. Interactive compilation through equational rewriting worked well in practice. Finally, the project uncovered some potential areas for improving in...

Issue: Understanding the chemical composition of container glass is critical to recycling for a number of reasons. First, the chemistry has significant implications for managing the behavior of molten glass in any remelt application, from large-scale container manufacturing down to cottage-industry pressed glass. Second, the composition has important implications for evaluating health concerns ...

original article   one type of electromagnetic fields, based on frequency range, is extremely low frequency (elf) fields. there are lots of reports about measuring elf-magnetic field (mf) in substations, power plants, cities and etc. this study aimed to compare the difference between measurement of three-axis and single-axis probe mf meters. elf-mf was measured by tes-1394 mf tester (three-axis...

Introduction Catheter ablation is used to control ventricular arrhythmias (VT/VF) in a multitude of substrates. MR can delineate regions of scar and may guide ablation procedures, however the presence of an ICD has been an issue both for safety and MR image quality. Recent studies have demonstrated acceptable safety for scanning of device patients in certain circumstances, but efficacy has not ...

Introduction: Health care delivery is contingent on efficient communication among providers. We hypothesized that using smart-device two-way communication would result in faster provider responses when compared with alphanumeric paging among resident physicians in an academic medical center. Methods: Resident physicians were given an Apple iPad Mini smart device with a Health Insurance Portabil...

The Anti–Collision device is a detection device meant to be incorporated into cars for the purpose of safety. As opposed to the anti–collision devices present in the market today, this system is not designed to control the vehicle. Instead, it serves as an alert in the face of imminent collision. The device is intended to find a way to implement a minimum spacing for cars in traffic in an affor...

Author Affiliation: U.S. Food and Drug Administration, Center for Devices and Radiological Health, Office of In Vitro Diagnostic Device Evaluation and Safety, Silver Spring, Maryland