Taming subsystems: Capabilities as universal resource access control in L4

Proceedings of the 2nd Workshop on Isolation and Integration in Embedded Systems, IIES'09

Volumn , Issue , 2009, Pages 25-30

  Lackorzynski, Adam ^a   Warg, Alexander ^a  

^a DRESDEN UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Capability system; Mobile devices; Secure system; Small trusted computing base; System architecture

Indexed keywords

CAPABILITY SYSTEM; CRITICAL DEVICE; EMBEDDED COMPUTING; EMBEDDED COMPUTING SYSTEM; GENERAL PURPOSE; OPERATING SYSTEMS; RESOURCE ACCESS CONTROL; SECURE SYSTEM; SECURITY POLICY; SECURITY PROPERTIES; SMALL TRUSTED COMPUTING BASE; SYSTEM ARCHITECTURE;

ACCESS CONTROL; COMPUTER OPERATING SYSTEMS; COMPUTER SCIENCE; MOBILE COMPUTING; MOBILE DEVICES; OPEN SYSTEMS; PORTABLE EQUIPMENT; SECURITY SYSTEMS; SOFTWARE ARCHITECTURE;

EMBEDDED SYSTEMS;

EID: 70349142100     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1519130.1519135     Document Type: Conference Paper

References (19)

1. Fiasco website. URL: http://os.inf.tu-dresden.de/fiasco/.
2. L4 Environment website. URL: http://os.inf.tu-dresden.de/l4env/.
3. L4Linux website. URL: http://os.inf.tu-dresden.de/L4/LinuxOnL4/.
4. M. J. Accetta, R. V. Baron, W. Bolosky, D. B. Golub, R. F. Rashid, A. Tevanian, and M. W. Young. Mach: A new kernel foundation for unix development. In USENIX Summer Conference, pages 93-113, Atlanta, GA, June 1986.
5. J. Brakensiek, A. Dröge, H. Härtig, A. Lackorzynski, and M. Botteck. Virtualization as an enabler for security in mobile devices. In Proceedings of the First Workshop on Isolation and Integration in Embedded Systems (IIES 2008), EuroSys 2008 Affiliated Workshop, pages 17-22, Glasgow, Scotland, UK, April 2008.
6. A. Chou, J. Yang, B. Chelf, S. Hallem, and D. Engler. An empirical study of operating systems errors. In SOSP '01: Proceedings of the eighteenth ACM symposium on Operating systems principles, pages 73-88, New York, NY, USA, 2001. ACM.
7. U. Dannowski, J. LeVasseur, E. Skoglund, and V. Uhlig. L4 experimental kernel reference manual, version x.2. Technical report, University of Karlsruhe, 2004. Latest version available from: http://l4hq.org/docs/manuals/.
8. Dhammika Elkaduwe, Kevin Elphinstone and Philip Derrin. Kernel design for isolation and assurance of physical memory. In Proceedings of the First Workshop on Isolation and Integration in Embedded Systems (IIES 2008), EuroSys 2008 Affiliated Workshop, Glasgow, Scotland, UK, April 2008.
9. D. Elkaduwe, P. Derrin, and K. Elphinstone. Kernel data - first class citizens of the system. In Proceedings of the 2nd International Workshop on Object Systems and Software Architectures, pages 39-43, Victor Harbor, South Australia, Australia, Jan 2006.
10. N. Feske and H. Härtig. Demonstration of DOpE - a Window Server for Real-Time and Embedded Systems. In 24th IEEE Real-Time Systems Symposium (RTSS), pages 74-77, Cancun, Mexico, Dec. 2003.
11. B. Kauer. L4.sec Implementation - Kernel Memory Managment. Master's thesis, TU Dresden, May 2005.
12. J. Liedtke. On μ-kernel construction. In Proceedings of the 15th ACM Symposium on Operating System Principles (SOSP), pages 237-250, Copper Mountain Resort, CO, Dec. 1995.
13. J. Liedtke. L4 reference manual (486, Pentium, PPro). Arbeitspapiere der GMD No. 1021, GMD - German National Research Center for Information Technology, Sankt Augustin, Sept. 1996. Also Research Report RC 20549, IBM T. J. Watson Research Center, Yorktown Heights, NY, September 1996.
14. J. Liedtke. L4 nucleus version x reference manual (x86). Technical report, University of Karlsruhe, Sept. 1999.
15. J. M. McCune, B. J. Parno, A. Perrig, M. K. Reiter, and H. Isozaki. Flicker: an execution infrastructure for tcb minimization. In Eurosys '08: Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008, pages 315-328, New York, NY, USA, 2008. ACM.
16. M. S. Miller, K.-P. Yee, and J. Shapiro. Capability Myths Demolished. Technical report, 2003.
17. J. S. Shapiro, J. M. Smith, and D. J. Farber. Eros: a fast capability system. In In Symposium on Operating Systems Principles, pages 170-185, 1999.
18. L. Singaravelu, C. Pu, H. Härtig, and C. Helmuth. Reducing TCB complexity for security-sensitive applications: three case studies. SIGOPS Oper. Syst. Rev., 40(4):161-174, 2006.
19. C. Weinhold and H. Härtig. VPFS: building a virtual private file system with a small trusted computing base. SIGOPS Oper. Syst. Rev., 42(4):81-93, 2008.