TrustGraph: Trusted graphics subsystem for high assurance systems

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2009, Pages 254-265

  Okhravi, Hamed ^a   Nicol, David M ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Covert channel analysis; Formal verification; Multi level security; Trusted graphics; Virtualization

Indexed keywords

COVERT CHANNELS; CRITICAL COMPONENT; DEGREE OF SEPARATION; FORMAL VERIFICATIONS; GRAPHICS SUBSYSTEM; HIGH ASSURANCE; HIGH ASSURANCE SYSTEMS; I/O DEVICE; MULTI-LEVEL SECURITY; SECURITY MECHANISM; SECURITY POLICY; SECURITY PRINCIPLES; SIMPLE OPERATION; THREATS AND ATTACKS; VIRTUALIZATIONS;

APPLICATION PROGRAMMING INTERFACES (API); CHANNEL CAPACITY; COMPLEXATION;

COMPUTER APPLICATIONS;

EID: 77950834189     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2009.31     Document Type: Conference Paper

References (42)

1. Directfb. http://www.directfb.org/.
2. Mozilla directfb porting. https://wiki.mozilla.org/Mobile/DFBPorting.
3. Trusted computer system evaluation criteria. National Security Institute, 1985. 5200.28-STD.
4. Amd i/o virtualization technology (iommu) specification. Advanced Micro Devices, 2006. publication no. 34434.
5. Common criteria security assurance requirements. Common Criteria Recognition Arrangement, 2007. CCPART3V3.
6. Jim Alves-Foss, Carol Taylor, and Paul Oman. A multi-layered approach to security in high assurance systems. In HICSS '04: Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 9, page 90302.2, Washington, DC, USA, 2004. IEEE Computer Society.
7. Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, and Andrew Warfield. Xen and the art of virtualization. In SOSP '03: Proceedings of the nineteenth ACM symposium on Operating systems principles, pages 164-177, New York, NY, USA, 2003. ACM.
8. D. Bell and L. LaPadula. Secure computer systems: Mathematical foundations. Technical Report MTR-2547, MITRE Corp., 1973.
9. Biba. Integrity considerations for secure computer systems. MITRE Co., technical report ESD-TR 76-372, 1977.
10. T. L. Borden, J. P. Hennessy, and J. W. Rymarczyk. Multiple operating systems on one processor complex. IBM Syst. J., 28(1):104-123, 1989.
11. J. Epstein. A high-performance hardware-based high-assurance trusted windowing system. In NISSC'96: National Information Systems Security Conference, 1996.
12. J. Epstein. Fifteen years after tx: A look back at high assurance multi-level secure windowing. In ACSAC '06: Proceedings of the 22nd Annual Computer Security Applications Conference, pages 301-320, Washington, DC, USA, 2006. IEEE Computer Society.
13. J. Epstein, J. McHugh, R. Pascale, H. Orman, G. Benson, C. Martin, A. Marmor-Squires, B. Danner, and M. Branstad. A prototype b3 trusted x window system. Computer Security Applications Conference, 1991. Proceedings., Seventh Annual, pages 44-55, Dec 1991.
14. J. Epstein and J. Picciotto. Trusting x: Issues in building trusted x window systems -or- what's not trusted about x? In Proceedings of the 14th Annual National Computer Security Conference, October 1991.
15. N. Feske and C. Helmuth. A nitpicker's guide to a minimal-complexity secure gui. In ACSAC '05: Proceedings of the 21st Annual Computer Security Applications Conference, pages 85-94, Washington, DC, USA, 2005. IEEE Computer Society.
16. Tal Garfinkel, Ben Pfaff, Jim Chow, Mendel Rosenblum, and Dan Boneh. Terra: a virtual machine-based platform for trusted computing. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP '03), pages 193-206, New York, NY, USA, 2003. ACM Press.
17. W.-M. Hu. Reducing timing channels with fuzzy time. Research in Security and Privacy, 1991. Proceedings of the 1991 IEEE Computer Society Symposium on, pages 8-20, 1991.
18. J. Humphreys and T. Grieser. Mainstreaming server virtualization: The intel approach. IDC, 2006.
19. Paul A. Karger. Multi-level security requirements for hypervisors. In ACSAC '05: Proceedings of the 21st Annual Computer Security Applications Conference, pages 267-275, Washington, DC, USA, 2005. IEEE Computer Society.
20. Paul A. Karger and David R. Safford. I/o for virtual machine monitors: Security and performance issues. IEEE Security and Privacy, 6(5):16-23, 2008.
21. Paul A. Karger, Mary Ellen Zurko, Douglas W. Bonin, Andrew H. Mason, and Clifford E. Kahn. A retrospective on the vax vmm security kernel. IEEE Trans. Softw. Eng., 17(11):1147-1165, 1991.
22. M. Kaufmann and R. S. Boyer. The boyer-moore theorem prover and its interactive enhancement. Computers and Mathematics with Applications, 29(2):27-62, 1995.
23. M. Kaufmann and J. S. Moore. ACL2, volume Version 3.4. University of Texas at Austin, August 2008.
24. D. Kilpatrick, W. Salamon, and C. Vance. Securing the x window system with selinux. Technical report, National Security Agency, March 2003.
25. Avi Kivity, Yaniv Kamay, Dor Laor, Uri Lublin, and Anthony Liguori. Kvm: the linux virtual machine monitor. In Ottawa Linux Symposium, pages 225-230, July 2007.
26. M. Manely. The x window system must die. Featured Articles, July 2000. Linux.com.
27. M. Matsumoto and T. Nishimura. Mersenne twister: a 623-dimensionally equidistributed uniform pseudo-random number generator. ACM Transactions on Modeling and Computer Simulation, 8(3), 1998.
28. R. Meushaw and D. Simard. Nettop: Commercial technology in high assurance applications. National Security Agency Tech Trend Notes, 9(4):3-10, Fall 2000.
29. J. Millen. 20 years of covert channel modeling and analysis. Security and Privacy, 1999. Proceedings of the 1999 IEEE Symposium on, pages 113-114, 1999.
30. C. Paget. Exploiting design flaws in the win32 api for privilege escalation, August 2002. web.archive.org.
31. J. Picciotto. Towards trusted cut and paste in the x window system. Computer Security Applications Conference, 1991. Proceedings., Seventh Annual, pages 34-43, Dec 1991.
32. J. Picciotto and J. Epstein. A comparison of trusted x security policies, architectures, and interoperability. Computer Security Applications Conference, 1992. Proceedings., Eighth Annual, pages 142-152, Nov-4 Dec 1992.
33. R. Sailer, T. Jaeger, E. Valdez, R. Caceres, R. Perez, S. Berger, J.L. Griffin, and L. Doorn. Building a mac-based security architecture for the xen open-source hypervisor. Computer Security Applications Conference, 21st Annual, pages 285-295, 2005.
34. Robert W. Scheifler and Jim Gettys. The x window system. ACM Trans. Graph., 5(2):79-109, April 1986.
35. A. Seshadri, M. Luk, N. Qu, and A. Perrig. Secvisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity oses. In SOSP '07: Proceedings of 21st ACM SIGOPS symposium on Operating systems principles, pages 335-350, 2007.
36. S. Smalley, C. Vance, and W. Salamon. Implementing selinux as a linux security module. Technical report, National Securoty Agency, May 2002.
37. Guy Steele. Common LISP : The Language (LISP Series). Digital Press, June 1984.
38. R. Scott Thompson. Quartz 2D Graphics for Mac OS X(R) Developers. Addison-Wesley Professional, 2006.
39. Bruce J. Walker, Richard A. Kemmerer, and Gerald J. Popek. Specification and verification of the ucla unix security kernel. Commun. ACM, 23(2):118-131, February 1980.
40. E. Walsh. X access control extension specification, 2006. X.org Foundation.
41. E. Walsh. Application of the flask architecture to the x window system server. In Proceedings of the 2007 SELinux Symposium, 2007.
42. J. P. L. Woodward. Security requirements for system high and compartmented mode workstations. Technical Report MTR 9992, MITRE Corporation, November 1987.