Delivering secure applications on commercial mobile devices: The case for bare metal hypervisors

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2011, Pages 33-38

  Gudeth, Kevin ^a   Pirretti, Matthew ^a   Hoeper, Katrin ^a   Buskey, Ron ^a  

^a MOTOROLA INC   (United States)

Author keywords

mobile virtualization

Indexed keywords

CODE RUNNING; END USERS; FORMAL VERIFICATIONS; HYPERVISOR; IS ASSURANCE; LINES OF CODE; MOBILE APPLICATIONS; ORDERS OF MAGNITUDE; SYSTEM VULNERABILITY; TRUSTED COMPUTING BASE; TRUSTED OPERATING SYSTEM; VIRTUALIZATIONS;

COMPUTER PRIVACY; METALS; MOBILE DEVICES; MOBILE TELECOMMUNICATION SYSTEMS;

PORTABLE EQUIPMENT;

EID: 80755127066     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2046614.2046622     Document Type: Conference Paper

References (32)

1. ARM Limited, 110 Fulbourn Road Cambridge, England CB1 9NJ. Virtualization Extensions Architecture Specication, October 2010.
2. B Labs Ltd. Codezero project overview. http://www.14dev.org/codezero- overview.
3. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Wareld. Xen and the art of virtualization. In Proceedings of the nineteenth ACM symposium on Operating systems principles, SOSP '03, pages 164-177, New York, NY, USA, 2003. ACM.
4. K. Barr, P. Bungale, S. Deasy, V. Gyuris, P. Hung, C. Newell, H. Tuch, and B. Zoppis. The vmware mobile virtualization platform: is that a hypervisor in your pocket? SIGOPS Oper. Syst. Rev., 44:124-135, December 2010.
5. J. Brakensiek, A. Dröge, M. Botteck, H. Härtig, and A. Lackorzynski. Virtualization as an enabler for security in mobile devices. In Proceedings of the 1st workshop on Isolation and integration in embedded systems, IIES '08, pages 17-22, New York, NY, USA, 2008. ACM.
6. D. Brash. Extensions to the ARMv7-A architecture. In Hotchips 22, Stanford University, California, August 2010.
7. B. Carlson. Going "beyond a faster horse" to transform mobile devices. Technical Report SWPT048, Texas Instruments Incorporated, Texas Instruments, Post Offce Box 655303, Dallas, Texas 75265, May 2011.
8. Coverity. Coverity scan 2010 open source integrity report reveals high risk software flaws in android. http://www.coverity.com/html/press/coverity- scan-2010- report-reveals-high-risk-software-flaws-in-android.html.
9. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: a virtual machine-based platform for trusted computing. In Proceedings of the nineteenth ACM symposium on Operating systems principles, SOSP '03, pages 193-206. ACM, 2003.
10. Google, Inc. Android developer guide: Security and permissions. http://developer.android.com/guide/topics/security/security.html.
11. G. Heiser and B. Leslie. The okl4 microvisor: convergence point of microkernels and hypervisors. In Proceedings of the first ACM asia-pacific workshop on Workshop on systems, APSys '10, pages 19-24, New York, NY, USA, 2010. ACM.
12. G. H. S. Inc. Integrity secure virtualization, 2011. http: //www.ghs.com/products/rtos/integrity-virtualization.html.
13. H. Inoue, J. Sakai, and M. Edahiro. Processor virtualization for secure mobile terminals. ACM Trans. Des. Autom. Electron. Syst., 13:48:1-48:23, July 2008.
14. G. Klein, K. Elphinstone, G. Heiser, J. Andronick, D. Cock, P. Derrin, D. Elkaduwe, K. Engelhardt, R. Kolanski, M. Norrish, T. Sewell, H. Tuch, and S. Winwood. sel4: formal verification of an os kernel. In Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles, SOSP '09, pages 207-220, New York, NY, USA, 2009. ACM.
15. G. Kroah-Hartman, J. Corbet, and A. McPherson. Linux kernel development. Technical report, The Linux Foundation, December 2010.
16. O. K. Labs. OKL4 microvisor, 2011. http://www.ok-labs.com/products/okl4- microvisor.
17. A. Lackorzynski and A. Warg. Taming subsystems: capabilities as universal resource access control in 14. In Proceedings of the Second Workshop on Isolation and Integration in Embedded Systems, IIES '09, pages 25-30, New York, NY, USA, 2009. ACM.
18. S.-M. Lee, S.-B. Suh, and J.-D. Choi. Fine-grained i/o access control based on xen virtualization for 3g/4g mobile devices. In Proceedings of the 47th Design Automation Conference, DAC '10, pages 108-113, New York, NY, USA, 2010. ACM.
19. S.-M. Lee, S.-B. Suh, B. Jeong, S. Mo, B. M. Jung, J.-H. Yoo, J.-M. Ryu, and D.-H. Lee. Fine-grained i/o access control of the mobile devices based on the xen architecture. In Proceedings of the 15th annual international conference on Mobile computing and networking, MobiCom '09, pages 273-284, New York, NY, USA, 2009. ACM.
20. S. E. Madnick and J. J. Donovan. Application and analysis of the virtual machine approach to information system security and isolation. In Proceedings of the workshop on virtual computer systems, pages 210-224, New York, NY, USA, 1973. ACM.
21. McAfee Labs. Mcafee threats report: First quarter 2011. http://www.mcafee.com/us/resources/reports/rp-quarterly-threat-q1-2011.pdf.
22. L. MontaVista Software. Beyond virtualization: The montavista approach to multi-core soc resource allocation and control, 2010. http://www.mvista.com/ download/Whitepaper- Beyond-Virtualization.pdf.
23. No1.BC. http://www.no1bc.com/.
24. R. Sailer, T. Jaeger, E. Valdez, R. Caceres, R. Perez, S. Berger, J. L. Griffin, and L. v. Doorn. Building a mac-based security architecture for the xen open-source hypervisor. In Proceedings of the 21st Annual Computer Security Applications Conference, pages 276-285, Washington, DC, USA, 2005. IEEE Computer Society.
25. SecuSmart. https://www.secusmart.com/en/home-en.html.
26. R. B. Software. Mobile virtualization, 2011. http://www.redbend.com/ index.php?option=com-content&view=article&id=134&Itemid=60&lang= en.
27. U. Steinberg and B. Kauer. NOVA: a microhypervisor-based secure virtualization architecture. In Proceedings of the 5th European conference on Computer systems, EuroSys '10, pages 209-222, New York, NY, USA, 2010. ACM.
28. S.-b. Suh, X. Song, J. Kumar, D. Mohapatra, U. Ramachandran, J.-H. Yoo, and I. Park. Chameleon: a capability adaptation system for interface virtualization. In Proceedings of the First Workshop on Virtualization in Mobile Computing, MobiVirt '08, pages 18-22, New York, NY, USA, 2008. ACM.
29. VMWare. http://www.vmware.com/.
30. I. Wind River Systems. Wind river hypervisor, 2011. http://www.windriver. com/products/product- overviews/PO-Hypervisor-0611.pdf.
31. J. Winter. Trusted computing building blocks for embedded linux-based arm trustzone platforms. In Proceedings of the 3rd ACM workshop on Scalable trusted computing, STC '08, pages 21-30, New York, NY, USA, 2008. ACM.
32. X. Zhang, O. Aciiçmez, and J.-P. Seifert. A trusted mobile phone reference architecturevia secure kernel. In Proceedings of the 2007 ACM workshop on Scalable trusted computing, STC '07, pages 7-14, New York, NY, USA, 2007. ACM.