Trusted virtual domains on OKL4: Secure information sharing on smartphones

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2011, Pages 49-58

  Davi, Lucas ^a   Dmitrienko, Alexandra ^b   Kowalski, Christoph ^c   Winandy, Marcel ^c  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

^b FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY SIT   (Germany)

^c RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

microkernel; OKL4; smartphone; tvd

Indexed keywords

COMPUTING POWER; DATA LEAKAGE; INFORMATION FLOWS; INFORMATION SHARING; MICROKERNEL; OKL4; POLICY ENFORCEMENT; SECURITY ARCHITECTURE; SECURITY DOMAINS; SECURITY KERNEL; SECURITY MECHANISM; SMART PHONES; TVD; USER EXPERIENCE;

VIRTUAL REALITY;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 80755143411     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2046582.2046592     Document Type: Conference Paper

References (26)

1. F. Armknecht, Y. Gasmi, A. R. Sadeghi, P. Stewin, M. Unger, G. Ramunno, and D. Vernizzi. An efficient implementation of trusted channels based on OpenSSL. In STC '08: Proceedings of the 3rd ACM workshop on Scalable trusted computing, pages 41-50, New York, NY, USA, 2008. ACM.
2. S. Berger, R. Cáceres, K. Goldman, D. Pendarakis, R. Perez, J. R. Rao, E. Rom, R. Sailer, W. Schildhauer, D. Srinivasan, S. Tal, and E. Valdez. Security for the cloud infrastructure: Trusted virtual data center implementation. IBM Journal of Research and Development, 53(4):6:1-6:12, July-August 2009.
3. S. Berger, R. Cáceres, D. Pendarakis, R. Sailer, E. Valdez, R. Perez, W. Schildhauer, and D. Srinivasan. TVDc: managing security in the trusted virtual datacenter. SIGOPS Oper. Syst. Rev., 42(1):40-47, 2008.
4. M. Broersma. Serious security bugs found in Android kernel. http://www.eweekeurope.co.uk/news/ serious-security-bugs-found-in-android- kernel-11040, Nov. 2010.
5. J. Brygier, R. Fuchsen, and H. Blasum. PikeOS: Safe and secure virtualization in a separation microkernel. Technical report, SYSGO, September 2009.
6. S. Bugiel, L. Davi, A. Dmitrienko, S. Heuser, A.-R. Sadeghi, and B. Shastry. Scalable and lightweight domain isolation on Android. In SPSM'11: Proceedings of the 2011 ACM workshop on Security and Privacy in Smartphones and Mobile Devices, 2011.
7. A. Bussani, J. L. Griffin, B. Jansen, K. Julisch, G. Karjoth, H. Maruyama, M. Nakamura, R. Perez, M. Schunter, A. Tanner, L. V. Doorn, E. A. V. Herreweghen, M. Waidner, and S. Yoshihama. Trusted Virtual Domains: Secure foundations for business and IT services. Technical Report RC23792, IBM Research, November 2005.
8. S. Cabuk, C. I. Dalton, K. Eriksson, D. Kuhlmann, H. G. V. Ramasamy, G. Ramunno, A.-R. Sadeghi, M. Schunter, and C. Stüble. Towards automated security policy enforcement in multi-tenant virtual data centers. Journal of Computer Security, 18(1):89-121, 2010.
9. S. Cabuk, C. I. Dalton, H. Ramasamy, and M. Schunter. Towards automated provisioning of secure virtualized networks. In CCS '07: Proceedings of the 14th ACM Conference on Computer and Communications Security, pages 235-245. ACM, 2007.
10. L. Catuogno, A. Dmitrienko, K. Eriksson, D. Kuhlmann, G. Ramunno, A.-R. Sadeghi, S. Schulz, M. Schunter, M. Winandy, and J. Zhan. Trusted virtual domains - design, implementation and lessons learned. In Trusted Systems, First International Conference, INTRUST 2009, volume 6163/2010 of Lecture Notes in Computer Science, pages 156-179. Springer, 2010.
11. T. Digital. Enterprise Mobility Management. http://trustdigital.com/.
12. Enterproid. Enterproid Devide. http://www.enterproid.com.
13. Florian Feldmann Utz Gnaida, Christian Stüble, and Marcel Selhorst. Towards a trusted mobile desktop. In TRUST2010: 3rd International Conference on Trust and Trustworthy Computing, 2010.
14. Y. Gasmi, A.-R. Sadeghi, P. Stewin, M. Unger, M. Winandy, R. Husseiki, and C. Stüble. Flexible and secure enterprise rights management based on trusted virtual domains. In STC '08: Proceedings of the 3rd ACM workshop on Scalable trusted computing, pages 71-80. ACM, 2008.
15. K. Goldman, R. Perez, and R. Sailer. Linking remote attestation to secure tunnel endpoints. In STC '06: Proceedings of the First ACM Workshop on Scalable Trusted Computing, pages 21-24, 2006.
16. J. L. Griffin, T. Jaeger, R. Perez, R. Sailer, L. van Doorn, and R. Cáceres. Trusted Virtual Domains: Toward secure distributed services. In Proceedings of the 1st IEEE Workshop on Hot Topics in System Dependability (HotDep'05), June 2005.
17. G. Heiser and B. Leslie. The OKL4 microvisor: convergence point of microkernels and hypervisors. In Proceedings of the rst ACM asia-pacic workshop on Workshop on systems, APSys '10, pages 19-24, New York, NY, USA, 2010. ACM.
18. Y. Katsuno, M. Kudo, P. Perez, and R. Sailer. Towards Multi-Layer Trusted Virtual Domains. In The Second Workshop on Advances in Trusted Computing (WATC 2006 Fall), pages 133-138, Tokyo, Japan, Nov. 2006. Japanese Ministry of Economy, Trade and Industry (METI).
19. G. Klein, K. Elphinstone, G. Heiser, J. Andronick, D. Cock, P. Derrin, D. Elkaduwe, K. Engelhardt, R. Kolanski, M. Norrish, T. Sewell, H. Tuch, and S. Winwood. seL4: Formal verication of an OS kernel. In SOSP '09: Proceedings of the ACM SIGOPS 22nd Symposium on Operating Systems Principles, pages 207-220. ACM, 2009.
20. O. K. Labs. OKL4 Microvisor. http: //www.ok-labs.com/products/okl4- microvisor.
21. J. Liedtke. On micro-kernel construction. In SOSP '95: Proceedings of the 15th ACM Symposium on Operating System Principles, pages 237-250. ACM, 1995.
22. H. Löhr, T. Pöppelmann, J. Rave, M. Steegmanns, and M. Winandy. Trusted virtual domains on OpenSolaris: Usable secure desktop environments. In STC '10: Proceedings of the 5th Annual Workshop on Scalable Trusted Computing, pages 91-96. ACM, 2010.
23. H. Löhr, A.-R. Sadeghi, C. Vishik, and M. Winandy. Trusted privacy domains - challenges for trusted computing in privacy-protecting information sharing. In Information Security Practice and Experience, 5th International Conference, ISPEC 2009, volume 5451 of Lecture Notes in Computer Science, pages 396-407. Springer, 2009.
24. J. Matthews. Android Migration at the Speed of Light. http://www.ok-labs.com/-assets/image- library/ Android%20Migration%20at%20the%20Speed%20of%20Light.pdf, June 2009.
25. Trusted Computing Group. Mobile Trusted Module (MTM) Specication. Version 1.0 Revision 6, 26 June 2008.
26. Trusted Computing Group. Trusted Platform Module (TPM) Main Specication. Version 1.2 Revision 103, 9 July 2007.