CertiKOS: A certified kernel for secure cloud computing

Proceedings of the 2nd Asia-Pacific Workshop on Systems, APSys'11

Volumn , Issue , 2011, Pages

  Gu, Liang ^a   Vaynberg, Alexander ^a   Ford, Bryan ^a   Shao, Zhong ^a   Costanzo, David ^a  

^a YALE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CERTIFIED SOFTWARE; CLOUD SERVICES; COMPUTING SOLUTIONS; EVOLVABLE; FORMAL CERTIFICATION; HYPERVISOR; I/O DEVICE; INFORMATION LEAKAGE; LEAK-FREE; MANAGEMENT SOFTWARE; ON-DEMAND SERVICES; RESOURCE MANAGEMENT; RUNTIME MONITORING; SENSITIVE INFORMATIONS;

CLOUD COMPUTING;

EID: 84857241379     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2103799.2103803     Document Type: Conference Paper

References (28)

1. Intel virtualization technology (VT). http://www.intel.com/technology/ virtualization/technology.htm.
2. Parallel instructional operating system. http://zoo.cs.yale.edu/classes/ cs422/pios.
3. AMD. AMD64 virtualization codenamed "Pacifica" technology - secure virtual machine architecture reference manual. Tech. Rep. Publication Number 33047, Revision 3.01, AMD, May 2005.
4. AZAB, A. M., NING, P., WANG, Z., JIANG, X., ZHANG, X., AND SKALSKY, N. C. Hypersentry: enabling stealthy in-context measurement of hypervisor integrity. In 17th ACM Conference on Computer and Communications Security, 2010, E. Al-Shaer, A. D. Keromytis, and V. Shmatikov, Eds., pp. 38-49.
5. CAI, H., SHAO, Z., AND VAYNBERG, A. Certified self-modifying code. In Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation, PLDI '07, pp. 66-77.
6. CIRCLEID. Survey: Cloud Computing No Hype, But Fear of Security and Control Slowing Adoption. http://www.circleid.com/posts/20090226-cloud- computing-hype-security/.
7. CVE. CVE-2008-2100: VMware Buffer Overflows in VIX API Let Local Users Execute Arbitrary Code in Host OS. http://cve.mitre.org/cgi-bin/cvename.cgi? name=CVE-2008-2100.
8. EFSTATHOPOULOS, P., KROHN, M., VANDEBOGART, S., FREY, C., ZIEGLER, D., KOHLER, E., MAZIÈRES, D., KAASHOEK, F., AND MORRIS, R. Labels and event processes in the asbestos operating system. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP'07) (Brighton, UK, Oct. 2005), ACM, pp. 17-30.
9. ENGLER, D. R., KAASHOEK, M. F., AND O'TOOLE, JR., J. Exokernel: an operating system architecture for application-level resource management. In Proceedings of the fifteenth ACM symposium on Operating systems principles, SOSP '95, pp. 251-266.
10. FENG, X. An Open Framework for Certified System Software. Ph.D. thesis, Department of Computer Science, Yale University, 2007.
11. FENG, X., SHAO, Z., DONG, Y., AND GUO, Y. Certifying low-level programs with hardware interrupts and preemptive threads. In Proceedings of the 2008 ACM SIGPLAN conference on Programming language design and implementation, PLDI '08, pp. 170-182.
12. GARFINKEL, T., PFAFF, B., CHOW, J., ROSENBLUM, M., AND BONEH, D. Terra: a virtual machine-based platform for trusted computing. In Proceedings of the nineteenth ACM symposium on Operating systems principles, SOSP '03, pp. 193-206.
13. HUNT, G. C., LARUS, J. R., ABADI, M., AIKEN, M., BARHAM, P., FAHNDRICH, M., HAWBLITZEL, C., HODSON, O., LEVI, S., MURPHY, N., STEENSGAARD, B., TARDITI, D., WOBBER, T., AND ZILL, B. An overview of the Singularity project. Tech. Rep. MSR-TR-2005-135, Microsoft Research, Redmond, WA, USA, Oct. 2005.
14. KELLER, E., SZEFER, J., REXFORD, J., AND LEE, R. B. Nohype: Virtualized cloud infrastructure without the virtualization. In Proc. 37th International Symposium on Computer Architecture (37th ISCA'10) (Saint-Malo, France, June 2010), ACM SIGARCH, pp. 350-361.
15. KLEIN, G., ELPHINSTONE, K., HEISER, G., ANDRONICK, J., COCK, D., DERRIN, P., ELKADUWE, D., ENGELHARDT, K., KOLANSKI, R., NORRISH, M., SEWELL, T., TUCH, H., AND WINWOOD, S. seL4: Formal verification of an OS kernel. In Proceedings of the 22nd Symposium on Operating Systems Principles (22nd SOSP'09), Operating Systems Review (OSR) (Big Sky, MT, Oct. 2009), ACM SIGOPS, pp. 207-220.
16. KROHN, M. N., YIP, A., BRODSKY, M. Z., CLIFFER, N., KAASHOEK, M. F., KOHLER, E., AND MORRIS, R. Information flow control for standard os abstractions. In SOSP (2007), pp. 321-334.
17. MYERS, A. C., AND LISKOV, B. A decentralized model for information flow control. In SOSP (1997), pp. 129-142.
18. REYNOLDS, J. C. Separation logic: A logic for shared mutable data structures. In LICS (2002), pp. 55-74.
19. RISTENPART, T., TROMER, E., SHACHAM, H., AND SAVAGE, S. Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In Proceedings of the 16th ACM conference on Computer and communications security, CCS '09, pp. 199-212.
20. SABELFELD, A., AND SANDS, D. Declassification: Dimensions and principles. Journal of Computer Security 17, 5 (2009), 517-548.
21. SAILER, R., JAEGER, T., VALDEZ, E., CACERES, R., PEREZ, R., BERGER, S., GRIFFIN, J. L., AND DOORN, L. V. Building a mac-based security architecture for the xen open-source hypervisor. In Proceedings of the 21st Annual Computer Security Applications Conference (2005), pp. 276-285.
22. SANTOS, N., GUMMADI, K. P., AND RODRIGUES, R. Towards trusted cloud computing. In Proceedings of the conference on Hot topics in cloud computing, HotCloud'09, pp. 3-3.
23. SHAO, Z. Certified software. Commun. ACM 53 (December 2010), 56-66.
24. TRUSTED COMPUTING GROUP. TPM main specification. http://www. trustedcomputinggroup.org, Feb. 2005.
25. WANG, Z., AND JIANG, X. Hypersafe: A lightweight approach to provide lifetime hypervisor control-flow integrity. In Proceedings of the 2010 IEEE Symposium on Security and Privacy (2010), SP '10, pp. 380-395.
26. WOJTCZUK, R. Subverting the Xen hypervisor. In Blackhat (2008).http://www.invisiblethingslab.com/resources/bh08/part1.pdf.
27. YU, D., HAMID, N. A., AND SHAO, Z. Building certified libraries for pcc: dynamic storage allocation. Sci. Comput. Program. 50 (March 2004), 101-127.
28. ZELDOVICH, N., BOYD-WICKIZER, S., KOHLER, E., AND MAZIÈRES, D. Making information flow explicit in HiStar. In Proceedings of the Sixth Symposium on Operating Systems Design and Implementation (Nov. 2006).