What if you could actually trust your kernel?

13th Workshop on Hot Topics in Operating Systems, HotOS 2011

Volumn , Issue , 2011, Pages

  Heiser, Gernot ^a   Ryzhyk, Leonid ^a   von Tessin, Michael ^a   Budzynowski, Aleksander ^a  

^a UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

DESIGN SPACES; IMPROVE PERFORMANCE;

EID: 84877706523     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. ANDRONICK, J., GREENAWAY, D., AND ELPHINSTONE, K. Towards proving security in the presence of large untrusted components. In 5th SSV (Vancouver, Canada, Oct 2010), G. Klein, R. Huuck, and B. Schlich, Eds., USENIX. 1
2. ARBAUGH, W. A., FARBER, D. J., AND SMITH, J. M. A secure and reliable bootstrap architecture. In IEEE Symp. Security & Privacy (1997), pp. 65-71. 3
3. BARHAM, P., DRAGOVIC, B., FRASER, K., HAND, S., HARRIS, T., HO, A., NEUGEBAUER, R., PRATT, I., AND WARFIELD, A. Xen and the art of virtualization. In 19th SOSP (Bolton Landing, NY, USA, Oct 2003), pp. 164-177. 1
4. BARTH, A., JACKSON, C., REIS, C., AND THE GOOGLE CHROME TEAM. The security architecture of the Chromium browser. Technical report, Stanford Security Laboratory, 2008. 2
5. GARFINKEL, T., PFAFF, B., CHOW, J., ROSENBLUM, M., AND BONEH, D. Terra: A virtual machine-based platform for trusted computing. In 19th SOSP (Bolton Landing, NY, USA, Oct 2003), pp. 193-206. 1
6. GOLDMAN, K., PEREZ, R., AND SAILER, R. Linking remote attestation to secure tunnel endpoints. In 1st WS Scalable Trusted Comput. (Alexandria, VA, USA, Oct 2006), pp. 21-24. 3
7. GREEEN HILLS SOFTWARE. INTEGRITY secure virtualization. http://www.ghs.com/products/rtos/integrity virtualization. html. 2
8. GRIER, C., TANG, S., AND KING, S. T. Secure web browsing with the OP web browser. In IEEE Symp. Security & Privacy (Oakland, CA, USA, 2008), pp. 402-416. 2
9. HÄRDER, T., AND REUTER, A. Principles of transaction-oriented database recovery. Comput. Surveys 15 (1983), 287-317. 4
10. HEISER, G. Trusted ⇐ trustworthy ⇐ proof-position paper. In 1st Conf. Future Trust Comput. (Berlin, Germany, Jul 2009), D. Gawrock, H. Raimer, A.-R. Sadeghi, and C. Vishik, Eds., Vieweg+Teubner, pp. 55-59. 3
11. HEISER, G., AND LESLIE, B. The OKL4 Microvisor: Convergence point of microkernels and hypervisors. In 1st APSys (New Delhi, India, Aug 2010), pp. 19-24. 2
12. Information Technology - Security Techniques - Evaluation Criteria for IT Security, 1999. ISO/IEC International Standard 15408. 1
13. KLEIN, G., ELPHINSTONE, K., HEISER, G., ANDRONICK, J., COCK, D., DERRIN, P., ELKADUWE, D., ENGELHARDT, K., KOLANSKI, R., NORRISH, M., SEWELL, T., TUCH, H., AND WINWOOD, S. seL4: Formal verification of an OS kernel. In 22nd SOSP (Big Sky, MT, USA, Oct 2009), ACM, pp. 207-220. 1, 2
14. KLEIN, G., MURRAY, T., GAMMIE, P., SEWELL, T., AND WINWOOD, S. Provable security: How feasible is it? In 13th HotOS (Napa, CA, USA, May 2011). 1, 2
15. L4KA TEAM. L4Ka::Pistachio kernel. http://l4ka.org/projects/pistachio/. 2
16. LEROY, X. Formal certification of a compiler back-end, or: Programming a compiler with a proof assistant. In 33rd POPL (Charleston, SC, USA, 2006), J. G. Morrisett and S. L. P. Jones, Eds., ACM, pp. 42-54. 1
17. LYNUXWORKS. LynxSecure embedded hypervisor and separation kernel. http://www.lynuxworks.com/virtualization/hypervisor.php. 2
18. MCCUNE, J. M., PARNO, B., PERRIG, A., REITER, M. K., AND ISOZAKI, H. Flicker: An execution infrastructure for TCB minimization. In 3rd EuroSys Conf. (Apr 2008). 3
19. OZMENT, A., AND SCHECHTER, S. E. Milk or wine: Does software security improve with age? pp. 93-104. 2
20. RUTKOWSKA, J., AND WOJTCZUK, R. Qubes OS architecture, version 0.3. http://qubes-os.org/Architecture.html, Jan 2010. 1, 2, 3
21. RYZHYK, L., CHUBB, P., KUZ, I., LE SUEUR, E., AND HEISER, G. Automatic device driver synthesis with Termite. In 22nd SOSP (Big Sky, MT, USA, Oct 2009). 4
22. STEINBERG, U., AND KAUER, B. NOVA: A microhypervisorbased secure virtualization architecture. In 5th EuroSys Conf. (Paris, France, Apr 2010). 2
23. TANG, S., MAI, H., AND KING, S. T. Trust and protection in the Illinois Browser Operating System. In 9th OSDI (Vancouver, BC, Canada, Oct 2010), pp. 1-15. 2
24. TRUSTED COMPUTING GROUP. Trusted Platform Module. http://www.trustedcomputinggroup.org/developers/trusted platform module. 2
25. WAIDNER, M. An industry perspective on trusted computing. Invited talk at WS Scalable Trusted Comput., Oct 2010. 3