Practical Security Properties on Commodity Computing Platforms: The uber eXtensible Micro-Hypervisor Framework

ISBN-10: 3030250490
ISBN-13: 9783030250492
Category: Computers
Pages: 85
Language: English
Published: 2019-09-20
Publisher: Springer Nature
Author: Amit Vasudevan

Description

This SpringerBrief discusses the uber eXtensible Micro-hypervisor Framework (uberXMHF), a novel micro-hypervisor system security architecture and framework that can isolate security-sensitive applications from other untrustworthy applications on commodity platforms, enabling their safe co-existence. uberXMHF, in addition, facilitates runtime monitoring of the untrustworthy components, which is illustrated in this SpringerBrief. uberXMHF focuses on three goals which are keys to achieving practical security on commodity platforms: (a) commodity compatibility (e.g., runs unmodified Linux and Windows) and unfettered access to platform hardware; (b) low trusted computing base and complexity; and (c) efficient implementation. uberXMHF strives to be a comprehensible, practical and flexible platform for performing micro-hypervisor research and development. uberXMHF encapsulates common hypervisor core functionality in a framework that allows developers and users to build custom micro-hypervisor based (security-sensitive) applications (called "uberapps"). The authors describe several uberapps that employ uberXMHF and showcase the framework efficacy and versatility. These uberapps span a wide spectrum of security applications including application compartmentalization and sandboxing, attestation, approved code execution, key management, tracing, verifiable resource accounting, trusted-path and on-demand I/O isolation. The authors are encouraged by the end result - a clean, barebones, low trusted computing base micro-hypervisor framework for commodity platforms with desirable performance characteristics and an architecture amenable to manual audits and/or formal reasoning. Active, open-source development of uberXMHF continues. The primary audience for this SpringerBrief is system (security) researchers and developers of commodity system software. Practitioners working in system security deployment mechanisms within industry and defense, as well as advanced-level students studying computer science with an interest in security will also want to read this SpringerBrief.

Get the book

Similar books

Family History Digital Libraries
By William Sims Bainbridge
One named Sara and Timberlake had 11 male workers, 1 female worker, and 4 children workers, so it might have employed the Minor family.
Foundation Dreamweaver MX
By Craig Grannell, Jerome Turner, Matt Stephens
So here's what we need to do to arrive at our layout: s Create the main table to hold all the page elements. s Deal with the navigation area which is ...
Cisco CCNA Certification, 2 Volume Set: Exam 200-301
By Todd Lammle
This inclusive, two-book set provides what you need to know to succeed on the new CCNA exam. The set includes Understanding Cisco Networking Technologies: Volume 1 and the CCNA Certification Study Guide: Volume 2.
CompTIA Network+ Study Guide: Exam N10-006
By Todd Lammle
... you can use: –a –A –c –n –r –R –S –s All nbtstat switches are case sensitive. Generally speaking, lowercase switches deal with NetBIOS names of hosts, ...
CompTIA Network+ Study Guide with Online Labs: N10-007 Exam
By Todd Lammle, Jon Buhagiar
... you can use: –a –A –c –n –r –R –S –s All nbtstat switches are case sensitive. Generally speaking, lowercase switches deal with NetBIOS names of hosts, ...
CCNA: Cisco Certified Network Associate FastPass
By Todd Lammle
S The S reference point defines the point between the customer router and an ... with the letter E deal with using ISDN on the existing telephone network.
Stranger in the Chat Room
By Todd Hafer, Jedd Hafer
A sequel to In the Chat Room With God finds a group of teens contacted by a mysterious and increasingly malevolent character who claims to know about their encounters with the Almighty and challenges their beliefs. Original.
Error Correction Coding: Mathematical Methods and Algorithms
By Todd K. Moon
M M−1∑ k=0 −∞ ∞ k=0 The average energy per signal E s ∫ can be related to the ... we will deal primarily with additive white Gaussian noise (AWGN), ...
Security+ Training Guide
By Todd King
... to deal with most , but unfortunately not all , of these potential threats . ... The S / MIME standard implements encryption for message content using ...
CCDA: Cisco Certified Design Associate Study Guide: Exam 640-861
By Todd Lammle, Andy Barkl
S reference point The S reference point defines the reference point between ... with the letter E deal with using ISDN on the existing telephone network.