CT-ISG: Nexus: A New Operating System for Trusted Computing

用于安全计算的防篡改协处理器将成为未来计算机的标准硬件功能。然而，当前的操作系统缺乏支持可信计算所需的体系结构和抽象。开发了一种新的操作系统抽象，称为活动证明，它允许随时构造关于应用程序属性的不可伪造、描述性、简约的证书。实现了一种新的操作系统机制，称为安全内存区域，使应用程序能够保护不可信辅助存储上的数据的完整性和机密性。最后，在不使用重量级虚拟机技术的情况下，实现了一种支持强隔离的新操作系统体系结构。这三个功能结合在一起，实现了一个新的操作系统，它允许一种新的应用程序类，可以为它们的运行时行为提供强有力的保证。这样的保证有助于保护系统免受恶意软件和病毒的攻击，对远程计算机上的用户进行身份验证，并排除针对分布式系统的协议攻击。

Tamper-proof coprocessors for secure computing are poised to become astandard hardware feature on future computers. Current operatingsystems, however, lack the architecture and abstractions required tosupport trustworthy computing. A new OS abstraction, called activeattestation, was developed that enables unforgeable, descriptive,parsimonious certificates about application properties to beconstructed at any time. A new OS mechanism, called secure memoryregions, was implemented that enables applications to protect theintegrity and confidentiality of data on untrusted secondarystorage. Finally, a new OS architecture was implemented that supportsstrong isolation without the use of heavyweight virtual machinetechnology. Combined, these three features enable a new operatingsystem that permits a new class of applications that can providestrong guarantees about their runtime behavior. Such guarantees helpsecure systems against malware and viruses, authenticate users onremote computers, and rule out protocol attacks against distributedsystems.