CT-ISG: Improving System Security with a Compiler-based Virtual Machine for Operating System Kernels

安全虚拟体系结构（Secure Virtual Architecture，SVA，以前称为LLVA）项目正在开发一种新的框架来提高操作系统的安全性和可靠性。 该项目的两个主要目标是：（a）开发一个编译器强制的虚拟机，它是安全的、低级的、高效的，并且能够托管基于标准C/C++的操作系统及其所有应用程序;（B）研究该组织如何提高整个系统的安全性并提供新的安全功能。 SVA方法将提供目前广泛使用的商品系统所不具备的重要功能，包括“安全执行环境”、不可避免的内核活动日志记录，以及使应用程序数据即使对底层操作系统也保密的专用软件方法。 在该项目下开发的软件工具将提供给操作系统和安全方面的研究和教育界。

The Secure Virtual Architecture (SVA, formerly called LLVA for low-level virtual architecture)project is developing a novel framework to improve operatingsystem security and reliability. The two broad goals of theproject are (a) to develop a compiler-enforced virtual machinethat is safe, low-level, efficient, and capable of hosting astandard C/C++-based operating system and all its applications;and (b) to investigate how this organization can improve overallsystem security and provide new security capabilities. The SVAapproach will provide important capabilities not currentlyavailable for widely-used commodity systems, including a "safe executionenvironment," inescapable logging of kernel activity, and apurely software approach to keep application data secret evenfrom the underlying operating system. The software tools developed under this project will be made available to the research and education communities in operating systems and security.