CT-ISG: Improving System Security with a Compiler-based Virtual Machine for Operating System Kernels

安全虚拟体系结构(SVA，以前称为LIVA，意为低层虚拟体系结构)项目正在开发一个新的框架来提高操作系统的安全性和可靠性。该项目的两个主要目标是：(A)开发一个安全、低级、高效并能够托管标准的基于C/C的操作系统及其所有应用程序的编译器强制执行的虚拟机；(B)调查该组织如何提高整个系统的安全性并提供新的安全能力。SVA方法将提供目前广泛使用的商用系统所没有的重要功能，包括“安全执行环境”、不可避免的内核活动日志记录，以及即使在底层操作系统也能确保应用程序数据保密的软件方法。在该项目下开发的软件工具将向研究和教育界提供操作系统和安全方面的信息。

The Secure Virtual Architecture (SVA, formerly called LLVA for low-level virtual architecture)project is developing a novel framework to improve operatingsystem security and reliability. The two broad goals of theproject are (a) to develop a compiler-enforced virtual machinethat is safe, low-level, efficient, and capable of hosting astandard C/C++-based operating system and all its applications;and (b) to investigate how this organization can improve overallsystem security and provide new security capabilities. The SVAapproach will provide important capabilities not currentlyavailable for widely-used commodity systems, including a "safe executionenvironment," inescapable logging of kernel activity, and apurely software approach to keep application data secret evenfrom the underlying operating system. The software tools developed under this project will be made available to the research and education communities in operating systems and security.