CT-ISG: Improving System Security with a Compiler-based Virtual Machine for Operating System Kernels

点击翻译按钮获取中文摘要

The Secure Virtual Architecture (SVA, formerly called LLVA for low-level virtual architecture)project is developing a novel framework to improve operatingsystem security and reliability. The two broad goals of theproject are (a) to develop a compiler-enforced virtual machinethat is safe, low-level, efficient, and capable of hosting astandard C/C++-based operating system and all its applications;and (b) to investigate how this organization can improve overallsystem security and provide new security capabilities. The SVAapproach will provide important capabilities not currentlyavailable for widely-used commodity systems, including a "safe executionenvironment," inescapable logging of kernel activity, and apurely software approach to keep application data secret evenfrom the underlying operating system. The software tools developed under this project will be made available to the research and education communities in operating systems and security.