CSR: Small: Hardware/Software Co-Monitoring

操作系统崩溃会导致重要服务中断、生产力损失和系统可信度降低。 操作系统崩溃的一个常见原因是硬件设备及其驱动程序之间的交互故障。 这种设备/驱动程序故障也是一种安全威胁，在驱动程序中植入后门会进一步加剧这种威胁。 本项目将开发在运行时监控设备/驱动程序交互的技术，以提高驱动程序的可靠性和安全性。本项目将探索硬件/软件协同监控，即，同时监控硬件设备和软件驱动程序。这项研究有四个主要目标。首先，它开发了在设备/驱动程序接口的属性的运行时验证技术。其次，它提供了针对设备和驱动器故障的保护和适应机制。第三，它有助于检测（和保护）瞬态硬件故障。 这些错误是特别难以检测与传统的调试方法，因为缺乏可重放性。第四，它提供了一个早期发现安全漏洞的机制，并为动态保护和适应机制提供系统支持。该项目的成果是在面对具有许多不同设备和驱动程序的集成系统的持续趋势时开发值得信赖的计算机的工具。研究结果将通过学术出版物传播，公开发布共同监测框架及其支持工具，纳入本科和研究生课程，并通过积极合作向行业转让技术。

Operating system crashes result in the interruption of vital services, productivity losses, and diminished system trustworthiness. A frequent cause of operating system crashes is a malfunction in the interaction between a hardware device and its driver. Such device/driver malfunctions are also a security threat which can be further exacerbated by backdoors planted in the drivers. This project will develop techniques to monitor device/driver interactions at run-time which can be used to enhance driver reliability and security.This project explores hardware/software co-monitoring, i.e., simultaneous monitoring of hardware devices and software drivers. The research has four main goals. First, it develops techniques for run-time verification of properties at the device/driver interfaces. Second, it offers protection and adaptation mechanisms against both device and driver malfunctions. Third, it facilitates detection of (and protection against) transient hardware failures. These errors are particularly difficult to detect with traditional debugging methods, because of lack of replayability. Fourth, it provides a mechanism for early detection of security vulnerabilities, and system supports for on-the-fly protection and adaptation mechanisms. The outcomes of this project are tools for developing trustworthy computers in the face of a continual trend towards integrated systems with many disparate devices and drivers. The results will be disseminated by academic publications, publicly releasing the co-monitoring framework and its supporting tools, integration into undergraduate and graduate curricula, and technology transfer to the industry via active collaboration.