II-EN: Enhancing Secure Virtual Architecture for Advanced Operating System Research

商用操作系统内核采用了高效但不安全的设计。因此，现代计算系统的核心是不安全的。幸运的是，安全虚拟体系结构（SVA）基础设施允许研究人员为现有硬件上的现有操作系统开发强大的防御。这项工作旨在改进SVA，以便研究人员可以使用它来开发针对日益复杂的安全攻击的防御措施，并构建评估这些防御措施有效性的工具。SVA是一种基于编译器的系统，迄今为止，它一直用于阻止内存安全错误，并保护运行在受损操作系统内核上的应用程序。本研究将对SVA进行三个主要增强，使其能够执行高级安全研究。首先将是加强SVA？S的静态分析特性可以处理现有编译器中灵活多变的代码生成和优化技术，还可以处理操作系统内核代码中常用的难以分析的源代码结构。第二，这项工作将提高SVA？S通过附加到内存对象的任意元数据在运行时分析操作系统行为的能力。最后，提出了增强SVA分析机器码的方案；这一特性将使SVA能够用于研究防御攻击的有效性。

Commodity operating system kernels employ designs that are efficient but insecure. As a result, modern computing systems are insecure at their core. Fortunately, the Secure Virtual Architecture (SVA) infrastructure has allowed researchers to develop strong defenses for existing operating systems on existing hardware. This work seeks to improve SVA so that researchers can use it to develop defenses against increasingly sophisticated security attacks and build tools that evaluate the efficacy of those defenses.SVA is a compiler-based system that, to date, has been used to thwart memory safety errors and to protect applications running on a compromised operating system kernel. This research will make three primary enhancements to SVA to enable it to perform advanced security research. First will be to enhance SVA?s static analysis features to handle flexible and changing code generation and optimization techniques in existing compilers and to handle difficult-to-analyze source code constructs commonly used in operating system kernel code. Second, this work will enhance SVA?s ability to analyze operating system behavior at run-time via arbitrary metadata attached to memory objects. Finally, the plan is to enhance SVA to analyze machine code; this feature will enable SVA to be used in research on the efficacy of defenses against attacks.