seL4 Microkernel for Virtualization Use-Cases: Potential Directions towards a Standard VMM

نویسندگان

چکیده

Virtualization plays an essential role in providing security to computational systems by isolating execution environments. Many software solutions, called hypervisors, have been proposed provide virtualization capabilities. However, only a few were designed for being deployed at the edge of network devices with fewer computation resources when compared servers Cloud. Among lightweight that can play hypervisor role, seL4 stands out small Trusted Computing Base and formally verified components, enhancing its security. Despite today more than decade microkernel technology, existing userland tools are still scarce not very mature. Over last years, main effort has increase maturity kernel itself, applications be hosted on top. Therefore, it currently lacks proper support full-featured Virtual Machine Monitor, one is quite fragmented. This article discusses potential directions standard VMM presenting our view design principles feature set needed. does intend define VMM, we instigate this discussion through community.

برای دانلود باید عضویت طلایی داشته باشید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Verified Protection Model of the seL4 Microkernel

This paper presents a machine-checked high-level security analysis of seL4—an evolution of the L4 kernel series targeted to secure, embedded devices. We provide an abstract specification of the seL4 access control system together with a formal proof that shows how confined subsystems can be enforced. All proofs and specifications in this paper are developed in the interactive theorem prover Isa...

متن کامل

Microkernel Verification Down To Assembly Extending the seL4 verification

When constructing systems with high assurance requirements, it is desirable to build on a formally verified trusted computing base, such as the seL4 microkernel [4]. The verification of seL4 guarantees correctness down to the kernel’s C implementation and relies on the correctness of the C compiler used. CompCert, a verified C compiler [2, 5], has the potential to extend these guarantees to the...

متن کامل

Refinement in the formal verification of the seL4 microkernel

We present an overview of the different refinement frameworks used in the L4.verified project to formally prove the functional correctness of the seL4 microkernel. The verification is conducted in the interactive theorem prover Isabelle/HOL and proceeds in two large refinement steps: one proof between two monadic, functional specifications in HOL and one proof between such a monadic specificati...

متن کامل

Timing Aware Hardware Virtualization on the L4Re Microkernel System

Hardware virtualization support has found its way into real-time and embedded systems. It is paramount for an efficient concurrent execution of multiple systems on a single platform, including commodity operating-systems and their applications. Isolation is a key feature for these systems, both in the spatial and temporal domain, as it allows for secure combinations of real-time and non real-ti...

متن کامل

Towards Formal Verification of a Separation Microkernel

The best approach to verifying an IMA separation kernel is to use a (fixed) time-space partitioning kernel with a multiple independent levels of separation (MILS) architecture. We describe an activity that explores the cost and feasibility of doing a formal verification of such a kernel to the Common Criteria (CC) levels mandated by the Separation Kernel Protection Profile (SKPP). We are develo...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

ژورنال

عنوان ژورنال: Electronics

سال: 2022

ISSN: ['2079-9292']

DOI: https://doi.org/10.3390/electronics11244201