seL4 Microkernel for Virtualization Use-Cases: Potential Directions towards a Standard VMM
نویسندگان
چکیده
Virtualization plays an essential role in providing security to computational systems by isolating execution environments. Many software solutions, called hypervisors, have been proposed provide virtualization capabilities. However, only a few were designed for being deployed at the edge of network devices with fewer computation resources when compared servers Cloud. Among lightweight that can play hypervisor role, seL4 stands out small Trusted Computing Base and formally verified components, enhancing its security. Despite today more than decade microkernel technology, existing userland tools are still scarce not very mature. Over last years, main effort has increase maturity kernel itself, applications be hosted on top. Therefore, it currently lacks proper support full-featured Virtual Machine Monitor, one is quite fragmented. This article discusses potential directions standard VMM presenting our view design principles feature set needed. does intend define VMM, we instigate this discussion through community.
منابع مشابه
Verified Protection Model of the seL4 Microkernel
This paper presents a machine-checked high-level security analysis of seL4—an evolution of the L4 kernel series targeted to secure, embedded devices. We provide an abstract specification of the seL4 access control system together with a formal proof that shows how confined subsystems can be enforced. All proofs and specifications in this paper are developed in the interactive theorem prover Isa...
متن کاملMicrokernel Verification Down To Assembly Extending the seL4 verification
When constructing systems with high assurance requirements, it is desirable to build on a formally verified trusted computing base, such as the seL4 microkernel [4]. The verification of seL4 guarantees correctness down to the kernel’s C implementation and relies on the correctness of the C compiler used. CompCert, a verified C compiler [2, 5], has the potential to extend these guarantees to the...
متن کاملRefinement in the formal verification of the seL4 microkernel
We present an overview of the different refinement frameworks used in the L4.verified project to formally prove the functional correctness of the seL4 microkernel. The verification is conducted in the interactive theorem prover Isabelle/HOL and proceeds in two large refinement steps: one proof between two monadic, functional specifications in HOL and one proof between such a monadic specificati...
متن کاملTiming Aware Hardware Virtualization on the L4Re Microkernel System
Hardware virtualization support has found its way into real-time and embedded systems. It is paramount for an efficient concurrent execution of multiple systems on a single platform, including commodity operating-systems and their applications. Isolation is a key feature for these systems, both in the spatial and temporal domain, as it allows for secure combinations of real-time and non real-ti...
متن کاملTowards Formal Verification of a Separation Microkernel
The best approach to verifying an IMA separation kernel is to use a (fixed) time-space partitioning kernel with a multiple independent levels of separation (MILS) architecture. We describe an activity that explores the cost and feasibility of doing a formal verification of such a kernel to the Common Criteria (CC) levels mandated by the Separation Kernel Protection Profile (SKPP). We are develo...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Electronics
سال: 2022
ISSN: ['2079-9292']
DOI: https://doi.org/10.3390/electronics11244201