Design of a Micro-kernel Based Secure System Architecture

Author

Shen, Jianjun ; Qing, Sihan ; Shen, Qingni

Author_Institution

Inst. of Software, Chinese Acad. of Sci., Beijing

fYear

2006

fDate

21-23 June 2006

Firstpage

384

Lastpage

385

Abstract

We describe the Trium secure system architecture. It is based on Fiasco an implementation of the L4 microkernel interface - and L4Env - a programming environment for L4 systems. Compared to previous work on microkernel based secure systems, such as TMach and DTOS, Trium tries to minimize the trusted computing base (TCB) of a secure system by moving most functions of an operating system (OS) out of the TCB, and it emphasizes on the reuse of legacy software. We also try to achieve better isolation, privilege control and flexible configuration of system components, taking advantage of the specific features of the L4 microkernel as a second generation microkernel

Keywords

application program interfaces; operating system kernels; security of data; software maintenance; software reusability; Fiasco; L4 microkernel interface; L4Env; Trium secure system architecture; legacy software; operating system; privilege control; trusted computing base; Application software; Communication system control; Costs; File servers; Kernel; Linux; Military computing; National security; Network servers; Solids;

fLanguage

English

Publisher

ieee

Conference_Titel

Information Assurance Workshop, 2006 IEEE

Conference_Location

West Point, NY

Print_ISBN

1-4244-0130-5

Type

conf

DOI

10.1109/IAW.2006.1652123

Filename

1652123