other · Bulletin of Miscellaneous Information (Royal Gardens Kew) · 2006
Microsoft Research Video 104151: Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable
Microsoft Research
Cited by 0Abstract and details only
Abstract
In current commodity systems, applications have no way of limiting their trust in the underlying operating system (OS), leaving them at the complete mercy of an attacker who gains control over the OS. In this talk, I will describe the design and implementation of Proxos, a system that allows applications to configure their trust in the OS by partitioning the system call interface into trusted and untrusted components. System call routing rules that indicate which system calls are to be handled by the untrusted commodity OS, and which are to be handled by a trusted private OS, are specified by the application developer. We find that rather than defining a new system call interface, routing system calls of an existing interface allows applications currently targeted towards commodity operating systems to isolate their most sensitive components from the commodity OS with only minor source code modifications. We have built a prototype of our system on top of the Xen Virtual Machine Monitor with Linux as the commodity OS. In practice, we find that the system call routing rules are short and simple – on the order of 10's of lines of code. In addition, applications in Proxos incur only modest performance overhead, with most of the cost resulting from inter-VM context switches. This work will appear in OSDI 2006. ©2006 Microsoft Corporation. All rights reserved.
Cite this paper
Research, M. (2006). Microsoft Research Video 104151: Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable. Bulletin of Miscellaneous Information (Royal Gardens Kew).
Research, Microsoft. “Microsoft Research Video 104151: Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable.” Bulletin of Miscellaneous Information (Royal Gardens Kew), 2006.
Research, Microsoft. 2006. “Microsoft Research Video 104151: Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable.” Bulletin of Miscellaneous Information (Royal Gardens Kew).
Research, M. (2006) ‘Microsoft Research Video 104151: Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable’, Bulletin of Miscellaneous Information (Royal Gardens Kew).
@misc{research2006microsoft,
title = {{Microsoft Research Video 104151: Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable}},
author = {Research, Microsoft},
journal = {Bulletin of Miscellaneous Information (Royal Gardens Kew)},
year = {2006}
}Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.