Access this book
Tax calculation will be finalised at checkout
Other ways to access
Table of contents (4 chapters)
Keywords
- Compositional verification
- Extensible and verifiable micro-hypervisor
- Verified trace properties on commodity platforms
- Development compatible verification
- Verifiable object architecture (uber-objects)
- Security applications
- Salient security properties
- Cybersecurity
- micro-hypervisor
- uberapps
- uber eXtensible Micro-Hypervisor Framework (uberXMHF)
- Low-TCB micro-hypervisor framework
- Micro-Hypervisor System Security Architecture
- Micro-Hypervisor assisted security applications
- Micro-hypervisor key management
- Micro-hypervisor attestation
- Micro-hypervisor verifiable resource accounting
- Micro-hypervisor application compartmentalization
- Micro-hypervisor I/O isolaton
- Micro-hypervisor trusted-path
About this book
This SpringerBrief discusses the uber eXtensible Micro-hypervisor Framework (uberXMHF), a novel micro-hypervisor system security architecture and framework that can isolate security-sensitive applications from other untrustworthy applications on commodity platforms, enabling their safe co-existence. uberXMHF, in addition, facilitates runtime monitoring of the untrustworthy components, which is illustrated in this SpringerBrief. uberXMHF focuses on three goals which are keys to achieving practical security on commodity platforms: (a) commodity compatibility (e.g., runs unmodified Linux and Windows) and unfettered access to platform hardware; (b) low trusted computing base and complexity; and (c) efficient implementation.
uberXMHF strives to be a comprehensible, practical and flexible platform for performing micro-hypervisor research and development. uberXMHF encapsulates common hypervisor core functionality in a framework that allows developers and users to build custom micro-hypervisor based (security-sensitive) applications (called "uberapps"). The authors describe several uberapps that employ uberXMHF and showcase the framework efficacy and versatility. These uberapps span a wide spectrum of security applications including application compartmentalization and sandboxing, attestation, approved code execution, key management, tracing, verifiable resource accounting, trusted-path and on-demand I/O isolation.
The authors are encouraged by the end result - a clean, barebones, low trusted computing base micro-hypervisor framework for commodity platforms with desirable performance characteristics and an architecture amenable to manual audits and/or formal reasoning. Active, open-source development of uberXMHF continues.
The primary audience for this SpringerBrief is system (security) researchers and developers of commodity system software. Practitioners working in system security deployment mechanisms within industry and defense, as well as advanced-level students studying computer science with an interest in security will also want to read this SpringerBrief.
uberXMHF strives to be a comprehensible, practical and flexible platform for performing micro-hypervisor research and development. uberXMHF encapsulates common hypervisor core functionality in a framework that allows developers and users to build custom micro-hypervisor based (security-sensitive) applications (called "uberapps"). The authors describe several uberapps that employ uberXMHF and showcase the framework efficacy and versatility. These uberapps span a wide spectrum of security applications including application compartmentalization and sandboxing, attestation, approved code execution, key management, tracing, verifiable resource accounting, trusted-path and on-demand I/O isolation.
The authors are encouraged by the end result - a clean, barebones, low trusted computing base micro-hypervisor framework for commodity platforms with desirable performance characteristics and an architecture amenable to manual audits and/or formal reasoning. Active, open-source development of uberXMHF continues.
The primary audience for this SpringerBrief is system (security) researchers and developers of commodity system software. Practitioners working in system security deployment mechanisms within industry and defense, as well as advanced-level students studying computer science with an interest in security will also want to read this SpringerBrief.
Authors and Affiliations
About the author
Amit Vasudevan is a Computer Scientist at the Software Engineering Institute (SEI), Carnegie Mellon University (CMU). His research interests include secure (embedded) systems and IoT, virtualization, trusted computing, formal methods, malware analysis and operating systems. His present research focuses on building formally verifiable and trustworthy computing systems. He is the principal force behind the design and development of uberSpark – an innovative architecture and framework for compositional formal verification of security properties of commodity system software; and the uber eXtensible Micro-Hypervisor Framework (uberXMHF) – an open-source, extensible and formally verifiable micro-hypervisor framework which forms the foundation for a new class of (security-oriented) micro-hypervisor based applications ("uberapps") on commodity computing platforms.
He received his Ph.D. and M.S degrees from the Computer Science Department at UT Arlington and spent three yearsas a Post-doctoral fellow at CyLab, Carnegie Mellon University. Before that, he obtained his B.E. from the Computer Science Department at the BMS College of Engineering, Bangalore, India.
He received his Ph.D. and M.S degrees from the Computer Science Department at UT Arlington and spent three yearsas a Post-doctoral fellow at CyLab, Carnegie Mellon University. Before that, he obtained his B.E. from the Computer Science Department at the BMS College of Engineering, Bangalore, India.
Bibliographic Information
Book Title: Practical Security Properties on Commodity Computing Platforms
Book Subtitle: The uber eXtensible Micro-Hypervisor Framework
Authors: Amit Vasudevan
Series Title: SpringerBriefs in Computer Science
DOI: https://doi.org/10.1007/978-3-030-25049-2
Publisher: Springer Cham
eBook Packages: Computer Science, Computer Science (R0)
Copyright Information: The Author(s), under exclusive license to Springer Nature Switzerland AG 2019
Softcover ISBN: 978-3-030-25048-5Published: 25 September 2019
eBook ISBN: 978-3-030-25049-2Published: 20 September 2019
Series ISSN: 2191-5768
Series E-ISSN: 2191-5776
Edition Number: 1
Number of Pages: XIX, 85
Number of Illustrations: 8 b/w illustrations