Cited By
View all- Matos EAhvenjärvi M(2022)seL4 Microkernel for Virtualization Use-Cases: Potential Directions towards a Standard VMMElectronics10.3390/electronics1124420111:24(4201)Online publication date: 16-Dec-2022
Address space isolation in the linux kernel
Page 194
Abstract
Monolithic kernel design mandates the use of a single address space for kernel data and code. While this design is easy to understand and performs well, it does not provide much in the way of protection from exploitable bugs in the interface. By dividing up kernel objects into areas of responsibility, we can introduce additional address spaces which will prevent information leakage, even in the case of a successful attack on the kernel. We are exploring several possible implementations with the goal of increasing security while minimizing the impact on performance.
References
[1]
M. Kerrisk. 2016. How to design a Linux kernel API. FOSDEM '16. https://archive.fosdem.org/2016/schedule/event/design_linux_kernel_api/
[2]
J. Liedtke. 1995. On Micro-kernel Construction. In Proceedings of the Fifteenth ACM Symposium on Operating Systems Principles (SOSP '95). ACM, New York, NY, USA, 237--250.
[3]
L. Torvalds. 1991. Hello everybody out there using minix. (August 1991). https://groups.google.com/forum/#!msg/comp.os.minix/dlNtH7RRrGA/SwRavCzVE7gJ
Index Terms
- Address space isolation in the linux kernel
Recommendations
W-Kernel: An OS Kernel Architecture Designed With Isolation and Customizability
ICSED '23: Proceedings of the 2023 5th International Conference on Software Engineering and DevelopmentWe propose a new operating system architecture called W-kernel. Traditional commodity operating systems are monolithic which is easy to design and offers decent performance. However, as system complexity increases, the lack of isolation in a monolithic ...
Evaluation of isolation in virtual machine environments encounter in effective attacks against memory
One of the main features of the hypervisor is the isolation among virtual machine VM environments. By isolation between VMs, malicious activity in one VM could not affect all other VMs, so it is necessary to apply security mechanisms in order to improve ...
Dynamic Loader Oriented Programming on Linux
ROOTS: Proceedings of the 1st Reversing and Offensive-oriented Trends SymposiumMemory corruptions are still the most prominent venue to attack otherwise secure programs. In order to make exploitation of software bugs more difficult, defenders introduced a vast number of post corruption security mitigations, such as w⊕x memory, ...
Comments
Information & Contributors
Information
Published In
May 2019
211 pages
ISBN:9781450367493
DOI:10.1145/3319647
- General Chair:
- Moshik Hershcovitch,
- Program Chairs:
- Ashvin Goel,
- Adam Morrison
Copyright © 2019 Owner/Author.
Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.
Sponsors
In-Cooperation
- USENIX Assoc: USENIX Assoc
Publisher
Association for Computing Machinery
New York, NY, United States
Publication History
Published: 22 May 2019
Check for updates
Author Tags
Qualifiers
- Poster
Funding Sources
- European Union
Conference
SYSTOR '19
Sponsor:
Acceptance Rates
Overall Acceptance Rate 108 of 323 submissions, 33%
Contributors
Other Metrics
Bibliometrics & Citations
Bibliometrics
Article Metrics
- View Citations1Total Citations
- 293Total Downloads
- Downloads (Last 12 months)6
- Downloads (Last 6 weeks)1
Reflects downloads up to 07 Mar 2025
Other Metrics
Citations
Cited By
View all- Matos EAhvenjärvi M(2022)seL4 Microkernel for Virtualization Use-Cases: Potential Directions towards a Standard VMMElectronics10.3390/electronics1124420111:24(4201)Online publication date: 16-Dec-2022
View Options
Login options
Check if you have access through your login credentials or your institution to get full access on this article.
Sign in