MESSAGE
| DATE | 2018-08-27 |
| FROM | Ruben Safir
|
| SUBJECT | Re: [Hangout - NYLXS] Microkernel and Security
|
On 8/27/18 10:16 AM, Ruben Safir wrote:
> http://www.osnews.com/story/30657/The_jury_is_in_monolithic_OS_design_is_flawed
>
http://ts.data61.csiro.au/publications/csiro_full_text/Biggs_LH_18.pdf
The Jury Is In: Monolithic OS Design Is Flawed
Microkernel-based Designs Improve Security
Simon Biggs,
Damon Lee,
Gernot Heiser
Data61, CSIRO
UNSW Sydney
gernot
.
heiser-at-data61
.
csiro
.
au
ABSTRACT
The security benefits of keeping a system’s trusted comput-
ing base (TCB) small has long been accepted as a truism, as
has the use of internal protection boundaries for limiting
the damage caused by exploits. Applied to the operating sys-
tem, this argues for a small microkernel as the core of the
TCB, with OS services separated into mutually-protected
components (servers) – in contrast to “monolithic” designs
such as Linux, Windows or MacOS. While intuitive, the ben-
efits of the small TCB have not been quantified to date. We
address this by a study of critical Linux CVEs, where we
examine whether they would be prevented or mitigated by
a microkernel-based design. We find that almost all exploits
are at least mitigated to less than critical severity, and 40%
completely eliminated by an OS design based on a verified
microkernel, such as seL4.
ACM Reference Format:
Simon Biggs,
Damon Lee,
Gernot Heiser. 2018. The Jury Is
In: Monolithic OS Design Is Flawed: Microkernel-based Designs
Improve Security. In
9th Asia-Pacific Workshop on Systems (APSys
’18), August 27–28, 2018, Jeju Island, Republic of Korea.
ACM, New
York, NY, USA, 7 pages. https://doi
.
org/10
.
1145/3265723
.
3265733
--
So many immigrant groups have swept through our town
that Brooklyn, like Atlantis, reaches mythological
proportions in the mind of the world - RI Safir 1998
http://www.mrbrklyn.com
DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002
http://www.nylxs.com - Leadership Development in Free Software
http://www2.mrbrklyn.com/resources - Unpublished Archive
http://www.coinhangout.com - coins!
http://www.brooklyn-living.com
Being so tracked is for FARM ANIMALS and and extermination camps,
but incompatible with living as a free human being. -RI Safir 2013
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
|
|
