Genode - OS Security By Design Dr.-Ing. Norman Feske < - - PowerPoint PPT Presentation

▶
genode os security by design
SMART_READER_LITE
LIVE PREVIEW

Genode - OS Security By Design Dr.-Ing. Norman Feske < - - PowerPoint PPT Presentation

Apr 05, 2024 580 likes •924 views

Genode - OS Security By Design Dr.-Ing. Norman Feske < norman.feske@genode-labs.com > Outline 1. Introduction 2. Architectural Principles 3. Showcases 4. Current Topics Genode - OS Security By Design 2 Outline 1. Introduction 2.

slide-1
SLIDE 1

Genode - OS Security By Design

Dr.-Ing. Norman Feske <norman.feske@genode-labs.com>

slide-2
SLIDE 2

Outline

  • 1. Introduction
  • 2. Architectural Principles
  • 3. Showcases
  • 4. Current Topics

Genode - OS Security By Design 2

slide-3
SLIDE 3

Outline

  • 1. Introduction
  • 2. Architectural Principles
  • 3. Showcases
  • 4. Current Topics

Genode - OS Security By Design 3

slide-4
SLIDE 4

Universal Truths

Ease of use Security Utilization Scalability Assurance Accountability

Genode - OS Security By Design 4

slide-5
SLIDE 5

Problem: Complexity

Today’s commodity OSes Exceedingly complex trusted computing base (TCB) TCB of an application on Linux: Kernel + loaded kernel modules Daemons X Server + window manager Desktop environment All running processes of the user → User credentials are exposed to millions of lines of code

Genode - OS Security By Design 5

slide-6
SLIDE 6

Problem: Complexity (II)

Implications: High likelihood for bugs (need for frequent security updates) Huge attack surface for directed attacks Zero-day exploits

Genode - OS Security By Design 6

slide-7
SLIDE 7

Universal Truths

Ease of use Security Utilization Scalability Assurance Accountability

Genode - OS Security By Design 7

slide-8
SLIDE 8

Problem: Resource management

Pretension of unlimited resources Lack of accounting → Largely indeterministic behavior → Need for complex heuristics, schedulers

Genode - OS Security By Design 8

slide-9
SLIDE 9

Universal Truths

Ease of use Security Utilization Scalability Assurance Accountability

Genode - OS Security By Design 9

slide-10
SLIDE 10

Key technologies

Microkernels Componentization, kernelization Capability-based security Virtualization ...but how to compose those?

Genode - OS Security By Design 10

slide-11
SLIDE 11

Genode architecture

→ Application-specific TCB

Genode - OS Security By Design 11

slide-12
SLIDE 12

Combined with virtualization

Genode - OS Security By Design 12

slide-13
SLIDE 13

Components

Genode - OS Security By Design 13

slide-14
SLIDE 14

Components

Genode - OS Security By Design 14

slide-15
SLIDE 15

Components

Genode - OS Security By Design 15

slide-16
SLIDE 16

Components

Genode - OS Security By Design 16

slide-17
SLIDE 17

Components

Genode - OS Security By Design 17

slide-18
SLIDE 18

Components

Genode - OS Security By Design 18

slide-19
SLIDE 19

Outline

  • 1. Introduction
  • 2. Architectural Principles
  • 3. Showcases
  • 4. Current Topics

Genode - OS Security By Design 19

slide-20
SLIDE 20

Object capabilities

Delegation of authority between components Each component lives in a virtual environment A component that possesses a capability can

◮ Use it (invoke) ◮ Delegate it to acquainted components Genode - OS Security By Design 20

slide-21
SLIDE 21

Recursive system structure

Genode - OS Security By Design 21

slide-22
SLIDE 22

Service announcement

Genode - OS Security By Design 22

slide-23
SLIDE 23

Session creation

Genode - OS Security By Design 23

slide-24
SLIDE 24

Session creation

Genode - OS Security By Design 24

slide-25
SLIDE 25

Resource management

Explicit assignment of physical resources to components

Genode - OS Security By Design 25

slide-26
SLIDE 26

Resource management (II)

Resources can be attached to sessions

Genode - OS Security By Design 26

slide-27
SLIDE 27

Outline

  • 1. Introduction
  • 2. Architectural Principles
  • 3. Showcases
  • 4. Current Topics

Genode - OS Security By Design 27

slide-28
SLIDE 28

Faithful Virtualization

User Mode Privileged Mode

NOVA Hypervisor Core Init

Resource Multiplexer

Unmodified Guest OS

virtual CPU virtual device virtual RAM

VMM Device Driver Kernel Genode - OS Security By Design 28

slide-29
SLIDE 29

OS-level Virtualization

Genode - OS Security By Design 29

slide-30
SLIDE 30

Rich applications

Loader Init Arora Web Browser Init Nitpicker GUI TCP/IP Menu Nitpicker GUI

Virtual Framebuffer Launchpad Testnit

Genode - OS Security By Design 30

slide-31
SLIDE 31

Outline

  • 1. Introduction
  • 2. Architectural Principles
  • 3. Showcases
  • 4. Current Topics

Genode - OS Security By Design 31

slide-32
SLIDE 32

Current Topics

Eating our own dog food

◮ Noux (GCC, VIM, bash, coreutils...) ◮ Wireless networking

Capability-based user interface seL4 kernel as base platform ARM Virtualization Package management

Genode - OS Security By Design 32

slide-33
SLIDE 33

Thank you

Genode OS Framework http://genode.org Genode Labs GmbH http://www.genode-labs.com Source code at GitHub http://github.com/genodelabs/genode

Genode - OS Security By Design 33