SLIDE 1
Outline
Modern Systems: Security Outline Outline What Weve Been Talking - - PowerPoint PPT Presentation
Modern Systems: Security Outline Outline What Weve Been Talking - - PowerPoint PPT Presentation
Modern Systems: Security Outline Outline What Weve Been Talking About... Introduction What Weve Been Talking About... Introduction What are Security Risks? Introduction Todays Topic Introduction Two Systems
SLIDE 2
SLIDE 3
Introduction
What We’ve Been Talking About...
○ ○
SLIDE 4
Introduction
What We’ve Been Talking About...
○ ○
SLIDE 5
Introduction
What are Security Risks?
SLIDE 6
Introduction
Today’s Topic
SLIDE 7
Introduction
Two Systems
Nexus Fabric
SLIDE 8
Introduction
Two Systems
Nexus Fabric
SLIDE 9
Outline
Outline
SLIDE 10
Background
Trust Establishment
○ ○ ○
SLIDE 11
Background
Authorization
principal: a user, group, system component, computer etc. that a security system trusts implicitly
SLIDE 12
Outline
Outline
SLIDE 13
OS approach to security, introduces logical attestation
Nexus [SOSP’11]
SLIDE 14
Nexus
Overview
SLIDE 15
Nexus
Trusted Platform Modules
SLIDE 16
Nexus
The Problem with TPM
○ ○ ○
SLIDE 17
Nexus
Credentials-Based Authorization
○
SLIDE 18
Nexus
Logical Attestation
⇔
SLIDE 19
Nexus
Logical Attestation cont.
SLIDE 20
Nexus
Nexus OS
SLIDE 21
Nexus
Implementation: Nexus OS
SLIDE 22
Nexus
Implementing Logical Attestation Labels
SLIDE 23
Nexus
Introspection & Interpositioning
SLIDE 24
Nexus
Nexus OS
SLIDE 25
Nexus
Applications
SLIDE 26
Nexus
Case Example: Fauxbook
SLIDE 27
Nexus
Evaluation Results
SLIDE 28
Nexus
Evaluation Results
SLIDE 29
Nexus
Evaluation Results
SLIDE 30
Outline
Outline
SLIDE 31
PL approach to secure distributed systems
Fabric [SOSP ‘09]
SLIDE 32
Fabric
Overview
SLIDE 33
Fabric
The Big Ideas
○ ○ ○ ○
SLIDE 34
Fabric
What is Information Flow?
SLIDE 35
Fabric
Fabric Architecture
SLIDE 36
Fabric
Security Model: Principals
SLIDE 37
Fabric
Security Model: Principals
SLIDE 38
Fabric
Security Model: Labels
SLIDE 39
Fabric
Security Model: Labels cont.
SLIDE 40
Fabric
Security Model: Labels cont.
SLIDE 41
Fabric
Applications
SLIDE 42
Fabric
Evaluation Results
SLIDE 43
Outline
Outline
SLIDE 44
Today
What Happened….
○
Fabric Papers CSF’15, PLAS’14, POST’14, NSDI’14, PLDI’ 12, Oakland’12, CCS’11, CCS’10, Jed’s Thesis, SOSP’09
SLIDE 45
Outline
Outline
SLIDE 46
Conclusion
Two Approaches to Trustworthy Computing
SLIDE 47
Conclusion