检索结果-内蒙古大学图书馆

A HARDWARE SUPPORTED operating system kernel FOR EMBEDDED HARD REAL-TIME APPLICATIONS

MICROPROCESSORS AND MICROsystemS 1994年第10期18卷 579-591页

作者： COLNARIC, M HALANG, WA TOL, RM FERNUNIV FAC ELECT ENGND-58084 HAGENGERMANY UNIV GRONINGEN DEPT COMP SCI9700 AV GRONINGENNETHERLANDS

The concept of the kernel, i.e. the time critical part of a real-time operating system, and its dedicated co-processor, especially tailored for embedded applications, are presented. The co-processor acts as a system controller and operates in conjunction with one or more conventional processors in hard real-time environments. It is composed of three physically and clearly separated layers which vary with regard to implementation, speed and complexity. Correspondingly, the model of the operating system kernel is hierarchically structured, and functions are mapped to these layers, observing the inherent parallelism of recognition and handling of different kinds of events expected in such environments and higher level kernel functions such as tasking operations. The operating system functions are supported by the high level real-time programming language constructs. Since many embedded systems are safety related, the software employed must be highly dependable. Therefore, the kernel was proven correct with formal methods, which represents a major innovation in software technology.

关键词： operating system kernel CO-PROCESSORS REAL-TIME

来源：评论

学校读者我要写书评

暂无评论

AIT: A method for operating system kernel function call graph generation with a virtualization technique

引用

KSII TRANSACTIONS ON INTERNET AND INFORMATION systemS 2020年第5期14卷 2084-2100页

作者： Jiao, Longlong Luo, Senlin Liu, Wangtong Pan, Limin Beijing Inst Technol Informat Syst & Secur & Countermeasures Expt Ctr Beijing 100081 Peoples R China

operating system (OS) kernel function call graphs have been widely used in OS analysis and defense. However, most existing methods and tools for generating function call graphs are designed for application programs, and cannot be used for generating OS kernel function call graphs. This paper proposes a virtualization-based call graph generation method called Acquire in Trap (AIT). When target kernel functions are called, AIT dynamically initiates a system trap with the help of a virtualization technique. It then analyzes and records the calling relationships for trap handling by traversing the kernel stacks and the code space. Our experimental results show that the proposed method is feasible for both Linux and Windows OSs, including 32 and 64-bit versions, with high recall and precision rates. AIT is independent of the source code, compiler and OS kernel architecture, and is a universal method for generating OS kernel function call graphs.

关键词： Function call graph operating system kernel virtualization system trap

来源：评论

学校读者我要写书评

暂无评论

Evaluating kernel Anti-Exploitation Capabilities: A Scalable and General Framework Based on Evaluatology 16th

Evaluating Kernel Anti-Exploitation Capabilities: A Scalable...

引用

16th BenchCouncil International Symposium on Benchmarking, Measuring, and Optimizing, Bench 2024

作者： Chen, Simin Li, Dong Wu, Chenggang Zhan, Jianfeng SKLP Institute of Computing Technology CAS Beijing China University of Chinese Academy of Sciences Beijing China Zhongguancun Laboratory Beijing China

ISBN: (纸本)9789819650316

kernel security is pivotal to overall system security, given the kernel’s complete access to system resources and its operation at the highest privilege level. Despite obtaining high-security certifications, kernels remain vulnerable to exploitation due to underlying vulnerabilities. This paper introduces a scalable and general framework for evaluating the anti-exploitation capability of kernels, drawing upon the principles of evaluatology. Evaluatology defines evaluation as the process of deducing the impact of subjects indirectly within tailored evaluation conditions that meet stakeholders’ needs. Our framework establishes the evaluation conditions and sets the stage for conducting meaningful evaluations. By applying this framework to the Linux kernel, specific exploitation techniques are identified, and a comprehensive evaluation process is conducted. The evaluation culminates in the generation of an Anti-Exploitation Capability Score, offering a quantifiable measure of the kernel’s resilience against exploitation. The proposed framework provides critical insights for security maintenance personnel, developers, and users, guiding effective vulnerability remediation, security enhancements, and informed product selection. © The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2025.

关键词： Evaluation operating system kernel Security

来源：评论

学校读者我要写书评

暂无评论

kCPA: Towards Sensitive Pointer Full Life Cycle Authentication for OS kernels

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2024年第4期21卷 3768-3784页

作者： Yang, Yutian Tu, Jinjiang Shen, Wenbo Zhu, Songbo Chang, Rui Zhou, Yajin Zhejiang Univ ZJU Hangzhou Global Sci & Technol Innovat Ctr Hangzhou Peoples R China Zhejiang Univ Key Lab Blockchain & Cyberspace Governance Zhejia Hangzhou 310027 Peoples R China

Nowadays, code reuse attacks impose a substantial threat to the security of operating system kernels. Control-flow graph-based CFI techniques, while effective, bring considerable performance overhead, thus limiting their practical adoption in real-world products. As an alternative approach, recent research suggests safeguarding the integrity of sensitive pointers as a countermeasure against manipulation attempts. Unfortunately, existing pointer integrity protection schemes only protect sensitive pointers partially and ignore assembly code, leaving protection gaps. To fill up these protection gaps, we propose a novel security concept named full life-cycle integrity, which enforces the integrity of a sensitive pointer at every step on its value flow chain. To realize full life-cycle integrity, we propose three novel techniques, including assembly-aware sensitivity for analyzing assembly code, Merkle PAC tree for protecting interrupt context securely and efficiently, and pointer-grained authentication for defeating spatial substitution attacks. We have developed a practical implementation of comprehensive life-cycle integrity for the Linux kernel, called "kernel Code Pointer Authentication" (kCPA), which leverages the ARM Pointer Authentication (PAuth) mechanism. This implementation has been extended to the Apple M1 architecture for real-world evaluation on PAuth hardware. Our assessment demonstrates that kCPA effectively mitigates a range of real-world attacks while incurring a minimal 2.5% performance overhead for the Phoronix Test Suite and nearly negligible performance impact for SPEC2017 benchmarks.

关键词： Codes kernel Picture archiving and communication systems Authentication Registers Linux Hardware Code reuse attack full life cycle integrity operating system kernel pointer integrity

来源：评论

学校读者我要写书评

暂无评论

Decoy Processes With Optimal Performance Fingerprints

引用

IEEE ACCESS 2023年 11卷 43216-43237页

作者： Sutton, Sara M. Rrushi, Julian L. Grand Valley State Univ Sch Comp & Informat Syst Allendale MI 49401 USA Oakland Univ Dept Comp Sci Rochester MI 48309 USA

Decoy targets such as honeypots and decoy I/O are characterized by a higher accuracy in detecting intrusions than anomaly, misuse, and specification-based detectors. Unlike these detectors, decoy targets do not attack an activity classification problem, i.e. they do not attempt to discern between normal activity and malicious activity. By design, decoy targets do not initiate system or network activity of their own, consequently any operation on a decoy target is unequivocally detected as malicious. However, we have found that this innate characteristic of decoy targets can be exploited by malware-initiated probes to detect them quite reliably. As a proof of concept, we describe red team tactics that collect and analyze live performance counters to detect decoy targets. To counter these threats on machines in production, we developed a defensive countermeasure that consists of decoy processes, with dynamics that are regulated and guarded by convolutional neural networks. Our deep learning approach characterizes and builds the performance fingerprint of a real process, which is then used to feed a performance profile into its decoy counterpart. Decoy processes emulate the existence of system activity, which is crafted to enable decoy I/O on machines in production to withstand malware probes. We evaluated the interplay between red team tactics and decoy processes integrated with a decoy Object Linking and Embedding for Process Control (OPC) server, and thus discuss our findings in the paper.

关键词： Malware Production Fingerprint recognition Codes Probes Resource management Performance evaluation Malware interception operating system kernel deep learning decoy OPC

来源：评论

学校读者我要写书评

暂无评论

Configurable toolset for static verification of operating systems kernel modules

引用

PROGRAMMING AND COMPUTER SOFTWARE 2015年第1期41卷 49-64页

作者： Zakharov, I. S. Mandrykin, M. U. Mutilin, V. S. Novikov, E. M. Petrenko, A. K. Khoroshilov, A. V. Russian Acad Sci Inst Syst Programming Moscow 109004 Russia

An operating system (OS) kernel is a critical software regarding to reliability and efficiency. Quality of modern OS kernels is already high enough. However, this is not the case for kernel modules, like, for example, device drivers that, due to various reasons, have a significantly lower level of quality. One of the most critical and widespread bugs in kernel modules are violations of rules for correct usage of a kernel API. One can find all such violations in modules or can prove their correctness using static verification tools that need contract specifications describing obligations of a kernel and modules relative to each other. This paper considers present methods and toolsets for static verification of kernel modules for different OSs. A new method for static verification of Linux kernel modules is proposed. This method allows one to configure the verification process at all its stages. It is shown how it can be adapted for checking kernel components of other OSs. An architecture of a configurable toolset for static verification of Linux kernel modules that implements the proposed method is described, and results of its practical application are presented. Directions for further development of the proposed method are discussed in conclusion.

关键词： operating system kernel kernel module software quality static verification contract specification environment model specification of rule for correct usage of API

来源：评论

学校读者我要写书评

暂无评论

How not to be seen II - The defenders fight back

引用

IEEE SECURITY & PRIVACY 2007年第6期5卷 65-68页

作者： Allen, William H. Ford, Richard Florida Inst Technol Melbourne FL 32901 USA

For pt.I see ibid., vol. 5, no.1, p.67-69 (2007). This article discusses about stealthy software-that is, software that manipulates a computer in some way to avoid some aspect of its operation. The stealth is divided up into roughly three categories: passive, hooking, and hypervisor-based stealth detection. Most stealth malware hides by hooking and redirecting system calls, either at the kernel or the operating system (OS) level.

关键词： Computer Viruses Well Defmed Stealthy Software Passive Stealth Hooking Stealth Hypervisor Based Stealth Stealth Malware Detection system Calls Redirection operating system kernel Protection operating systems Security Writing Counting Circuits Radio Access Networks Costs Basic Training Stealth Software Passive Hooking

来源：评论

学校读者我要写书评

暂无评论

kernel SUPPORT FOR LIVE DIGITAL AUDIO AND VIDEO

引用

COMPUTER COMMUNICATIONS 1992年第6期15卷 388-395页

作者： JEFFAY, K STONE, DL SMITH, FD University of North Carolina at Chapel Hill Department of Computer Science Chapel Hill NC 27599-3175 USA

We have developed a real-time operating system kernel which has been used to support the transmission and reception of streams of live digital audio and video in real-time as part of a workstation-based conferencing application. An experimental environment consisting of a number of workstations interconnected with a 16 Mbit token ring has been created and used to evaluate quantitatively the performance of the kernel and conferencing application, as well as the quality of the conferences they are capable of supporting. Our early experiences with these systems are described.

关键词： MULTIMEDIA operating system kernel REAL-TIME DIGITAL AUDIO VIDEO

来源：评论

学校读者我要写书评

暂无评论

THE V-DISTRIBUTED system

引用

COMMUNICATIONS OF THE ACM 1988年第3期31卷 314-333页

作者： CHERITON, DR Stanford Univ. Stanford CA

The V distributed system was developed at Stanford University as part of a research project to explore issues in distributed systems. Aspects of the design suggest important directions for the design of future operati... 详细信息

关键词： distributed kernel interprocess communication light-weight processes network transparency operating system kernel workstations

来源：评论

学校读者我要写书评

暂无评论

DISTRIBUTED systemS MANAGEMENT - OVERVIEW OF A COST-11 TER PROJECT

COMPUTER NETWORKS AND ISDN SYSTEMS

引用

COMPUTER NETWORKS AND ISDN systemS 1988年第1期15卷 61-65页

作者： LANGSFORD, A HARWELL LAB DIDCOR OX11 ORAOXONENGLAND

The paper provides an introduction to and overview of one of the COST-11 ter projects. It sets out the scope and objectives of the work and summarises the three main threads of activity at the mid-point of the project: (1) a study of distributed systems architecture as it impacts management, noting that an object oriented model provides a powerful tool to specify management services; (2) a study of monitoring which has identified a hierarchical ordering of management activities; (3) a pilot implementation extending the scope of the Amoeba operating system kernel to operate over a wide area network. The paper identifies the relevance of this work to the development of OSI standards.

关键词： Open system Standards Management Distribution Object Model Monitoring operating system kernel

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：