Secure Execution Environments

Applied Cryptography Robust Software Quantum Safety Machine Learning Applied to Security Analysis and Exploration of Vulnerabilities Computer Systems Forensic Analysis Reverse Engineering Identification, Authentication and Authorization Secure Execution Environments Direito da Organização e da Segurança

Secure Execution Environments
Introduction
Security in Operating Systems
Virtualization on Intel Processors
Intel Software Guard Extensions
ARM TrustZone
Linux Kernel Namespaces
LXC Linux Containers
- Container
- LXC containers
AppArmor
TPM (Trusted Platform Module)
Bootstrap security

Powered by GitBook

On this page

Kernel mission
Protection rings

Operating system

PreviousCan you trust the operating system?NextVirtual machines and hypervisors

Last updated 7 months ago

Kernel mission

Virtualize the hardware.
- Computational model.
Enforce protection policies and provide protection mechanisms.
- Against involuntary mistakes.
- Against non-authorized activities.

Protection rings

Different levels of privilege.
- A set of concentric rings.
- The CPU uses them to prevent non-privileged code from running privileged instructions.
  - e.g. IN/OUT, TLB manipulation.
Nowadays processors have 4 rings.
- But OS’s usually use only two of them.
- 0 (supervisor/kernel mode) and 3 (user mode).
Transfer of control between rings requires special gates.
- The ones that are used by system calls (syscalls).