TY - GEN
T1 - Virtual security kernel
T2 - 10th IEEE International Conference on Computer and Information Technology, CIT-2010, 7th IEEE International Conference on Embedded Software and Systems, ICESS-2010, 10th IEEE Int. Conf. Scalable Computing and Communications, ScalCom-2010
AU - He, Ruan
AU - Lacoste, Marc
AU - Leneutre, Jean
PY - 2010/11/19
Y1 - 2010/11/19
N2 - This paper presents VSK, a lightweight adaptable OS authorization architecture suitable for self-protection of pervasive devices. A "virtual" management plane, separate from execution resources, is defined for full run-time control by applications of their execution environment. This plane also performs non-invasive and yet effective authorization thanks to optimized access request checking. The VSK component-based architecture provides flexibility both in the execution plane (for resource customization) and in the management plane (for run-time reconfiguration of authorization policies). Policy-neutrality is achieved by adopting the attribute-based paradigm for access control enforcement. Evaluation results show that despite such flexibility, the overhead of this kernel architecture remains low.
AB - This paper presents VSK, a lightweight adaptable OS authorization architecture suitable for self-protection of pervasive devices. A "virtual" management plane, separate from execution resources, is defined for full run-time control by applications of their execution environment. This plane also performs non-invasive and yet effective authorization thanks to optimized access request checking. The VSK component-based architecture provides flexibility both in the execution plane (for resource customization) and in the management plane (for run-time reconfiguration of authorization policies). Policy-neutrality is achieved by adopting the attribute-based paradigm for access control enforcement. Evaluation results show that despite such flexibility, the overhead of this kernel architecture remains low.
U2 - 10.1109/CIT.2010.160
DO - 10.1109/CIT.2010.160
M3 - Conference contribution
AN - SCOPUS:78249285909
SN - 9780769541082
T3 - Proceedings - 10th IEEE International Conference on Computer and Information Technology, CIT-2010, 7th IEEE International Conference on Embedded Software and Systems, ICESS-2010, ScalCom-2010
SP - 851
EP - 858
BT - Proceedings - 10th IEEE International Conference on Computer and Information Technology, CIT-2010, 7th IEEE International Conference on Embedded Software and Systems, ICESS-2010, ScalCom-2010
Y2 - 29 June 2010 through 1 July 2010
ER -