Domain Isolated Kernel: A lightweight sandbox for untrusted kernel extensions

Monolithic kernel is one of the prevalent configurations out of various kernel design models. While monolithic kernel excels in performance and management, they are unequipped for runtime system update; and this brings the need for kernel extension. Although kernel extensions are a convenient measure for system management, it is well established that they make the system prone to rootkit attacks and kernel exploitation as they share the single memory space with the rest of the kernel. To address this problem, various forms of isolation (e.g., making into a process), are so far proposed, yet their performance overhead is often too high or incompatible for a general purpose kernel. In this paper, we propose Domain Isolated Kernel (DlKernel), a new kernel architecture which securely isolates the untrusted kernel extensions with minimal performance overhead. DlKernel leverages hardware based memory domain feature in ARM architecture; and prevents system manipulation attacks originated from kernel extensions, such as rootkits and exploits caused by buggy kernel extensions. We implemented DlKernel on top of Linux 4.13 kernel with 1500 LOC. Performance evaluation indicates that DlKernel imposes negligible overhead which is observed by cycle level microbenchmark. (C) 2018 Elsevier Ltd. All rights reserved.
Publisher
ELSEVIER ADVANCED TECHNOLOGY
Issue Date
2018-05
Language
English
Article Type
Article
Keywords

ARCHITECTURE

Citation

COMPUTERS & SECURITY, v.74, pp.130 - 143

ISSN
0167-4048
DOI
10.1016/j.cose.2018.01.009
URI
http://hdl.handle.net/10203/241291
Appears in Collection
CS-Journal Papers(저널논문)
Files in This Item
There are no files associated with this item.
  • Hit : 61
  • Download : 0
  • Cited 0 times in thomson ci
This item is cited by other documents in WoS
⊙ Detail Information in WoSⓡClick to seewebofscience_button

qr_code

  • mendeley

    citeulike


rss_1.0 rss_2.0 atom_1.0