NDLI: Enhancing Fuzzing Technique for OKL4 Syscalls Testing

Content Provider	IEEE Xplore Digital Library
Author	Gauthier, A. Mazin, C. Iguchi-Cartigny, J. Lanet, J.-L.
Copyright Year	2011
Abstract	Virtual machine monitor is a hot topic in the embedded community. Apart from high end system, current processors for embedded systems do not have any instructions helping to virtualize an operating system. Based on this fact, most of the current hyper visors for embedded devices use the Para virtualization technique. This is the case of the OKL4 kernel which is based on the L4 micro-kernel and implements among other the Linux kernel as guest OS. We introduce our ongoing work for testing the security of OKL4. We have chosen to focus on the most low level OKL4 interface usable from an external actor: the system call API. Because all operating system components use directly or indirectly these system calls, a minor flaw at this level can impact in chain the entire system including a virtualized kernel. We have developed a model describing the OKL4 system calls. This model also contains all constraints applicable to a system call. Based on these models, we are working on a tool using the constraints to compute a reduced set of system call input values which are highly likely to generate flaws in OKL4 if they are not fully checked by the hypervisor.
Starting Page	728
Ending Page	733
File Size	204202
Page Count	6
File Format	PDF
ISBN	9781457709791
DOI	10.1109/ARES.2011.116
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-08-22
Publisher Place	Austria
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Embedded System OKL4 Virtual machine monitors Kernel Security Syscalls Grammar Kernel Testing Message systems Virtual Machine
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Enhancing Security of Embedded Linux on a Multi-core Processor

Phone virtualization using a microkernel hypervisor

Hardware virtualization based security solution for embedded systems

Inter-partition Information Flow Control for High-Assurance Embedded Systems

A separation model for virtual machine monitors

A new way of MMS vulnerability detection based on virtual machine

An efficient security architecture for trusted computing

Hypervisors for Consumer Electronics

External Integrity Checking with Invariants

Enhancing Fuzzing Technique for OKL4 Syscalls Testing

Similar Documents

Enhancing Security of Embedded Linux on a Multi-core Processor

Phone virtualization using a microkernel hypervisor

Hardware virtualization based security solution for embedded systems

Inter-partition Information Flow Control for High-Assurance Embedded Systems

A separation model for virtual machine monitors

A new way of MMS vulnerability detection based on virtual machine

An efficient security architecture for trusted computing

Hypervisors for Consumer Electronics

External Integrity Checking with Invariants

Enhancing Fuzzing Technique for OKL4 Syscalls Testing