Abstract
Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 % on average to guarantee high level of combined security and realtimeness simultaneously.
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the ACM Conference on Computer and Communications Security |
| Pages | 1465-1467 |
| Number of pages | 3 |
| DOIs | |
| State | Published - Dec 9 2013 |
| Event | 2013 ACM SIGSAC Conference on Computer and Communications Security, CCS 2013 - Berlin, Germany Duration: Nov 4 2013 → Nov 8 2013 |
Other
| Other | 2013 ACM SIGSAC Conference on Computer and Communications Security, CCS 2013 |
|---|---|
| Country | Germany |
| City | Berlin |
| Period | 11/4/13 → 11/8/13 |
Fingerprint
Keywords
- formal temporal verification
- intrusion detection and prevention
- operating system security
- real-time security
ASJC Scopus subject areas
- Software
- Computer Networks and Communications
Cite this
Poster - Sechduler : A security-aware kernel scheduler. / Haghani, Parisa; Zonouz, Saman.
Proceedings of the ACM Conference on Computer and Communications Security. 2013. p. 1465-1467.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
}
TY - GEN
T1 - Poster - Sechduler
T2 - A security-aware kernel scheduler
AU - Haghani, Parisa
AU - Zonouz, Saman
PY - 2013/12/9
Y1 - 2013/12/9
N2 - Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 % on average to guarantee high level of combined security and realtimeness simultaneously.
AB - Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 % on average to guarantee high level of combined security and realtimeness simultaneously.
KW - formal temporal verification
KW - intrusion detection and prevention
KW - operating system security
KW - real-time security
UR - http://www.scopus.com/inward/record.url?scp=84889071163&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84889071163&partnerID=8YFLogxK
U2 - 10.1145/2508859.2512527
DO - 10.1145/2508859.2512527
M3 - Conference contribution
SN - 9781450324779
SP - 1465
EP - 1467
BT - Proceedings of the ACM Conference on Computer and Communications Security
ER -