A high assurance virtualization platform for ARMv8

This paper presents the first results from the ongoing research project HASPOC, developing a high assurance virtualization platform for the ARMv8 CPU architecture. Formal verification at machine code level guarantees information isolation between different guest systems (e.g. OSs) running on the pla...

Full description

Saved in:
Bibliographic Details
Published in2016 European Conference on Networks and Communications (EuCNC) pp. 210 - 214
Main Authors Baumann, Christoph, Naslund, Mats, Gehrmann, Christian, Schwarz, Oliver, Thorsen, Hans
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.06.2016
Subjects
ARMv8
assurance
Common Criteria
Computer Science
Datalogi
Electronic mail
formal verification
Hardware
hypervisor
isolation
Microprogramming
Security
Software
Virtual machine monitors
Virtualization
Online AccessGet full text

Cover

More Information
Summary:This paper presents the first results from the ongoing research project HASPOC, developing a high assurance virtualization platform for the ARMv8 CPU architecture. Formal verification at machine code level guarantees information isolation between different guest systems (e.g. OSs) running on the platform. To use the platform in networking scenarios, we allow guest systems to securely communicate with each other via platform-provided communication channels and to take exclusive control of peripherals for communication with the outside world. The isolation is shown to be formally equivalent to that of guests executing on physically separate platforms with dedicated communication channels crossing the air-gap. Common Criteria (CC) assurance methodology is applied by preparing the CC documentation required for an EAL6 evaluation of products using the platform. Besides the hypervisor, a secure boot component is included and verified to ensure system integrity.
ISBN:9781509028948
1509028935
9781509028931
1509028943
DOI:10.1109/EuCNC.2016.7561034