Virtual Security Kernel: A Component-Based OS Architecture for Self-Protection

—This paper presents VSK, a lightweight adaptable OS authorization architecture suitable for self-protection of pervasive devices. A “virtual” management plane, separate from execution resources, is defined for full run-time control by applications of their execution environment. This plane also performs non-invasive and yet effective authorization thanks to optimized access request checking. The VSK component-based architecture provides flexibility both in the execution plane (for resource customization) and in the management plane (for run-time reconfiguration of authorization policies). Policyneutrality is achieved by adopting the attribute-based paradigm for access control enforcement. Evaluation results show that despite such flexibility, the overhead of this kernel architecture remains low.

• Type: Journal
• Year: 2010
• Where: IEEECIT
• Authors: Ruan He, Marc Lacoste, Jean Leneutre
• Keywords: Authorization, IEEECIT 2010, Information Technology, Management Plane, VSK Component-based Architecture