FIDES: an advanced chip multiprocessor platform for secure next generation mobile terminals

We propose a secure platform on a chip multiprocessor, known as FIDES, in order to enable next generation mobile terminals to execute downloaded native applications for Linux. Its most important feature is the higher security based on multi-grained separation mechanisms: coarse-grained processor-level separation of the basic-function domain from other domains for such downloaded applications, medium-grained OS-level separation, and fine-grained process-level separation within SELinux. Four new technologies, which include three enhancements to SELinux, support the FIDES platform: 1) bus filter logic for processor-level separation can be implemented as a small logic, 2) XIP kernels for memory-efficient OS-level separation can reduce memory requirements by 182%, 3) policy separation for enhanced processlevel separation can apply policies 2.1 times faster at system bootup, and 4) dynamic access control can provide secure InterDomain Communications (IDCs) with an overhead of only 4% for ID...

• Type: Conference
• Year: 2005
• Where: CODES
• Authors: Hiroaki Inoue, Akihisa Ikeno, Masaki Kondo, Junji Sakai, Masato Edahiro
• Keywords: CODES 2005, Generation Mobile Terminals, OS-level Separation, Processor-level Separation, Software Engineering