2026-09-18T20:39:48Z https://www.ideals.illinois.edu/oai-pmh

oai:www.ideals.illinois.edu:2142/50547 2023-07-11 col_2142_5131 col_2142_10761 com_2142_5130 com_2142_10755 com_2142_234

Adve, Vikram S. Adve, Vikram S. Parthasarathy, Madhusudan King, Samuel T. Morrisett, Greg Criswell, John 2014-09-16T17:23:42Z 2014-09-16T17:23:42Z 2014-08 2014-09-16 2014-08 Commodity operating systems are entrusted with providing security to the applications we use everyday, and yet they suffer from the same security vulnerabilities as user-space applications: they are susceptible to memory safety attacks such as buffer overflows, and they can be tricked into dynamically loading malicious code. Worse yet, commodity operating system kernels are highly privileged; exploitation of the kernel results in compromise of all applications on the system. This work describes the Secure Virtual Architecture (SVA): a compiler-based virtual machine placed between the software stack and the hardware that can enforce strong security policies on commodity application and operating system kernel code. This work describes how SVA abstracts hardware/software interactions and program state manipulation so that compiler instrumentation can be used to control these operations, and it shows how SVA can be used to protect both the operating system kernel and applications from attack. Specifically, this work shows how SVA can protect operating system kernels from memory safety attacks; it also shows how SVA prevents a compromised operating system kernel from adversely affecting the execution of trusted applications by providing application memory that the operating system kernel cannot read and write and secure application control flow that the operating system cannot corrupt. Item withdrawn by Laura Spradlin (lspradl2@illinois.edu) on 2014-07-14T16:01:55Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Criswell_John.pdf: 2841143 bytes, checksum: d38bc6a9f28402f131321d44b65f3a55 (MD5) Made available in DSpace on 2014-09-16T17:23:42Z (GMT). No. of bitstreams: 2 John_Criswell.pdf: 2841067 bytes, checksum: ba526c20ede02bbe2d22b0cb4dabf357 (MD5) license.txt: 4063 bytes, checksum: 32588c911bab7e422f070a1f08b26f8f (MD5) http://hdl.handle.net/2142/50547 en Copyright 2014 John T Criswell secure virtual architecture computer security security compilers operating systems LLVM compiler infrastructure project Low Level Virtual Architecture (LLVA) Secure Virtual Architecture (SVA) (Kernel Control Flow Integrity (KCoFI) Virtual Ghost memory safety control flow integrity compromised operating systems Secure virtual architecture: security for commodity software systems text Computer Science 1434 Computer Science 0112 University of Illinois at Urbana-Champaign Dissertation Ph.D. PHD:Computer Science -UIUC 10KS0112PHD