Poster - Sechduler

A security-aware kernel scheduler

Parisa Haghani, Saman Aliari Zonouz

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 % on average to guarantee high level of combined security and realtimeness simultaneously.

Original languageEnglish (US)
Title of host publicationCCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security
Pages1465-1467
Number of pages3
DOIs
StatePublished - Dec 9 2013
Externally publishedYes
Event2013 ACM SIGSAC Conference on Computer and Communications Security, CCS 2013 - Berlin, Germany
Duration: Nov 4 2013Nov 8 2013

Publication series

NameProceedings of the ACM Conference on Computer and Communications Security
ISSN (Print)1543-7221

Other

Other2013 ACM SIGSAC Conference on Computer and Communications Security, CCS 2013
CountryGermany
CityBerlin
Period11/4/1311/8/13

Fingerprint

Critical infrastructures
Temporal logic

All Science Journal Classification (ASJC) codes

  • Software
  • Computer Networks and Communications

Cite this

Haghani, P., & Aliari Zonouz, S. (2013). Poster - Sechduler: A security-aware kernel scheduler. In CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security (pp. 1465-1467). (Proceedings of the ACM Conference on Computer and Communications Security). https://doi.org/10.1145/2508859.2512527
Haghani, Parisa ; Aliari Zonouz, Saman. / Poster - Sechduler : A security-aware kernel scheduler. CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security. 2013. pp. 1465-1467 (Proceedings of the ACM Conference on Computer and Communications Security).
@inproceedings{2f675ddfeb1e49c0b18b3245b525e011,
title = "Poster - Sechduler: A security-aware kernel scheduler",
abstract = "Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 {\%} on average to guarantee high level of combined security and realtimeness simultaneously.",
author = "Parisa Haghani and {Aliari Zonouz}, Saman",
year = "2013",
month = "12",
day = "9",
doi = "10.1145/2508859.2512527",
language = "English (US)",
isbn = "9781450324779",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
pages = "1465--1467",
booktitle = "CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security",

}

Haghani, P & Aliari Zonouz, S 2013, Poster - Sechduler: A security-aware kernel scheduler. in CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security. Proceedings of the ACM Conference on Computer and Communications Security, pp. 1465-1467, 2013 ACM SIGSAC Conference on Computer and Communications Security, CCS 2013, Berlin, Germany, 11/4/13. https://doi.org/10.1145/2508859.2512527

Poster - Sechduler : A security-aware kernel scheduler. / Haghani, Parisa; Aliari Zonouz, Saman.

CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security. 2013. p. 1465-1467 (Proceedings of the ACM Conference on Computer and Communications Security).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - GEN

T1 - Poster - Sechduler

T2 - A security-aware kernel scheduler

AU - Haghani, Parisa

AU - Aliari Zonouz, Saman

PY - 2013/12/9

Y1 - 2013/12/9

N2 - Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 % on average to guarantee high level of combined security and realtimeness simultaneously.

AB - Trustworthy operation of safety-critical infrastructures necessitates efficient solutions that satisfy both realtimeness and security requirements simultaneously. We present Sechduler, a formally verifiable security-aware operating system scheduler that dynamically makes sure that system computational resources are allocated to individual waiting tasks in an optimal order such that, if feasible, neither realtime nor security requirements of the system are violated. Additionally, if not both of the requirements can be satisfied simultaneously, Sechduler makes use of easy-to-define linear temporal logic-based policies as well as automatically generated Buchi automaton-based monitors, compiled as loadable kernel modules, to enforce which requirements should get the priority. Our experimental results show that Sechduler can adaptively enforce the system-wide logic-based temporal policies within the kernel and with minimal performance overhead of 3 % on average to guarantee high level of combined security and realtimeness simultaneously.

UR - http://www.scopus.com/inward/record.url?scp=84889071163&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84889071163&partnerID=8YFLogxK

U2 - 10.1145/2508859.2512527

DO - 10.1145/2508859.2512527

M3 - Conference contribution

SN - 9781450324779

T3 - Proceedings of the ACM Conference on Computer and Communications Security

SP - 1465

EP - 1467

BT - CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security

ER -

Haghani P, Aliari Zonouz S. Poster - Sechduler: A security-aware kernel scheduler. In CCS 2013 - Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security. 2013. p. 1465-1467. (Proceedings of the ACM Conference on Computer and Communications Security). https://doi.org/10.1145/2508859.2512527