Towards EndtoEnd Security Analysis of Networked Systems

1
Towards End-to-End Security Analysis of Networked
Systems

• Deepak Garg, Jason Franklin, Dilsun Kaynar, and
  Anupam Datta

2
Secure Hamburgers
User Level Programs
Malicious Mustard
Lettuce
Operating System
Virtual Machine Monitor
Hardware
My apologies to any vegetarian or hungry
members of the audience.
3
Networked Secure Hamburgers
Malicious Mustard
Virtual Machine
Virtual Machine

Malicious Mustard
Client
Virtual Machine Monitor
Malicious Mustard
Memory
Hardware
Secure Co-processor
Feisty Fries
4
Logic of Secure Hamburgers
Malicious local threads can corrupt unprotected
data and code
Malicious Mustard
Killer Ketchup
Key
Control Flow
Hardware Resets
Trusted Computing Technology
old
NEW!!!
Time
Memory Protection
Memory
Crypto.
Network Comm.
Threads
5
Verifying Implementations

• Found vulnerabilities in hypervisor design and
  implementation

6
Hungry for More?

• CMU Theory of Secure Systems Project
• http//www.cs.cmu.edu/jfrankli/toss