security
A Formal Security Model for Networked Control Systems
Submitted by mmontan2 on Tue, 04/28/2009 - 17:09BootJacker: Compromising Computers using Forced Restarts
Submitted by rhc on Thu, 03/26/2009 - 22:28Cell Phone OS
VMMs offer the potential to restructure existing software systems to provide greater security, while also facilitating new approaches to building secure systems. Current operating systems provide poor isolation, leaving host-based security mechanisms subject to attack. Moving these capabilities outside a virtual machine—so that they run alongside an operating system but are isolated from it—offers the same functionality but with much stronger resistance to attack.
Security Assessment for the Cyber-Infrastructure
Networked control systems (NCS) are at the base of many important processes in our society. These systems control our cyber-infrastructure (power grid, water distribution, oil and gas pipelines) and critical systems such as airports. The increasing requirements of efficiency are pushing designers to remove the traditional 'air gaps' placed between control system networks and the rest of the interconnected world. Features such as remote administration and integration with business procedures are becoming commonplace.
Operating System Security
In the areas of operating system security the SRG group has recently worked in three projects: BootJacker, Cloaker and MemCrawler.
BOOTJACKER: COMPROMISING COMPUTERS USING FORCED RESTARTS
Secure Configuration for Software Defined Radio
Submitted by mmontan2 on Thu, 03/26/2009 - 10:24Automatic Security Assessment of Control Systems for Critical Cyber-Infrastructure
Submitted by mmontan2 on Thu, 03/26/2009 - 09:23Budget Constrained Optimal Security Hardening of Control Networks for Critical Cyber-Infrastructures
Submitted by mmontan2 on Thu, 03/26/2009 - 09:20Choices
Choices is written as an object-oriented operating system in C++. As an object-oriented operating system, its architecture is organized into frameworks of objects that are hierarchically classified by function and performance. The operating system is customized by replacing subframeworks and objects. The application interface is a collection of kernel objects exported through the application/kernel protection layer. Kernel and application objects are examined through application browsers.

