Moses - System Virtualization and Secure Code Isolation

Display language

To modulepage Generate PDF

Diese Modulbeschreibung gilt nicht im aktuellen Semester.

Die Modulbeschreibung gilt nur für den Zeitraum WS 2019/20 - WiSe 2022/23.

Module / Version:
#40953 / #1

Validity:
WS 2019/20 - WiSe 2022/23

Default display language:
English

Module title:
System Virtualization and Secure Code Isolation

Credits:
6

Responsible person:
Nordholz, Jan Christoph

Grading:
benotet

Type of exam:
Portfolioprüfung

Zugehörigkeit

Faculty:
Fakultät IV

Institute:
Institut für Softwaretechnik und Theoretische Informatik

Area of expertise:
34352600 FG Sichere und vertrauenswürdige netzangebundene Systemarchitekturen

Prüfungsausschuss:
No information

Kontakt

Office:
TEL 16

Contact person:
Nordholz, Jan Christoph

E-mail address:
j.nordholz@tu-berlin.de

Website:

https://www.svnsa.tu-berlin.de/menue/lehre/

Learning Outcomes

Students who complete this module know the specialized feature set of modern general-purpose CPUs for building highly privileged software components like hypervisors and secure monitors. They understand that the design space permits different solutions (such as x86 vs. ARM vs. MIPS) and know the use cases and tradeoff decisions that motivated them. Students have also learnt different models for peripheral device passthrough as well as purely virtual device drivers, and they are able to apply this knowledge to create their own virtualization solution and driver architecture for a given use case. This module also demonstrates ways to hide execution from highly privileged software, and alerts students to the dangers of often overlooked and/or underrated areas of the attack surface of virtualized/isolated systems. The two module parts complement one another: students are expected to take the IV part first to gain the necessary theoretical knowledge and to see (and probably try out) code examples. In the following seminar they can then apply their new capabilities by analyzing recent academic publications in this area.

Content

We will cover the following topics: (A) Virtualization - Virtualization Basics (from Popek&Goldberg onward) - Register Virtualization (contrast x86 to ARM and MIPS) - Memory Virtualization (shadow paging, nested paging, paravirtualized paging) - Interrupt Virtualization (APIC-V, AVIC, ARM GIC(v2/v3/v4), MIPS IRQ Controller Integration) - Handling Peripheral Devices in virtualized environments (paravirtualization, faithful virtualization, emulation) - Handling DMA in virtualized environments (IOMMU, SYSMMU, software workarounds) - Purely Virtual Devices (timers, virtual network links, virtual UARTs, virtual disks) (B) Isolation - Encrypted Virtualization (AMD SME/SEV, Intel TME/MKTME) - Isolated Execution Environments: ARM TrustZone, Intel SGX (C) Breaking Out or In - Side and Covert Channels - Guest-to-Host Privilege Escalation

Module Components

Pflichtgruppe:

All Courses are mandatory.

Course Name	Type	Number	Cycle	Language	SWS	VZ
System Virtualization and Secure Code Isolation	IV	3435 L 10149	WiSe	English	2
Recent Advances in System Security	SEM	3435 L 10213	k.A.	English	2

Workload and Credit Points

System Virtualization and Secure Code Isolation (IV):

Workload description	Multiplier	Hours	Total
Attendance	15.0	2.0h	30.0h
Pre/post processing	15.0	4.0h	60.0h
			90.0h(~3 LP)

Recent Advances in System Security (SEM):

Workload description	Multiplier	Hours	Total
Preparation of a Presentation	1.0	30.0h	30.0h
Attendance (Presentation Peer Review)	1.0	8.0h	8.0h
Seminar Paper	1.0	52.0h	52.0h
			90.0h(~3 LP)

The Workload of the module sums up to 180.0 Hours. Therefore the module contains 6 Credits.

Description of Teaching and Learning Methods

IV: Gradually transitioning from a classical lecture to a group discussion / collaborative exploration of the problem space of each week's topic. SEM: Classical seminar (presentations with group discussion, seminar paper), organized either as a single block event or as a weekly format, depending mainly on the number of interested students.

Requirements for participation and examination

Desirable prerequisites for participation in the courses:

This course assumes that students have internalized the basic protection and separation concepts provided by a CPU's so-called "privileged mode", such as segmentation, paging (and page faults), interrupt delivery, and system calls. Students looking for a refresher are encouraged to browse the teaching material of the Bachelor course "Systemprogrammierung" - the syllabus is only available in German, but the literature references are English (Stallings, Silberschatz, and Tanenbaum).

Mandatory requirements for the module test application:

This module has no requirements.

Module completion

Grading

graded

Type of exam

Portfolio examination

Type of portfolio examination

100 Punkte insgesamt

Language

German/English

Test elements

Name	Points	Categorie	Duration/Extent
(Examination) Oral Exam (about the IV course)	40	oral	20 min
(Deliverable Assessment) Seminar Presentation	20	oral	30 min
(Deliverable Assessment) Seminar Paper	40	written	10 pages

Grading scale

Notenschlüssel »Notenschlüssel 1: Fak IV (1)«

Gesamtpunktzahl	1.0	1.3	1.7	2.0	2.3	2.7	3.0	3.3	3.7	4.0
100.0pt	86.0pt	82.0pt	78.0pt	74.0pt	70.0pt	66.0pt	62.0pt	58.0pt	54.0pt	50.0pt

Test description (Module completion)

The standard rules for portfolio modules apply.

Duration of the Module

The following number of semesters is estimated for taking and completing the module:
2 Semester.

This module may be commenced in the following semesters:
Wintersemester.

Maximum Number of Participants

This module is not limited to a number of students.

Registration Procedures

The registration rules for portfolio modules apply. Please check QISPOS for the exact registration deadline, but note that it is usually 6 weeks after lectures have started. Students who cannot use QISPOS please contact the lecturer via email.

Recommended literature
No recommended literature given

Assigned Degree Programs

Semester:

Zeige auch ausgelaufene Studiengänge und StuPOs

This module is used in the following Degree Programs (new System):

	Studiengang / StuPO	StuPOs	Verwendungen	Erste Verwendung	Letzte Verwendung
This module is not used in any degree program.

Students of other degrees can participate in this module without capacity testing.

Miscellaneous

No information

System Virtualization and Secure Code Isolation