Programs
- M. Tech. in Automotive Engineering -
- Fellowship In Interventional Pulmonology and Pulmonary Critical care - Fellowship
Publication Type : Conference Paper
Publisher : 2017 International Conference on Wireless Communications, Signal Processing and Networking (WiSPNET)
Source : 2017 International Conference on Wireless Communications, Signal Processing and Networking (WiSPNET) (2017)
Keywords : Architectural design, Authorization, Conferences, hot research area, invasive software, Kernel, Linux, Linux operating system security, open source, principle of least privilege, sandbox, Secd, Secure Daemon, secure Linux operating system Operating system, security holes, security mechanisms, Security of data, security ticket, Sockets, specially structured security ticket, traditional linux architecture
Campus : Amritapuri
School : School of Engineering
Department : Computer Science, Computer Science and Engineering
Year : 2017
Abstract : Operating system security is a hot research area for the past several decades. Various security mechanisms have been introduced till now to secure the operating system. In this paper we are focusing on securing Linux operating system. Even though Linux is open source and large numbers of people are involved in developing kernel patches for security holes, there are still many malwares to exploit the existing vulnerabilities. Using our architecture we are trying to minimize the damage done by the malwares if not blocking them altogether. Our architecture is designed to ensure the principle of least privilege. Principle of least privilege guarantees that a process will get the privileges just enough to perform its task. This ensures that even if the process is compromised it can do the least damage to the system as it is running in a sandbox. Major chunk of our system is running in the user level to make it portable across the distributions. Our system uses a specially structured security ticket to provide fine grained authorization to user processes which is not currently possible in the traditional linux architecture. The security ticket is designed in such a way that it can be inherited by a child process, can be shared and is unforgeable. The core module in the system is called Secd (Secure Daemon) which authorizes all the requests and also manages the security tickets.
Cite this Research Publication : H. Narayanan, Radhakrishnan, V., Shiju Sathyadevan, and Jayaraj Poroor, “Architectural Design for a Secure Linux Operating System”, in 2017 International Conference on Wireless Communications, Signal Processing and Networking (WiSPNET), 2017.