Automatic OS Kernel TCB Reduction by Leveraging Compile-Time Configurability

No abstract is available for this paper.

• Publication year

  2012

• Venue

  Hot Topics in System Dependability

• Publication date

  2012-10-07

• Fields of study

  Computer Science, Engineering

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• A robust approach for variability extraction from the Linux build system

  2012cited by this paper
• Attack surface reduction for commodity OS kernels: trimmed garden plants may attract less bugs

  2011cited by this paper
• Feature consistency in compile-time-configurable system software: facing the linux 10,000 feature problem

  2011cited by this paper
• Turning Down the LAMP: Software Specialisation for the Cloud

  2010cited by this paper
• Efficient extraction and analysis of preprocessor-based variability

  2010cited by this paper
• seL4: formal verification of an OS kernel

  2009cited by this paper
• SELinux by Example: Using Security Enhanced Linux (Prentice Hall Open Source Software Development Series)

  2006cited by this paper
• System-wide compaction and specialization of the linux kernel

  2005cited by this paper
• An Application-Oriented Linux Kernel Customization for Embedded Systems

  2004cited by this paper
• Improving Host Security with System Call Policies

  2003cited by this paper
• Linux Security Module Framework

  2002cited by this paper
• Linux security modules: general security support for the linux kernel

  2002cited by this paper
• An empirical study of operating systems errors

  2001cited by this paper
• Detecting and countering system intrusions using software wrappers

  2000cited by this paper
• Hardening COTS software with generic software wrappers

  1999cited by this paper
• A tool for measuring web server performance

  1998cited by this paper
• httperf—a tool for measuring web server performance

  1998cited by this paper
• On -Kernel Construction

  1995cited by this paper
• On micro-kernel construction

  1995cited by this paper
• Authentication in distributed systems

  1992cited by this paper
• Mach: A New Kernel Foundation for UNIX Development

  1986cited by this paper

• In Pursuit of Lean OS Kernels: Improving Configuration-Based Debloating

  2025cites this paper
• Gramine-TDX: A Lightweight OS Kernel for Confidential VMs

  2024cites this paper
• Securing Container-based Clouds with Syscall-aware Scheduling

  2023cites this paper
• GyroidOS: Packaging Linux with a Minimal Surface

  2022cites this paper
• SecDeep: Secure and Performant On-device Deep Learning Inference Framework for Mobile and IoT Devices

  2021cites this paper
• SHARD: Fine-Grained Kernel Specialization with Context-Aware Hardening

  2021cites this paper
• Saffire: Context-sensitive Function Specialization against Code Reuse Attacks

  2020cites this paper
• Set the Configuration for the Heart of the OS

  2020influential citation
• A Linux in unikernel clothing

  2020cites this paper
• MultiK: A Framework for Orchestrating Multiple Specialized Kernels

  2019influential citation
• Binary Control-Flow Trimming Masoud Ghaffarinia

  2019cites this paper
• Binary Control-Flow Trimming

  2019cites this paper
• Bloat Factors and Binary Specialization

  2019cites this paper
• KASR: A Reliable and Practical Approach to Attack Surface Reduction of Commodity OS Kernels

  2018cites this paper
• A Reliable and Practical Approach to Kernel Attack Surface Reduction of Commodity OS

  2018cites this paper
• Shredder: Breaking Exploits through API Specialization

  2018cites this paper
• Levels of Specialization in Real-Time Operating Systems

  2018cites this paper
• Do #ifdefs influence the occurrence of vulnerabilities? an empirical study of the linux kernel

  2016cites this paper
• Automatic feature selection in large-scale system-software product lines

  2015cites this paper
• Multi-Metrics Approach for Security, Privacy and Dependability in Embedded Systems

  2015cites this paper
• Years of Variability Bugs in Linux – How to Avoid them

  2014cites this paper
• Improving system security through TCB reduction

  2014cites this paper
• A secure architecture design based on application isolation, code minimization and randomization

  2013cites this paper
• Secure Logical Isolation for Multi-tenancy in cloud storage

  2013cites this paper
• A secure architecture design based on code minimization and application isolation

  2013cites this paper
• Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring

  2013cites this paper