Towards trustworthy computing systems: Taking microkernels to the next level

Authors

Gernot Heiser, Kevin Elphinstone, Ihor Kuz, Gerwin Klein and Stefan M. Petters

NICTA, Sydney, Australia
UNSW, Australia


    Open Kernel Labs, Sydney, Australia

Abstract

As computer systems become increasingly mission-critical, used in life-critical situations, and relied upon to protect intellectual property, operating-system reliability is becoming an ever growing concern. In the past, mission- and life-critical embedded systems consisted of simple microcontrollers running a small amount of software that could be validated using traditional and informal techniques. However, with the growth of software complexity, traditional techniques for ensuring software reliability have not been able to keep up, leading to an overall degradation of reliability. This paper argues that microkernels are the best approach for delivering truly trustworthy computer systems in the foreseeable future. It presents the NICTA operating-systems research vision, centred around the L4 microkernel and based on four core projects. The seL4 project is designing an improved API for a secure microkernel, L4.verified will produce a full formal verification of the microkernel, Potoroo combines execution-time measurements with static analysis to determine the worst case execution profiles of the kernel, and CAmkES provides a component architecture for building systems that use the microkernel. Through close collaboration with Open Kernel Labs (a NICTA spinoff) the research output of these projects will make its way into products over the next few years.

BibTeX Entry

  @article{Heiser_EKKP_07,
    author           = {Gernot Heiser and Kevin Elphinstone and Ihor Kuz and Gerwin Klein and Stefan M. Petters},
    title            = {Towards Trustworthy Computing Systems: Taking Microkernels to the Next Level},
    journal          = {ACM Operating Systems Review},
    number           = {4},
    month            = {July},
    volume           = {41},
    year             = {2007},
    pages            = {3--11}
  }

Download

Served by Apache on Linux on seL4