Skip to main content
European Commission logo
polski polski
CORDIS - Wyniki badań wspieranych przez UE
CORDIS

A Common Code Base and Toolkit for Deployment of Applications to Secure and Reliable Virtual Execution Environments

Rezultaty

Report on Communication and Dissemination Activities and Exploitation Plans - Initial

This report describes the 1st year results of all the activities for impact creation, including communication actions (also through project’s website), scientific publications, events participation as well as initial plans for the exploitation of the project outcomes.

Security, Safety and Validation Support Definition - Initial

This deliverable will describe the definition of the UNICORE security and safety primitives, which allow UNICORE applications to minimize the attack and failure surface in production. This is done both proactively (using software verification techniques) and reactively (using software hardening techniques). In addition, this deliverable will report on deterministic execution support for smart contracts.

Report on Communication and Dissemination Activities - Intermediate

This report describes the 2nd year results of all the activities form impact creation, including communication actions, scientific publications and events participation.

Platform Requirements - Final

This deliverable will describe the aggregated inputs and goals of the diverse partners will aligned into one consistent whole that will maximise the efficiency of the core implementation and developed toolsets for the selected and practical use-cases of Unikernels defined in WP5. This deliverable will contain: the initial description of the Scenarios, the initial description of business and trials requirements, the taxonomy of services where unikernels applies.

Security, Safety and Validation Support Definition - Final

This deliverable will describe the definition of the UNICORE security and safety primitives which allow UNICORE applications to minimize the attack and failure surface in production This is done both proactively using software verification techniques and reactively using software hardening techniques In addition this deliverable will report on deterministic execution support for smart contracts

Initial Deployment

This report will detail the results of the initial deployment of the core project tools/unikernels (i.e., the output of WP2, WP3 and WP4): what went well, what did not, what functionality is missing, etc. This input will be fed back to the core WPs in order to further refine the UNICORE tools to meet the demands of the project’s four use cases.

Final Report on Open Source Contributions, Exploitation Plans and Business Opportunities

This report will summarize the project contributions to standardization bodies and open source communities Moreover the report will describe the final exploitation plans analyzing the potential of the project outcomes to feed new market products and inspire future research activities

API Design - Final

This deliverable in close cooperation with WP3WP5 will provide the library categories API definitions and semantics annotations This will define the common interfaces prevailing throughout UNICORE to support decomposition and modularization of OS components and automated Unikernel construction

Platform Requirements - Initial

This deliverable will describe the conflicting inputs and goals of the diverse partners will aligned into one consistent whole that will maximise the efficiency of the core implementation and developed toolsets for the selected and practical use-cases of Unikernels defined in WP5. This deliverable will contain: the initial description of the Scenarios, the initial description of business and trials requirements, the taxonomy of services where unikernels applies.

Deployment Plan, Requirements and Business Cases

This report will provide a detailed deployment plan for the four different deployment targets in this WP. This will include infrastructure description, unikernel requirements for each particular use case and any orchestration/management integration requirements. Further, this report will provide an analysis and description of the business cases for each of the use cases, pointing out what the business models will be.

Data Management Plan

This deliverable provides the data management plan for open research data conforming to the guidelines of the H2020 framework programme.

Design & Implementation of Tools for Unikernel Deployment - Initial

A report on the development of the tools required during the unikernel life cycle. The report details the design of each tool used to build the unikernel, including a decomposition tool, dependency analysis tool, optimization tool and verification tool. Deployment tools are also described including any modifications or additions required to the orchestration tool. In addition, the design of the host environment is described and details how unikernels are supported for easy deployment, and reliable and secure execution without sacrificing performance. The report will be accompanied by an initial release of the open source tool set and host development and deployment environments.

Platform Integration

This deliverable will report on the results of the integration effort which will bring all of the UNICORE tools eg the build tool the verification one the performance optimization one etc under a common easytouse ecosystem It will further contain a section consisting of a user manual to explain how this ecosystem of tools should be used

Definition of APIs and Library Identification - Initial

This deliverable will describe the definition of the UNICORE APIs that allow libraries within a category (e.g., schedulers, memory allocators, etc.) to be able to easily swapped in and out (e.g., exchanging a co-operative scheduler with a pre-emptive one, or a slab allocator with a buddy one). In addition, this deliverable will identify the libraries that UNICORE will need to support the widest possible range of applications, along with a work plan as to how to quickly implement them (or port them).

Platform Evaluation

This deliverable will contain the results of the final implementation of the UNICORE use cases This final document will include an overall analysis of the performed evaluations and will provide a final assessment of the models underlying the tested control components This document will provide guidelines for future collaborative users of the system to maximize the tools usage

Design & Implementation of Tools for Unikernel Deployment - Intermediate

An updated report detailing the progress since the release of D4.1. The report includes the final design of all the tools and host environment which are now feature complete. An evaluation of the development and deployment environment is included, which is based on T2.4 Evaluation. A second release of the source code is also part of the deliverable, which has already been published as open source as part of D4.1.

API Design - Intermediate

This deliverable in close cooperation with WP3/WP5 will provide the library categories API definitions and semantics annotations. This will define the common interfaces prevailing throughout UNICORE to support decomposition and modularization of OS components, and automated Unikernel construction.

Innovation Strategy Report

This deliverable will provide a full report of the innovation activities of T13 including market analysis description of business opportunities and the development of business models for the deployments envisioned by project partners WP5 This document will further describe interactions with the advisory board regarding innovation opportunities as well as any developments coming from dissemination activities at industryled events

API Design - Initial

This deliverable in close cooperation with WP3/WP5 will provide the library categories API definitions and semantics annotations. This will define the common interfaces prevailing throughout UNICORE to support decomposition and modularization of OS components, and automated Unikernel construction.

Report on Communication and Dissemination Activities - Final

This report describes all the communication and dissemination results of the project including details of scientific publications organization of workshops advertising and communication materials participation in industrial events

Definition of APIs and Library Identification - Final

This deliverable will describe the definition of the UNICORE APIs that allow libraries within a category eg schedulers memory allocators etc to be able to easily swapped in and out eg exchanging a cooperative scheduler with a preemptive one or a slab allocator with a buddy one In addition this deliverable will identify the libraries that UNICORE will need to support the widest possible range of applications along with a work plan as to how to quickly implement them or port them

API, Library and Security Primitives Implementation - Initial

This deliverable will provide the initial implementation of the UNICORE APIs, along with an initial set of libraries. This initial set should be sufficient to at least support a few applications (e.g., a web server, or a Python unikernel) in order to start developing the project’s use cases. Further, this deliverable will describe an initial implementation of the security and safety primitives being developed in tasks T3.2 and T.3.3.

Design & Implementation of Tools for Unikernel Deployment - Final

The final report detailing the progress since the release of D42 Any modifications to the design that were implemented are included which may come about as a result of evaluation through the use cases

Final Deployment, Evaluation and Market Impact

This report will give a full description of the final deployment for all use cases including a performance evaluation and a final description of the business case and future plans that each deployment has in order to have market impact

API, Library and Security Primitives Implementation - Final

This deliverable will contain the description of the final implementation of the UNICORE APIs libraries and security and safety primitives At this stage this implementation will cover all of the functionality needed by the UNICORE use cases

Website, Social Accounts and Advertising Material

This report documents the web site and the social channels established, as well as the initial advertising material produced to widely disseminate the activities and the outcomes of the project.

Publikacje

PIBE: Practical Kernel Control-flow Hardening with Profile-guided Indirect Branch Elimination.

Autorzy: Duta, V.; van der Kouwe, E.; Bos, H.; and Giuffrida, C
Opublikowane w: ASPLOS 2021: Proceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, 2021
Wydawca: ACM

Unikraft: Fast, Specialized Unikernels the Easy Way

Autorzy: Felipe Huici
Opublikowane w: EuroSys '21: Proceedings of the Sixteenth European Conference on Computer Systems, 2021
Wydawca: ACM
DOI: 10.1145/3447786.3456248

TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering

Autorzy: Tatar, A.; Trujillo, D.; Giuffrida, C
Opublikowane w: USENIX Security, 2022
Wydawca: USENIX

FlexOS: towards flexible OS isolation

Autorzy: Lefeuvre, H.; Bădoiu, V-A.; Jung, A.; Teodorescu, S.L.; Rauch, S.; Huici, F.; Raiciu, C
Opublikowane w: In Proceedings of the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2022)., 2022
Wydawca: ACM
DOI: 10.1145/3503222.3507759

FlexOS: Making OS Isolation Flexible

Autorzy: Hugo Lefeuvre
Opublikowane w: HotOS '21: Proceedings of the Workshop on Hot Topics in Operating Systems, 2021
Wydawca: ACM
DOI: 10.1145/3458336.3465292

Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks

Autorzy: Barberis, E.; Frigo, P.; Muench, M.; Bos, H.; and Giuffrida, C.
Opublikowane w: USENIX Security, 2022
Wydawca: USENIX

NetCAT: Practical Cache Attacks from the Network

Autorzy: Kurth, M.; Gras, B.; Andriesse, D.; Giuffrida, C.; Bos, H
Opublikowane w: 2020 IEEE Symposium on Security and Privacy (SP), 2020
Wydawca: IEEE
DOI: 10.1109/sp40000.2020.00082

DupeFS: Leaking Data Over the Network With Filesystem Deduplication Side Channels

Autorzy: Bacs, A.; Musaev, S.; Razavi, K.; Giuffrida, C.; and Bos, H
Opublikowane w: FAST 2022, 2022
Wydawca: USENIX

Practical Software Crash Recovery with Targeted Library-level Fault Injection

Autorzy: Bhat, K.; van der Kouwe, E.; Bos, H.; and Giuffrida, C.
Opublikowane w: 51st Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2021
Wydawca: IEEE

Speculative Probing: Hacking Blind in the Spectre Era

Autorzy: Enes Gkta, Kaveh Razavi, Georgios Portokalidis, Herbert Bos, and Cristiano Giuffrida
Opublikowane w: CCS '20: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, Numer November 2020, 2020
Wydawca: ACM
DOI: 10.1145/3372297.3417289

Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks

Autorzy: Ragab, H.; Barberis, E.; Bos, H.; and Giuffrida, C
Opublikowane w: USENIX Security, 2021
Wydawca: USENIX

TRRespass: Exploiting the Many Sides of Target Row Refresh

Autorzy: Frigo, P.; Vannacci, E.; Hassan, H.; van der Veen, V.; Mutlu, O.; Giuffrida, C.; Bos, H.; and Razavi, K.
Opublikowane w: 2020 IEEE Symposium on Security and Privacy (SP), 2020
Wydawca: IEEE
DOI: 10.1109/sp40000.2020.00090

CrossTalk: Speculative Data Leaks Across Cores Are Real

Autorzy: Ragab, H.; Milburn, A.; Razavi, K.; Bos, H.; and Giuffrida, C
Opublikowane w: IEEE Symposium on Security and Privacy (SP), 2021
Wydawca: IEEE

kMVX - Detecting Kernel Information Leaks with Multi-variant Execution

Autorzy: Sebastian Österlund, Koen Koning, Pierre Olivier, Antonio Barbalace, Herbert Bos, Cristiano Giuffrida
Opublikowane w: Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems - ASPLOS '19, 2019, Strona(/y) 559-572, ISBN 9781-450362405
Wydawca: ACM Press
DOI: 10.1145/3297858.3304054

Unleashing the power of unikernels with unikraft

Autorzy: S. Kuenzer, S. Santhanam, Y. Volchkov, F. Schmidt, F. Huici, Joel Nider, Mike Rapoport, Costin Lupu
Opublikowane w: Proceedings of the 12th ACM International Conference on Systems and Storage - SYSTOR '19, 2019, Strona(/y) 195-195, ISBN 9781-450367493
Wydawca: ACM Press
DOI: 10.1145/3319647.3325856

Exploiting Correcting Codes: On the Effectiveness of ECC Memory Against Rowhammer Attacks

Autorzy: Lucian Cojocar, Kaveh Razavi, Cristiano Giuffrida, Herbert Bos
Opublikowane w: 2019 IEEE Symposium on Security and Privacy (SP), 2019, Strona(/y) 55-71, ISBN 978-1-5386-6660-9
Wydawca: IEEE
DOI: 10.1109/sp.2019.00089

SoK: Benchmarking Flaws in Systems Security

Autorzy: Erik van der Kouwe, Gernot Heiser, Dennis Andriesse, Herbert Bos, Cristiano Giuffrida
Opublikowane w: 2019 IEEE European Symposium on Security and Privacy (EuroS&P), 2019, Strona(/y) 310-325, ISBN 978-1-7281-1148-3
Wydawca: IEEE
DOI: 10.1109/eurosp.2019.00031

VPS: excavating high-level C++ constructs from low-level binaries to protect dynamic dispatching

Autorzy: Pawlowski, A., van der Veen, V., Andriesse, D., van der Kouwe, E., Holz, T., Giuffrida, C. and Bos, H.
Opublikowane w: 35th Annual Computer Security Applications Conference, ACSAC 2019, Dec 9-13 2019, 2019
Wydawca: ACSAC
DOI: 10.5281/zenodo.3523939

Address space isolation in the linux kernel

Autorzy: Joel Nider, Mike Rapoport, James Bottomley
Opublikowane w: Proceedings of the 12th ACM International Conference on Systems and Storage - SYSTOR '19, 2019, Strona(/y) 194-194, ISBN 9781-450367493
Wydawca: ACM Press
DOI: 10.1145/3319647.3325855

RIDL: Rogue In-Flight Data Load

Autorzy: Stephan van Schaik, Alyssa Milburn, Sebastian Osterlund, Pietro Frigo, Giorgi Maisuradze, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida
Opublikowane w: 2019 IEEE Symposium on Security and Privacy (SP), 2019, Strona(/y) 88-105, ISBN 978-1-5386-6660-9
Wydawca: IEEE
DOI: 10.1109/sp.2019.00087

UNICORE: A toolkit to automatically build unikernels

Autorzy: Gaulthier, G., Soldani, C. and Mathy, L.
Opublikowane w: Grascomp Doctoral Day, 22 November 2019, Namur, Belgium, 2019
Wydawca: n/a

Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks

Autorzy: Sanghyun Hong and Pietro Frigo and Yigitcan Kaya and Cristiano Giuffrida and Tudor Dumitras
Opublikowane w: 28th USENIX Security Symposium, Aug 14–16, 2019 SANTA CLARA, CA, USA, 2019, Strona(/y) 497--514, ISBN 978-1-939133-06-9
Wydawca: USENIX Association

ZebRAM: Comprehensive and Compatible Software Protection Against Rowhammer Attacks

Autorzy: Radhesh Krishnan Konoth and Marco Oliverio and Andrei Tatar and Dennis Andriesse and Herbert Bos and Cristiano Giuffrida and Kaveh Razavi
Opublikowane w: 12th USENIX conference on Operating Systems Design and Implementation USENIX-ACM OSDI 2018, 2018, Strona(/y) 697-710, ISBN 978-1-939133-08-3
Wydawca: USENIX Association

Unikernels Made Easy with Unikraft

Autorzy: S.Kuenzer
Opublikowane w: 14th Workshop on Virtualization in High-Performance Cloud Computing (VHPC'19), 2019
Wydawca: VHPC

Threat Classification in Current Communication Infrastructures

Autorzy: Ioan Constantin, Cristian Patachia, Carmen Patrascu, Andrei Avadanei, Lucian Nitescu
Opublikowane w: 11th edition of the Electronics, Computers and Artificial Intelligence - ECAI-2019, 2019
Wydawca: ECAI

TagBleed: Breaking KASLR on the Isolated Kernel Address Space Using Tagged TLBs

Autorzy: Koschel, J.; Giuffrida, C.; Bos, H.; and Razavi, K
Opublikowane w:  2020 IEEE European Symposium on Security and Privacy (EuroS&P), 2020
Wydawca: IEEE
DOI: 10.1109/eurosp48549.2020.00027

SMASH: Synchronized Many-sided Rowhammer Attacks From JavaScript

Autorzy: de Ridder, F.; Frigo, P.; Vannacci, E.; Bos, H.; Giuffrida, C.; and Razavi, K
Opublikowane w: USENIX Security, 2021
Wydawca: USENIX

owards Highly Specialized, POSIX -compliant Software Stacks with Unikraft: Work-in-Progress

Autorzy: S. Santhanam et al.
Opublikowane w: 2020 International Conference on Embedded Software (EMSOFT), 2020
Wydawca: IEEE
DOI: 10.1109/emsoft51651.2020.9244044

Automatic Side-Channel Resistance Using Efficient Control and Data Flow Linearization

Autorzy: Giuffrida, C.; Borrello, D.; Cono, D.; Querzoni, L
Opublikowane w: CCS '21: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021
Wydawca: ACM
DOI: 10.1145/3460120.3484583

Wayfinder: towards automatically deriving optimal OS configurations

Autorzy: Jung, A.; Lefeuvre, H.; Rotsos, D.; Olivier, p.; Oñoro-Rubio, D.; Huici, F.; Niepert, M.
Opublikowane w: In Proceedings of the 12th ACM SIGOPS Asia-Pacific Workshop on Systems, 2021
Wydawca: ACM

On the Effectiveness of Same-Domain Memory Deduplication

Autorzy: Costi, A.; Johannesmeyer, B.; Bosman, E.; Giuffrida, C.; and Bos, H
Opublikowane w: EuroSec '22: Proceedings of the 15th European Workshop on Systems Security, 2022
Wydawca: ACM

Scanning for Generalized Transient Execution Gadgets in the Linux Kernel

Autorzy: Johannesmeyer, B.; Koschel, J.; Razavi, K.; Bos, H.; and Giuffrida, C
Opublikowane w: 2022 NDSS Symposium, 2022
Wydawca: NDSS

ABSynthe: Automatic Blackbox Sidechannel Synthesis on Commodity Microarchitectures

Autorzy: Gras, B.; Giuffrida, C.; Kurth, M.; Bos, H.; and Razavi, K
Opublikowane w: 2020 NDSS Symposium, 2020
Wydawca: NDSS

Defeating Software Mitigations Against Rowhammer: A Surgical Precision Hammer

Autorzy: Andrei Tatar, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi
Opublikowane w: Research in Attacks, Intrusions, and Defenses - 21st International Symposium, RAID 2018, Heraklion, Crete, Greece, September 10-12, 2018, Proceedings, Numer 11050, 2018, Strona(/y) 47-66, ISBN 978-3-030-00469-9
Wydawca: Springer International Publishing
DOI: 10.1007/978-3-030-00470-5_3

Unikraft: Unikernels Made Easy

Autorzy: Simon Kuenzer
Opublikowane w: FOSDEM 2019, 2019
Wydawca: n/a

Kernel Address Space Isolation

Autorzy: Alexandre Chartre, Mike Rapoport, James Bottomley, Joel Nider
Opublikowane w: Linux Plumbers, 9-11 September 2019,, 2019
Wydawca: n/a

Building DPDK Unikernel with Unikraft

Autorzy: S. Santhanam, S.Kuenzer, F. Huici
Opublikowane w: DPDK Summit 2019,, 2019
Wydawca: n/a

Is the Hypervisor the New Kernel?

Autorzy: C. Lupu
Opublikowane w: EuroSys, Doctoral Workshop, 25-28 March 2019, 2019
Wydawca: EuroSys

UNICORE Project: Unikernel Power

Autorzy: J. Guijarro
Opublikowane w: OpenNebula Techday, 8 May 2019, Barcelona, Spain, 2019
Wydawca: OpenNebula

Unikraft: Unikernels for NFV

Autorzy: L. Mathy (speaker), F. Huici
Opublikowane w: The 3rd Future Network Development Conference, 2019
Wydawca: N/A

Another Step Beyond Containers

Autorzy: X. Peralta
Opublikowane w: Jornadas Técnicas RedIRIS, 28/30 May 2019, 2019
Wydawca: n/a

UNICORE Presentation by Orange

Autorzy: Cristian Patachia & Orange CEO
Opublikowane w: Digital Assembly, 13-14 June 2019,, 2019
Wydawca: n/a

Address Space Isolation for Container Security

Autorzy: Mike Rapoport, James Bottomley
Opublikowane w: Linux Plumbers, 9-11 September 2019, 2019
Wydawca: n/a

Address Space Isolation inside Linux Kernel

Autorzy: Mike Rapoport, James Bottomley
Opublikowane w: Open Source Summit Europe, 28-30 October 2019, 2019
Wydawca: n/a

Memory management bits in arch/*

Autorzy: Mike Rapoport
Opublikowane w: Kernel Summit, 9-11 September 2019, 2019
Wydawca: n/a

Boot Time Memory Management

Autorzy: Mike Rapoport
Opublikowane w: Embedded Linux Conference Europe, 28-30 October 2019, 2019
Wydawca: n/a

Address Spaces for Namespaces

Autorzy: Mike Rapoport, James Bottomley
Opublikowane w: Linux Security Summit Europe, 31 October - 1 November 2019, 2019
Wydawca: n/a

UNICORE video

Autorzy: UNICORE Consortium
Opublikowane w: UNICORE Project Video, 2019
Wydawca: UNICORE Consortium

Digital Forensics

Autorzy: Ioan Constantin
Opublikowane w: Orange Education Program Spring School, 8-10 March 2019, Bucharest, Romania, 2019
Wydawca: “Alexandru Ioan Cuza” University of Iași, Romania

Cybersecurity in Mobile Networks

Autorzy: Ioan Constantin
Opublikowane w: Cybersecurity Romania, 4 June 2019, Bucharest, Romania, 2019
Wydawca: N/A

Lightweight virtualization with Unikraft

Autorzy: Costin Raiciu
Opublikowane w: Microsoft Research Seminar, 5 September 2019, 2019
Wydawca: Microsoft

Simjacker – billion dollar mobile security vs. one tiny piece of plastic

Autorzy: Ioan Constantin
Opublikowane w: Def Camp 2019 - International Hacking & Information Security Conference, 7-8 November 2019, Bucharest, Romania, 2019
Wydawca: Def Camp

Cristian Patachia, Ioan Constantin

Autorzy: Orange Business Internet Security Report Ed. II
Opublikowane w: Online resource, 2019
Wydawca: Orange Romania

Wyszukiwanie danych OpenAIRE...

Podczas wyszukiwania danych OpenAIRE wystąpił błąd

Brak wyników