Skip to content

Commit 62474c7

Browse files
ndautenndauten
committed
Replace master branch with page content via GitHub
1 parent 0039bb0 commit 62474c7

9 files changed

Lines changed: 402 additions & 947 deletions

File tree

‎images/bg_hr.png‎

78 Bytes
Loading

‎images/blacktocat.png‎

463 Bytes
Loading

‎images/icon_download.png‎

216 Bytes
Loading

‎images/sprite_download.png‎

14.5 KB
Loading

‎index.html‎

Lines changed: 51 additions & 57 deletions
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,33 @@
1-
<!doctype html>
2-
<!-- The Time Machine GitHub pages theme was designed and developed by Jon Rohan, on Feb 7, 2012. -->
3-
<!-- Follow him for fun. http://twitter.com/jonrohan. Tail his code on https://github.com/jonrohan -->
1+
<!DOCTYPE html>
42
<html>
5-
<head>
6-
<meta charset="utf-8">
7-
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
8-
9-
<link rel="stylesheet" href="stylesheets/stylesheet.css" media="screen">
10-
<link rel="stylesheet" href="stylesheets/pygment_trac.css">
11-
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js"></script>
12-
<script type="text/javascript" src="javascripts/script.js"></script>
13-
14-
<title>Nestedkernel.GitHub.io</title>
15-
<meta name="description" content="">
16-
17-
<meta name="viewport" content="width=device-width,initial-scale=1">
18-
19-
</head>
20-
21-
<body>
22-
23-
<div class="wrapper">
24-
<header>
25-
<h1 class="title">Nestedkernel.GitHub.io</h1>
26-
</header>
27-
<div id="container">
28-
<p class="tagline"></p>
29-
<div id="main" role="main">
30-
<div class="download-bar">
31-
<div class="inner">
32-
<a href="https://github.com/nestedkernel" class="code">View Nestedkernel.GitHub.io on GitHub</a>
33-
</div>
34-
<span class="blc"></span><span class="trc"></span>
35-
</div>
36-
<article class="markdown-body">
37-
<h3>
3+
4+
<head>
5+
<meta charset='utf-8'>
6+
<meta http-equiv="X-UA-Compatible" content="chrome=1">
7+
<meta name="description" content="Nested Kernel Operating System Architecture : Enabling Privilege Separation in Commodity Operating Systems">
8+
9+
<link rel="stylesheet" type="text/css" media="screen" href="stylesheets/stylesheet.css">
10+
11+
<title>Nested Kernel Operating System Architecture</title>
12+
</head>
13+
14+
<body>
15+
16+
<!-- HEADER -->
17+
<div id="header_wrap" class="outer">
18+
<header class="inner">
19+
<a id="forkme_banner" href="https://github.com/nestedkernel">View on GitHub</a>
20+
21+
<h1 id="project_title">Nested Kernel Operating System Architecture</h1>
22+
<h2 id="project_tagline">Enabling Privilege Separation in Commodity Operating Systems</h2>
23+
24+
</header>
25+
</div>
26+
27+
<!-- MAIN CONTENT -->
28+
<div id="main_content_wrap" class="outer">
29+
<section id="main_content" class="inner">
30+
<h3>
3831
<a id="welcome-to-the-nested-kernel" class="anchor" href="#welcome-to-the-nested-kernel" aria-hidden="true"><span class="octicon octicon-link"></span></a>Welcome to the Nested Kernel.</h3>
3932

4033
<p>Monolithic operating system designs undermine the security of computing systems
@@ -102,26 +95,27 @@ <h3>
10295

10396
<h3>
10497
<a id="comment-on-code" class="anchor" href="#comment-on-code" aria-hidden="true"><span class="octicon octicon-link"></span></a>Comment on Code</h3>
105-
</article>
106-
</div>
98+
</section>
99+
</div>
100+
101+
<!-- FOOTER -->
102+
<div id="footer_wrap" class="outer">
103+
<footer class="inner">
104+
<p>Published with <a href="https://pages.github.com">GitHub Pages</a></p>
105+
</footer>
107106
</div>
108-
<footer>
109-
<div class="owner">
110-
111-
<p><a href="https://github.com/nestedkernel" class="avatar"><img src="https://avatars1.githubusercontent.com/u/11792672?v=3&amp;s=60" width="48" height="48"></a>View <a href="https://github.com/nestedkernel">nestedkernel</a> on <a href="https://www.github.com">GitHub</a></p>
112-
113-
</div>
114-
<div class="creds">
115-
<small>This page generated using <a href="https://pages.github.com/">GitHub Pages</a><br>theme by <a href="https://twitter.com/jonrohan/">Jon Rohan</a></small>
116-
</div>
117-
</footer>
118-
</div>
119-
<div class="current-section">
120-
<a href="#top">Scroll to top</a>
121-
<a href="https://github.com/nestedkernel/nestedkernel.github.io/tarball/master" class="tar">tar</a><a href="https://github.com/nestedkernel/nestedkernel.github.io/zipball/master" class="zip">zip</a><a href="" class="code">source code</a>
122-
<p class="name"></p>
123-
</div>
124-
125-
126-
</body>
107+
108+
<script type="text/javascript">
109+
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
110+
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
111+
</script>
112+
<script type="text/javascript">
113+
try {
114+
var pageTracker = _gat._getTracker("UA-61522619-1");
115+
pageTracker._trackPageview();
116+
} catch(err) {}
117+
</script>
118+
119+
120+
</body>
127121
</html>

‎javascripts/main.js‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
console.log('This would be the main JS file.');

‎params.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{"name":"Nestedkernel.GitHub.io","tagline":"","body":"### Welcome to the Nested Kernel.\r\nMonolithic operating system designs undermine the security of computing systems\r\nby allowing single exploits anywhere in the kernel to enjoy full supervisor\r\nprivileges. The nested kernel operating system architecture addresses this\r\nproblem by “nesting” a small, isolated kernel within a traditional monolithic\r\nkernel. The “nested kernel” interposes on all updates to virtual memory\r\ntranslations to assert protections on physical memory, thus significantly\r\nreducing the trusted computing base for memory access control enforcement.\r\n\r\nWe incorporated the nested kernel architecture into FreeBSD on x86-64 hardware\r\nby write-protecting MMU translations and de- privileging the untrusted part of\r\nthe kernel, thereby enabling the entire operating system, trusted and untrusted\r\ncomponents alike, to operate at the highest hardware privilege level. Our\r\nimplementation inherently enforces kernel code integrity while still allowing\r\ndynamically loaded kernel modules, thus defending against code injection\r\nattacks.\r\n\r\nWe also demonstrate, by introducing write-mediation and write-logging services,\r\nthat the nested kernel architecture allows kernel developers to isolate memory\r\nin ways not possible in monolithic kernels. Performance of the nested kernel\r\nprototype shows modest overheads: < 1% average for Apache, <3.7% average for\r\nSSHD, and 2.7% average for kernel compile. Overall, our results and experience\r\nshow that the nested kernel design can be retrofitted to existing monolithic\r\nkernels, providing important security benefits.\r\n\r\n### Links\r\nOur full ASPLOS '15 paper can be found on\r\n[here](http://nathandautenhahn.com/downloads/publications/asplos200-dautenhahn.pdf).\r\n\r\nA link to the presentation given at ASPLOS '15:\r\nhttp://prezi.com/in6qr3l92ffc/?utm_campaign=share&utm_medium=copy\r\n\r\n### Build Instructions\r\n\r\n!!!!!! These Are Under Construction and Require Testing !!!!!!\r\n\r\nOur current nested kernel implementation for x86-64 FreeBSD is called\r\nPerspicuOS.\r\n\r\n1. Install FreeBSD 9.0:\r\n http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/amd64/ISO-IMAGES/9.0/\r\n1. In FreeBSD 9.0 System, clone the repo\r\n $ clone git@github.com:nestedkernel/nestedkernel.git nestedkernel\r\n2. Build the nested kernel\r\n $ cd nestedkernel\r\n $ make\r\n3. Configure FreeBSD /etc/src.conf\r\n \\# This setting to build world without -Werror:\r\n NO_WERROR=\r\n \\# This setting to build kernel without -Werror:\r\n WERROR=\r\n \\# Set the library path to the nested kernel lib\r\n CFLAGS+=-I/PATH/TO/NESTEDKERNEL/include\r\n4. Make PerspicuOS: Use FreeBSD building instructions\r\n selecting the NK kernel configuration\r\n5. Install and Boot (you can use either the base harddrive or\r\n a VM tool Like Qemu, VirtualBox, or VMWare)\r\n\r\n### Comment on Code\r\n","google":"","note":"Don't delete this file! It's used internally to help with page regeneration."}
1+
{"name":"Nested Kernel Operating System Architecture","tagline":"Enabling Privilege Separation in Commodity Operating Systems","body":"### Welcome to the Nested Kernel.\r\nMonolithic operating system designs undermine the security of computing systems\r\nby allowing single exploits anywhere in the kernel to enjoy full supervisor\r\nprivileges. The nested kernel operating system architecture addresses this\r\nproblem by “nesting” a small, isolated kernel within a traditional monolithic\r\nkernel. The “nested kernel” interposes on all updates to virtual memory\r\ntranslations to assert protections on physical memory, thus significantly\r\nreducing the trusted computing base for memory access control enforcement.\r\n\r\nWe incorporated the nested kernel architecture into FreeBSD on x86-64 hardware\r\nby write-protecting MMU translations and de- privileging the untrusted part of\r\nthe kernel, thereby enabling the entire operating system, trusted and untrusted\r\ncomponents alike, to operate at the highest hardware privilege level. Our\r\nimplementation inherently enforces kernel code integrity while still allowing\r\ndynamically loaded kernel modules, thus defending against code injection\r\nattacks.\r\n\r\nWe also demonstrate, by introducing write-mediation and write-logging services,\r\nthat the nested kernel architecture allows kernel developers to isolate memory\r\nin ways not possible in monolithic kernels. Performance of the nested kernel\r\nprototype shows modest overheads: < 1% average for Apache, <3.7% average for\r\nSSHD, and 2.7% average for kernel compile. Overall, our results and experience\r\nshow that the nested kernel design can be retrofitted to existing monolithic\r\nkernels, providing important security benefits.\r\n\r\n### Links\r\nOur full ASPLOS '15 paper can be found on\r\n[here](http://nathandautenhahn.com/downloads/publications/asplos200-dautenhahn.pdf).\r\n\r\nA link to the presentation given at ASPLOS '15:\r\nhttp://prezi.com/in6qr3l92ffc/?utm_campaign=share&utm_medium=copy\r\n\r\n### Build Instructions\r\n\r\n!!!!!! These Are Under Construction and Require Testing !!!!!!\r\n\r\nOur current nested kernel implementation for x86-64 FreeBSD is called\r\nPerspicuOS.\r\n\r\n1. Install FreeBSD 9.0:\r\n http://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/amd64/ISO-IMAGES/9.0/\r\n1. In FreeBSD 9.0 System, clone the repo\r\n $ clone git@github.com:nestedkernel/nestedkernel.git nestedkernel\r\n2. Build the nested kernel\r\n $ cd nestedkernel\r\n $ make\r\n3. Configure FreeBSD /etc/src.conf\r\n \\# This setting to build world without -Werror:\r\n NO_WERROR=\r\n \\# This setting to build kernel without -Werror:\r\n WERROR=\r\n \\# Set the library path to the nested kernel lib\r\n CFLAGS+=-I/PATH/TO/NESTEDKERNEL/include\r\n4. Make PerspicuOS: Use FreeBSD building instructions\r\n selecting the NK kernel configuration\r\n5. Install and Boot (you can use either the base harddrive or\r\n a VM tool Like Qemu, VirtualBox, or VMWare)\r\n\r\n### Comment on Code\r\n","google":"UA-61522619-1","note":"Don't delete this file! It's used internally to help with page regeneration."}

‎stylesheets/pygment_trac.css‎

Lines changed: 59 additions & 58 deletions
Original file line numberDiff line numberDiff line change
@@ -1,64 +1,65 @@
1-
.highlight { background: #ffffff; }
2-
.highlight .c { color: #999988; font-style: italic } /* Comment */
3-
.highlight .err { color: #a61717; background-color: #e3d2d2 } /* Error */
4-
.highlight .k { font-weight: bold } /* Keyword */
5-
.highlight .o { font-weight: bold } /* Operator */
6-
.highlight .cm { color: #999988; font-style: italic } /* Comment.Multiline */
7-
.highlight .cp { color: #999999; font-weight: bold } /* Comment.Preproc */
8-
.highlight .c1 { color: #999988; font-style: italic } /* Comment.Single */
9-
.highlight .cs { color: #999999; font-weight: bold; font-style: italic } /* Comment.Special */
10-
.highlight .gd { color: #000000; background-color: #ffdddd } /* Generic.Deleted */
11-
.highlight .gd .x { color: #000000; background-color: #ffaaaa } /* Generic.Deleted.Specific */
1+
.highlight .hll { background-color: #ffffcc }
2+
.highlight { background: #f0f3f3; }
3+
.highlight .c { color: #0099FF; font-style: italic } /* Comment */
4+
.highlight .err { color: #AA0000; background-color: #FFAAAA } /* Error */
5+
.highlight .k { color: #006699; font-weight: bold } /* Keyword */
6+
.highlight .o { color: #555555 } /* Operator */
7+
.highlight .cm { color: #0099FF; font-style: italic } /* Comment.Multiline */
8+
.highlight .cp { color: #009999 } /* Comment.Preproc */
9+
.highlight .c1 { color: #0099FF; font-style: italic } /* Comment.Single */
10+
.highlight .cs { color: #0099FF; font-weight: bold; font-style: italic } /* Comment.Special */
11+
.highlight .gd { background-color: #FFCCCC; border: 1px solid #CC0000 } /* Generic.Deleted */
1212
.highlight .ge { font-style: italic } /* Generic.Emph */
13-
.highlight .gr { color: #aa0000 } /* Generic.Error */
14-
.highlight .gh { color: #999999 } /* Generic.Heading */
15-
.highlight .gi { color: #000000; background-color: #ddffdd } /* Generic.Inserted */
16-
.highlight .gi .x { color: #000000; background-color: #aaffaa } /* Generic.Inserted.Specific */
17-
.highlight .go { color: #888888 } /* Generic.Output */
18-
.highlight .gp { color: #555555 } /* Generic.Prompt */
13+
.highlight .gr { color: #FF0000 } /* Generic.Error */
14+
.highlight .gh { color: #003300; font-weight: bold } /* Generic.Heading */
15+
.highlight .gi { background-color: #CCFFCC; border: 1px solid #00CC00 } /* Generic.Inserted */
16+
.highlight .go { color: #AAAAAA } /* Generic.Output */
17+
.highlight .gp { color: #000099; font-weight: bold } /* Generic.Prompt */
1918
.highlight .gs { font-weight: bold } /* Generic.Strong */
20-
.highlight .gu { color: #800080; font-weight: bold; } /* Generic.Subheading */
21-
.highlight .gt { color: #aa0000 } /* Generic.Traceback */
22-
.highlight .kc { font-weight: bold } /* Keyword.Constant */
23-
.highlight .kd { font-weight: bold } /* Keyword.Declaration */
24-
.highlight .kn { font-weight: bold } /* Keyword.Namespace */
25-
.highlight .kp { font-weight: bold } /* Keyword.Pseudo */
26-
.highlight .kr { font-weight: bold } /* Keyword.Reserved */
27-
.highlight .kt { color: #445588; font-weight: bold } /* Keyword.Type */
28-
.highlight .m { color: #009999 } /* Literal.Number */
29-
.highlight .s { color: #d14 } /* Literal.String */
30-
.highlight .na { color: #008080 } /* Name.Attribute */
31-
.highlight .nb { color: #0086B3 } /* Name.Builtin */
32-
.highlight .nc { color: #445588; font-weight: bold } /* Name.Class */
33-
.highlight .no { color: #008080 } /* Name.Constant */
34-
.highlight .ni { color: #800080 } /* Name.Entity */
35-
.highlight .ne { color: #990000; font-weight: bold } /* Name.Exception */
36-
.highlight .nf { color: #990000; font-weight: bold } /* Name.Function */
37-
.highlight .nn { color: #555555 } /* Name.Namespace */
38-
.highlight .nt { color: #000080 } /* Name.Tag */
39-
.highlight .nv { color: #008080 } /* Name.Variable */
40-
.highlight .ow { font-weight: bold } /* Operator.Word */
19+
.highlight .gu { color: #003300; font-weight: bold } /* Generic.Subheading */
20+
.highlight .gt { color: #99CC66 } /* Generic.Traceback */
21+
.highlight .kc { color: #006699; font-weight: bold } /* Keyword.Constant */
22+
.highlight .kd { color: #006699; font-weight: bold } /* Keyword.Declaration */
23+
.highlight .kn { color: #006699; font-weight: bold } /* Keyword.Namespace */
24+
.highlight .kp { color: #006699 } /* Keyword.Pseudo */
25+
.highlight .kr { color: #006699; font-weight: bold } /* Keyword.Reserved */
26+
.highlight .kt { color: #007788; font-weight: bold } /* Keyword.Type */
27+
.highlight .m { color: #FF6600 } /* Literal.Number */
28+
.highlight .s { color: #CC3300 } /* Literal.String */
29+
.highlight .na { color: #330099 } /* Name.Attribute */
30+
.highlight .nb { color: #336666 } /* Name.Builtin */
31+
.highlight .nc { color: #00AA88; font-weight: bold } /* Name.Class */
32+
.highlight .no { color: #336600 } /* Name.Constant */
33+
.highlight .nd { color: #9999FF } /* Name.Decorator */
34+
.highlight .ni { color: #999999; font-weight: bold } /* Name.Entity */
35+
.highlight .ne { color: #CC0000; font-weight: bold } /* Name.Exception */
36+
.highlight .nf { color: #CC00FF } /* Name.Function */
37+
.highlight .nl { color: #9999FF } /* Name.Label */
38+
.highlight .nn { color: #00CCFF; font-weight: bold } /* Name.Namespace */
39+
.highlight .nt { color: #330099; font-weight: bold } /* Name.Tag */
40+
.highlight .nv { color: #003333 } /* Name.Variable */
41+
.highlight .ow { color: #000000; font-weight: bold } /* Operator.Word */
4142
.highlight .w { color: #bbbbbb } /* Text.Whitespace */
42-
.highlight .mf { color: #009999 } /* Literal.Number.Float */
43-
.highlight .mh { color: #009999 } /* Literal.Number.Hex */
44-
.highlight .mi { color: #009999 } /* Literal.Number.Integer */
45-
.highlight .mo { color: #009999 } /* Literal.Number.Oct */
46-
.highlight .sb { color: #d14 } /* Literal.String.Backtick */
47-
.highlight .sc { color: #d14 } /* Literal.String.Char */
48-
.highlight .sd { color: #d14 } /* Literal.String.Doc */
49-
.highlight .s2 { color: #d14 } /* Literal.String.Double */
50-
.highlight .se { color: #d14 } /* Literal.String.Escape */
51-
.highlight .sh { color: #d14 } /* Literal.String.Heredoc */
52-
.highlight .si { color: #d14 } /* Literal.String.Interpol */
53-
.highlight .sx { color: #d14 } /* Literal.String.Other */
54-
.highlight .sr { color: #009926 } /* Literal.String.Regex */
55-
.highlight .s1 { color: #d14 } /* Literal.String.Single */
56-
.highlight .ss { color: #990073 } /* Literal.String.Symbol */
57-
.highlight .bp { color: #999999 } /* Name.Builtin.Pseudo */
58-
.highlight .vc { color: #008080 } /* Name.Variable.Class */
59-
.highlight .vg { color: #008080 } /* Name.Variable.Global */
60-
.highlight .vi { color: #008080 } /* Name.Variable.Instance */
61-
.highlight .il { color: #009999 } /* Literal.Number.Integer.Long */
43+
.highlight .mf { color: #FF6600 } /* Literal.Number.Float */
44+
.highlight .mh { color: #FF6600 } /* Literal.Number.Hex */
45+
.highlight .mi { color: #FF6600 } /* Literal.Number.Integer */
46+
.highlight .mo { color: #FF6600 } /* Literal.Number.Oct */
47+
.highlight .sb { color: #CC3300 } /* Literal.String.Backtick */
48+
.highlight .sc { color: #CC3300 } /* Literal.String.Char */
49+
.highlight .sd { color: #CC3300; font-style: italic } /* Literal.String.Doc */
50+
.highlight .s2 { color: #CC3300 } /* Literal.String.Double */
51+
.highlight .se { color: #CC3300; font-weight: bold } /* Literal.String.Escape */
52+
.highlight .sh { color: #CC3300 } /* Literal.String.Heredoc */
53+
.highlight .si { color: #AA0000 } /* Literal.String.Interpol */
54+
.highlight .sx { color: #CC3300 } /* Literal.String.Other */
55+
.highlight .sr { color: #33AAAA } /* Literal.String.Regex */
56+
.highlight .s1 { color: #CC3300 } /* Literal.String.Single */
57+
.highlight .ss { color: #FFCC33 } /* Literal.String.Symbol */
58+
.highlight .bp { color: #336666 } /* Name.Builtin.Pseudo */
59+
.highlight .vc { color: #003333 } /* Name.Variable.Class */
60+
.highlight .vg { color: #003333 } /* Name.Variable.Global */
61+
.highlight .vi { color: #003333 } /* Name.Variable.Instance */
62+
.highlight .il { color: #FF6600 } /* Literal.Number.Integer.Long */
6263

6364
.type-csharp .highlight .k { color: #0000FF }
6465
.type-csharp .highlight .kt { color: #0000FF }

0 commit comments

Comments
 (0)