The jury is in: monolithic OS design is flawed

The security benefits of keeping a system’s trusted computing base (TCB)small has long been accepted as a truism, as has the use of internal protection boundaries for limiting the damage caused by exploits. Applied to the operating system, this argues for a small microkernel as the core of the TCB, with OS services separated into mutually-protected components (servers) – in contrast to “monolithic” designs such as Linux, Windows or MacOS. While intuitive, the benefits of the small TCB have not been quantified to date. We address this by a study of critical Linux CVEs, where we examine whether they would be prevented or mitigated by a microkernel-based design. We find that almost all exploits are at least mitigated to less than critical severity, and 40% completely eliminated by an OS design based on a verified microkernel, such as seL4.

86 Comments

  1. 2018-08-16 9:06 pm
    • 2018-08-16 10:11 pm
    • 2018-08-16 10:32 pm
      • 2018-08-17 4:15 am
        • 2018-08-17 9:20 am
          • 2018-08-17 1:37 pm
          • 2018-08-18 7:42 pm
          • 2018-08-19 9:40 am
        • 2018-08-17 2:12 pm
      • 2018-08-17 12:29 pm
        • 2018-08-17 5:32 pm
    • 2018-08-17 9:30 pm
    • 2018-08-18 1:35 pm
      • 2018-08-19 1:23 am
        • 2018-08-19 2:32 am
          • 2018-08-19 9:06 am
          • 2018-08-19 2:41 pm
          • 2018-08-21 1:49 am
        • 2018-08-19 9:05 am
  2. 2018-08-16 9:09 pm
    • 2018-08-16 9:15 pm
      • 2018-08-16 9:36 pm
        • 2018-08-17 4:17 am
          • 2018-08-17 6:45 am
          • 2018-08-17 12:21 pm
          • 2018-08-19 9:42 pm
          • 2018-08-17 7:55 am
          • 2018-08-17 4:29 pm
          • 2018-08-20 6:28 am
      • 2018-08-17 7:38 am
        • 2018-08-17 7:58 am
        • 2018-08-20 9:09 pm
    • 2018-08-17 12:52 pm
  3. 2018-08-16 10:20 pm
    • 2018-08-17 11:20 am
  4. 2018-08-16 10:25 pm
    • 2018-08-17 6:45 am
    • 2018-08-19 9:39 pm
  5. 2018-08-16 10:33 pm
    • 2018-08-16 10:42 pm
    • 2018-08-17 4:35 am
      • 2018-08-17 6:50 am
        • 2018-08-17 6:53 am
          • 2018-08-17 7:40 am
          • 2018-08-17 7:54 am
          • 2018-08-17 8:08 am
          • 2018-08-17 8:53 am
          • 2018-08-17 8:08 pm
          • 2018-08-18 1:39 am
          • 2018-08-19 1:11 am
          • 2018-08-19 1:00 am
    • 2018-08-17 8:01 am
      • 2018-08-17 8:50 am
      • 2018-08-17 10:19 am
        • 2018-08-17 11:16 am
        • 2018-08-17 1:48 pm
          • 2018-08-17 3:21 pm
          • 2018-08-17 3:37 pm
          • 2018-08-20 9:42 am
          • 2018-08-20 10:29 am
          • 2018-08-20 11:26 am
          • 2018-08-20 11:29 am
  6. 2018-08-17 6:42 am
  7. 2018-08-17 6:48 am
    • 2018-08-17 7:40 am
      • 2018-08-17 9:05 am
    • 2018-08-17 8:41 am
      • 2018-08-17 9:11 am
    • 2018-08-17 4:01 pm
    • 2018-08-19 9:50 pm
      • 2018-08-20 7:23 am
        • 2018-08-20 10:22 am
        • 2018-08-20 4:31 pm
          • 2018-08-20 11:45 pm
          • 2018-08-21 1:44 am
          • 2018-08-21 11:22 pm
          • 2018-08-21 10:03 pm
        • 2018-08-21 11:27 pm
      • 2018-08-20 5:46 pm
        • 2018-08-21 11:20 pm
  8. 2018-08-18 7:18 pm
    • 2018-08-19 1:27 am
    • 2018-08-19 9:44 pm
      • 2018-08-20 10:24 am