Xen in Qubes OS Security Architecture: Difference between revisions
From Xen
Jump to navigationJump to search
Lars.kurth (talk | contribs) (Created page with "[http://qubes-os.org/files/doc/arch-spec-0.3.pdf This document] describes the architecture of [http://qubes-os.org/ Qubes OS] an open source operating system designed to provide …") |
Lars.kurth (talk | contribs) m (moved Xen in Qubes OS to Xen in Qubes OS Security Architecture) |
(No difference)
| |
Revision as of 17:33, 6 September 2012
This document describes the architecture of Qubes OS an open source operating system designed to provide strong security for desktop computing. Qubes is based on Xen, X Window System, and Linux, and can run most Linux applications and utilize most of the Linux drivers. In the future it might also run Windows apps.
Section 3 of this document contains a discussion of the security of the Xen hypervisor as well as KVM. For your convenience, we outlined the content of this section here
3. The hypervisor and the administrative domain
- The role of the hypervisor
- Xen vs. KVM security architecture comparison
- The thin vs. fat hypervisor argument
- The I/O Emulation vs. PV drivers
- Driver domains support
- Summary
- Securing the hypervisor
- Formal security proofs?
- Reducing hypervisor footprint
- Anti-exploitation mechanisms in the hypervisor
- Reducing Inter-VM covert channels
- The administrative domain (Dom0)
- Power management and ACPI support
- ACPI security concerns
- Preventing ACPI abusing attacks
