http://sourceforge.net/mailarchive/forum.php?thread_id=6364737&forum_id=35600

[Luke Kenneth Casson Leighton <lkcl@xxxxxxxx>]

of interest to some mad people somewhere: ibm research's "sHype"
hypervisor security architecture.

annoyingly, it is "modelled" on flask [i say annoyingly because
they "modelled" sHype on selinux instead of incorporating
support for selinux into sHype and xen]

over the next year (starting jan 2005) they plan to do the following:

* Port sHype to Xen 

* Add stronger security/isolation guarantees (confinement)
  to what is currently available through Xen"s (and other
  hypervisors") address space separation mechanisms, e.g.,
  to enable information flow control in Xen

*  Enhance Xen to support trusted computing under Linux using
  TCG/TPM-based attestation mechanisms

*  Enhance Xen to support secure resource metering,
  verification, and control.

* Apply our experience in automated security analysis to Xen
  to make it more robust

* Make Xen suitable for Common Criteria evaluation 

-- 
--
<a href="http://lkcl.net";>http://lkcl.net</a>
--

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.