Researchers from industrial automation Yale University have unveiled CertiKOS, the world’s first operating system that runs on multi-core processors and shields against cyber-attacks. Scientists believe this could lead to a new generation of reliable and secure systems software.
Led by Zhong Shao, professor of computer science at Yale, the researchers developed an operating system that incorporates formal verification to ensure that a program performs precisely as its designers intended — a safeguard that could prevent the hacking of anything from home appliances and Internet of Things (IoT) devices to self-driving cars and digital currency. Their paper on CertiKOS was presented at the 12th USENIX Symposium on Operating Systems Design and Implementation held Nov. 2-4 in Savannah, Ga.
Computer scientists have long believed that computers’ operating systems should have at their core a small, trustworthy kernel that facilitates communication between the systems’ software and hardware. But operating systems are complicated, and all it takes is a single weak link in the code — one that is virtually impossible to detect via traditional testing — to leave a system vulnerable to hackers.
One of the main breakthroughs of CertiKOS is that it supports concurrency, meaning that it can simultaneously run multiple threads (small sequences of programmed instructions) on multiple central processing unit (CPU) cores. This sets CertiKOS apart from other previously verified systems and allows CertiKOS to run on modern multi-core machines. The CertiKOS architecture is also designed to be highly extensible — that is, it can take on new functionalities and be used for different application domains.
Concurrency allows overlapped execution of multiple program threads, which makes it impossible to consider all circumstances and eliminate all cracks in the system via traditional testing. Many in the field have long believed that the complexity of such a system also makes formal verification of functional correctness problematic or prohibitively expensive.
“The construction of functionally correct systems software has been one of the grand challenges of computing since at least the mid-20th century,” said Anindya Banerjee, program director at the National Science Foundation (NSF), which funds the CertiKOS effort partly through its Expeditions in Computing program. “CertiKOS demonstrates that it is feasible and practical to build verified software that additionally provides evidence Grid Fault Detection— through machine-checkable mathematical proofs — that it is functionally correct.”
In constructing the CertiKOS system, Shao and his team incorporate formal logic and new, layered deductive verification techniques. That is, they carefully untangle the kernel’s interdependent components, organize the code into a large collection o vending route optimization f hierarchical modules, and write a mathematical specification for each kernel module’s intended behavior. The use of formal deductive verification to certify the system differs from the conventional method of checking a program’s reliability, in which the code writer tests the program against numerous scenarios.
“A program can be written 99% correctly — that’s why today you don’t see obvious issues — but a hacker can still sneak into a particular set-up where the program will not behave as expected,” Shao said. “The person who wrote the software worked with all good intentions, but couldn’t consider all cases.”
The CertiKOS verified operating system kernel is a key component of the Defense Advanced Research Agency’s (DARPA) High Assurance cyber Military Systems (HACMS) program, which is used to build cyber-physical systems that are provably free from cyber vulnerabilities.
“The HACMS team uses the virtualization capability provided by CertiKOS to separate trusted from untrusted components,” DARPA program manager Ray Richards said. “This is an important ability that allows us to effectively build cyber-resilient systems. In the world where cybersecurity is a growing concern, this resiliency is a powerful attribute that we hope will be widely adopted by system designers.”
Only in recent years would a system like CertiKOS be possible, since the proofs for a certified kernel are too big for any human to check. Powerful computer programs known as proof assistants have been developed within the last 10 years, however, that can automatically generate and check large formal proofs.
“This is amazing progress,” said Greg Morrisett, a leading expert on software security and dean of computing and information sciences at Cornell University. “Ten years ago, no one would predict that we could prove the correctness of a single-threaded kernel, much less a multi-core one. Zhong and his team have really blazed a spectacular trail for the rest of us.”
Andrew Appel, director of NSF’s DeepSpec consortium and a professor of computer science at Princeton, called CertiKOS “a real breakthrough,” noting that it can serve as a base for building highly secure systems from combinations of verified and untrustworthy components.
“But just as important, the modular layered verification methods used in CertiKOS will be applicable not just to operating systems, but to many other kinds of software,” Appel said.
Paper: CertiKOS: An Extensible Architecture for Building Certified Concurrent OS Kernels
Tags: cellular modem ethernet, 4g LTE router, 3g wireless router, 4g LTE router with SIM card, cellular router vendor, verizon 4g LTE router, best industrial wifi router, 4g modem router, 4g modem router wifi, att 4g router, cellular router wifi, industrial multi sim cellular router, m2m cellular router, verizon industrial router, 4g lte gateway, 4g lte modem, industrial cellular vpn router, industrial 3g m2m, industrial l2tp cellular router, industrial ethernet router, plc router, 12vdc lte router, 4g lte router dual SIM, multi SIM LTE router, cellular router manufacturer, edge gateway, industrial iot gateway, overhead line sensor, distribution line sensor, distribution line fault detection, medium voltage smart grid sensor, MV smart grid sensor, smart grid sensor, power line sensor, power sensor, MV sensor, Grid Fault Detection, Line Monitoring, Grid Analytics, Predictive Grid Analytics, Grid Monitoring, Grid Analytics System, Power Fault Detection, Advanced Grid Analytics, Intelligent Line Monitoring, distribution fault detection, smart vending machine, smart vending solutions, QR code vending machine, telemetry vending machine, intelligent vending machine, touch screen for vending machine, vending software, cashless vending, coupon vending machine, iot vending machine, vending machine card reader, POS vending machine, smart vending machine software, credit card vending machine, Industrial router, cellular router, 4g router, LTE router, 3g router, M2M router, wireless router, wireless m2m router, wireless m2m, Industrial Wireless M2M, Industrial Wireless M2M Router, Industrial Wireless M2M products, M2M wireless producdts, WiFi M2M Router, Industrial Wireless M2M gateway, industrial IoT router, industrial IoT gateway, industrial LTE router, Industrial router, cellular router, 4g router , LTE router, 3g router , M2M router, wireless router, wireless m2m router, WiFi M2M Router, Industrial Wireless M2M Router, M2M IoT router, industrial wireless router, industrial M2M router, industrial LTE router, Industrial VPN router, Dual SIM M2M router, M2M gateway, IoT gateway, Industrial router, low cost industrial router , low cost cellular router, low-cost LTE router, low-cost M2M router, compact industrial router, low-cost cellular router , cellular router, low-cost 4g router , LTE router, 3g router , M2M router, wireless router, wireless m2m router, WiFi M2M Router, Industrial Wireless M2M Router, M2M IoT router, industrial wireless router, industrial M2M router, industrial LTE router, Industrial VPN router, Dual SIM M2M router, M2M gateway, IoT gateway, LTE Cat 1 router, Embedded LTE Cat 1 router, Industrial LTE Cat 1 router, Verizon Embedded modem, Verizon Embedded router, Overhead Line Monitoring, Distribution Power Line Monitoring, Grid Analytics System, overhead Line sensor, grid fault detection, distribution Line Monitoring, grid fault location, Smart Vending, touchscreen vending, cashless vending, cloud VMS, vending retrofit, smart vending solution, vending vms, cashless payment, vending route optimization, vending inventory management, vending retrofit, vending PC, vending computer, Android vending computer, vending computer, Android vending computer, Android industrial computer, 崀山, 崀山科技, 崀山科技全球服务中心, LangShan Technology Global Service Center, LangShan Technology, LangShan, china webdesign, seo, web design, 企业建站, 外贸商城, 网站推广, 技术兼职, 技术支援, 技术支持, SEO, joomla template, joomla webdesign, joomla web design, joomla seo, wordpress themes, wordpress webdesign, wordpress web design, wordpress seo, magento themes, magento webdesign, magento web design, magento seo, opencart themes, opencart webdesign, opencart web design, opencart seo, prestashop themes, prestashop webdesign, prestashop web design, prestashop seo, 崀山, 崀山科技, 崀山科技全球服务中心, LangShan Technology Global Service Center, LangShan Technology, LangShan, china webdesign, seo, web design, 企业建站, SEO, joomla template, joomla webdesign, joomla web design, joomla seo, wordpress themes, wordpress webdesign, wordpress web design, wordpress seo, magento themes, magento webdesign, magento web design, magento seo, opencart themes, opencart webdesign, opencart web design, opencart seo, prestashop themes, prestashop webdesign, prestashop web design, prestashop seo, wordpress shop, wordpress plugins, wordpress plugins shop, lte, 4g, 4g-lte, 3g, umts, dsl, ethernet, cellular, gprs, wireless, wired, wi fi, vpn, m2m vpn, openvpn, ipsec-vpn, secure, reliable, dual sim, 2 sim, redundant, rugged, din rail, din rail mounting, ul certified, fcc certified, ptcrb certified, verizon wireless certified, att certified, ce certified-, emark certified, azure iot certified, cost effective, ipv6, python programming, reliability, security, high-speed, lte cat 1, router, gateway, routers, cellular gateway, modem, hardware, software, cloud platform, applications, ethernet switch, managed switch, vehicle router, car router, dtu, data terminal unit, computer, vending computer, vending pc, manufacturer, manufacturing, android computer, iot, industrial iot, industrial internet of things, m2m, industrial m2m, m2m communication, remote communication, wireless m2m, remote connectivity, remote access, m2m connectivity, iiot, industrial networking, industrial wireless, m2m iot, smart vending, touchscreen vending, cloud vms, telemeter, vending telemetry, cashless vending, light industrial, commercial, distribution automation, distribution power line monitoring, fault location, fault detection, da monitoring, smart grid, transformer monitoring, intelligent substation, goose messaging, remote machine monitoring, remote secure networks, remote secure networking, secure web based scada , remote diagnostics, remote maintenance, plc programming, intelligent traffic enforcement, ct scanners remote monitoring, mri remote monitoring, healthcare, wireless atm, branch networking, retail, digital signage, wastewater treatment, remote monitoring, industrial automation, automation, industrial transport, inhand, inhand network, inhand networks, Industrial IoT, IIoT, Industrial IoT Manufacturer, Industrial IoT Connectivity, Industrial IoT Products, Industrial IoT Solutions, Industrial IoT Products, industrial IoT Gateway, industrial IoT router, M2M IoT gateway, M2M IoT router, industrial router, Industrial IoT Router/Gateway, industrial IoT Gateway, industrial LTE router, Industrial VPN router, Dual SIM M2M router, Entry level Industrial Router, Cost effective, 3G 4G LTE, WiFi, VPN industrial router for commercial and industrial and M2M/IoT applications, Industrial 3G Router, Industrial 3g router, UMTS router, VPN routerIndustrial 3g router, UMTS router, VPN router, DIN-Rail router, cellular router, Industrial IoT Gateway, Industrial IoT Gateway, M2M gateway, VPN gateway, remote PLC programming, Industrial Cellular Modem, Cellular modem, data terminal unit, 3g modem, Industrial 3G Cellular Modem, 3g modem, industrial cellular modem3g modem, industrial cellular modem, industrial wireless modem, data terminal unit, Android Industrial Computer, Android Industrial Computer, Vending PC, Vending Telemetry, Vending Telemeter, Android Industrial Computer, Android Industrial Computer, Vending PC, Vending Telemetry, Vending Telemeter, Touchscreen & Vending PC, Vending Touchscreen, Vending Telemeter, Vending Telemetry, Vending Computer, Industrial LTE Router, industrial IoT Gateway, industrial LTE router, Industrial VPN router, Dual SIM M2M router, Industrial IoT Router/Gateway, industrial IoT Gateway, industrial LTE router, Industrial VPN router, Dual SIM M2M router, Industrial LTE Router, Industrial LTE router, industrial 4G/3G router, router industrial, cost-effective industrial LTE router, Industrial LTE Router, Industrial LTE router, industrial IoT router, router industrial, cost-effective M2M router, M2M LTE router, Industrial 3G Router , Industrial 3g router, industrial wireless router, VPN router, DIN-Rail router, cellular router, Industrial 3G Router , Industrial 3g router, industrial wireless router, VPN router, DIN-Rail router, cellular router, Distribution Power Line Monitoring System, Overhead Line Monitoring, Distribution Power Line Monitoring, Fault detection & location, Grid Analytics System, Remote Machine Monitoring & Maintenance System, IoT Remote Monitoring, Prognostics and Health Management, Remote connectivity, Remote Maintenance, Smart Vending, smart vending, InHandGo, retrofit, touchscreen vending, cashless vending, cloud VMS, Transformer Monitoring, Transformer Monitoring, substation monitoring, grid LTE router, wireless communication, smart grid, Remote Automation, Remote Automation, Secure remote networks, web SCADA, Remote Diagnostics, Remote PLC programming, Intelligent Traffic Enforcement, Intelligent Traffic Enforcement, wireless networking, cellular router, Wireless ATM Solution, Wireless ATM, ATM Remote Diagnostic, prestashop 多语商城, opencart 外贸商城, 网页设计, 网站建设, 企业建站, 商城网站, 集团网站, 海外网站, 营销网站, 网站推广, 华人网站建设, 华人网站维护, 华人网络兼职, china webdesign, webdesign, seo, joomla web design, 香港網頁設計, 網站建設, 企業建站, 商城網站, 集團網站, 海外網站, 營銷網站, 網站推廣, web design, joomla webdesign, wordpress webdesign, opencart webdesign, magento webdesign, durpal webdesign, vtiger crm, adempiere erp, compiere erp, hosting, domains, vps, email marketing, joomla 网页设计, wordpress 建站, magento 大型外贸商城, durpal 门户网站, seo 网站推广, 网站自然排名, joomla 網站製作, wordpress 定制開發, opencart 維護修改, prestashop 模板修改, magento 培訓實施, durpal 定制修改, seo 營銷推廣, 外鏈收錄排位, joomla, wordpress, opencart, prestashop, magento, durpal, zencart, crm, erp, edm, marketing, joomla template, wordpress themes, magento themes, opencart themes, prestashop themes, 崀山, 崀山科技, 崀山科技全球服务中心, LangShan Technology Global Service Center, LangShan Technology, langshantech, LangShan, china webdesign, 網頁製作, 網頁設計, 企业建站, 企業建站, 在線商城, 營銷網站, 網站推廣, 網站營銷, 排名推廣, 產品推廣, 主機維護, 公司兼職, 網站SEO, joomla seo, wordpress seo, joomla 網站推廣, opencart 網站推廣, prestashop 網站推廣, wordpress 網站推廣, magento 網站推廣, joomla 網站排名, prestashop 網站排名, wordpress 網站排名, opencart 網站排名, prestashop 多语商城, opencart 外贸商城, 网页设计, 网站建设, 企业建站, 商城网站, 集团网站, 海外网站, 营销网站, 网站推广, 华人网站建设, 华人网站维护, 华人网络兼职, china webdesign, webdesign, seo, joomla web design, 香港網頁設計, 網站建設, 企業建站, 商城網站, 集團網站, 海外網站, 營銷網站, 網站推廣, web design, joomla webdesign, wordpress webdesign, opencart webdesign, magento webdesign, durpal webdesign, vtiger crm, adempiere erp, compiere erp, hosting, domains, vps, email marketing, joomla 网页设计, wordpress 建站, magento 大型外贸商城, durpal 门户网站, seo 网站推广, 网站自然排名, joomla 網站製作, wordpress 定制開發, opencart 維護修改, prestashop 模板修改, magento 培訓實施, durpal 定制修改, seo 營銷推廣, 外鏈收錄排位, joomla, wordpress, opencart, prestashop, magento, durpal, zencart, crm, erp, edm, marketing, joomla template, wordpress themes, magento themes, opencart themes, prestashop themes, 崀山, 崀山科技, 崀山科技全球服务中心, LangShan Technology Global Service Center, LangShan Technology, oowebdesign, LangShan, china webdesign, 網頁製作, 網頁設計, 企业建站, 企業建站, 在線商城, 營銷網站, 網站推廣, 網站營銷, 排名推廣, 產品推廣, 主機維護, 公司兼職, 網站SEO, joomla seo, wordpress seo, joomla 網站推廣, opencart 網站推廣, prestashop 網站推廣, wordpress 網站推廣, magento 網站推廣, joomla 網站排名, prestashop 網站排名, wordpress 網站排名, opencart 網站排名, inhandnetworks, InHand Networks Global Leader in Industrial IoT, Global Leader in Industrial IoT, android-computer, iot, industrial iot, industrial internet of things, m2m, industrial m2m, m2m communication, remote communication, wireless m2m, remote connectivity, remote access, m2m connectivity, iiot, industrial networking, industrial wireless, m2m iot, smart vending, touchscreen vending, cloud-vms, telemeter, vending telemetry, cashless vending, light industrial, commercial, distribution automation, distribution power line monitoring, fault location, fault detection, da monitoring, smart grid, transformer monitoring, intelligent substation, goose-messaging-, remotemachine monitoring, remote secure networks, remote secure networking, secure web based scada, remote diagnostics, remote maintenance, plc-programming, intelligent traffic enforcement, ct scanners remote monitoring, mri remote monitoring, healthcare, wireless atm, branch networking, retail, digital signage, wastewater treatment, remote monitoring, industrial automation, automation, industrial transport, inhand, inhand network, inhand networks, InHand Networks - Global Leader in Industrial IoT, Global Leader in Industrial IoT Industrial IoT, IIoT, Industrial IoT Manufacturer, Industrial IoT Connectivity, Industrial IoT Products, Industrial IoT Solutions, Industrial IoT Products, industrial IoT Gateway, industrial IoT router, M2M IoT gateway, M2M IoT router, industrial router, Industrial IoT Router/Gateway, industrial IoT Gateway, industrial LTE router, Industrial VPN router, Dual SIM M2M router, Entry level Industrial Router, Cost effective, 3G 4G LTE, WiFi, VPN industrial router for commercial and industrial and M2M/IoT applications, Industrial 3G Router, Industrial 3g router, UMTS router, VPN routerIndustrial 3g router, UMTS router, VPN router, DIN-Rail router, cellular router, Industrial IoT Gateway, Industrial IoT Gateway, M2M gateway, VPN gateway, remote PLC programming, Industrial Cellular Modem, Cellular modem, data terminal unit, 3g modem, Industrial 3G Cellular Modem, 3g modem, industrial cellular modem3g modem, industrial cellular modem, industrial wireless modem, data terminal unit, Android Industrial Computer, Android Industrial Computer, Vending PC, Vending Telemetry, Vending Telemeter, Android Industrial Computer, Android Industrial Computer, Vending PC, Vending Telemetry, Vending Telemeter, Touchscreen & Vending PC, Vending Touchscreen, Vending Telemeter, Vending Telemetry, Vending Computer, Industrial LTE Router, industrial IoT Gateway, industrial LTE router, Industrial VPN router, Dual SIM M2M router, Industrial IoT Router/Gateway, industrial IoT Gateway, industrial LTE router, Industrial VPN router, Dual SIM M2M router, Industrial LTE Router, Industrial LTE router, industrial 4G/3G router, router industrial, cost-effective industrial LTE router, Industrial LTE Router, Industrial LTE router, industrial IoT router, router industrial, cost-effective M2M router, M2M LTE router, Industrial 3G Router , Industrial 3g router, industrial wireless router, VPN router, DIN-Rail router, cellular router, Industrial 3G Router , Industrial 3g router, industrial wireless router, VPN router, DIN-Rail router, cellular router, Distribution Power Line Monitoring System, Overhead Line Monitoring, Distribution Power Line Monitoring, Fault detection & location, Grid Analytics System, Remote Machine Monitoring & Maintenance System, IoT Remote Monitoring, Prognostics and Health Management, Remote connectivity, Remote Maintenance, Smart Vending, smart vending, InHandGo, retrofit, touchscreen vending, cashless vending, cloud VMS, Transformer Monitoring, Transformer Monitoring, substation monitoring, grid LTE router, wireless communication, smart grid, Remote Automation, Remote Automation, Secure remote networks, web SCADA, Remote Diagnostics, Remote PLC programming, Intelligent Traffic Enforcement, Intelligent Traffic Enforcement, wireless networking, cellular router, Wireless ATM Solution, Wireless ATM, ATM Remote Diagnostic, prestashop 多语商城, opencart 外贸商城, 网页设计, 网站建设, 企业建站, 商城网站, 集团网站, 海外网站, 营销网站, 网站推广, 华人网站建设, 华人网站维护, 华人网络兼职, china webdesign, webdesign, seo, joomla web design, 香港網頁設計, 網站建設, 企業建站, 商城網站, 集團網站, 海外網站, 營銷網站, 網站推廣, web design, joomla webdesign, wordpress webdesign, opencart webdesign, magento webdesign, durpal webdesign, vtiger crm, adempiere erp, compiere erp, hosting, domains, vps, email marketing, joomla 网页设计, wordpress 建站, magento 大型外贸商城, durpal 门户网站, seo 网站推广, 网站自然排名, joomla 網站製作, wordpress 定制開發, opencart 維護修改, prestashop 模板修改, magento 培訓實施, durpal 定制修改, seo 營銷推廣, 外鏈收錄排位, joomla, wordpress, opencart, prestashop, magento, durpal, zencart, crm, erp, edm, marketing, joomla template, wordpress themes, magento themes, opencart themes, prestashop themes, 崀山, 崀山科技, 崀山科技全球服务中心, LangShan Technology Global Service Center, LangShan Technology, langshantech, LangShan, china webdesign, 網頁製作, 網頁設計, 企业建站, 企業建站, 在線商城, 營銷網站, 網站推廣, 網站營銷, 排名推廣, 產品推廣, 主機維護, 公司兼職, 網站SEO, joomla seo, wordpress seo, joomla 網站推廣, opencart 網站推廣, prestashop 網站推廣, wordpress 網站推廣, magento 網站推廣, joomla 網站排名, prestashop 網站排名, wordpress 網站排名, opencart 網站排名, prestashop 多语商城, opencart 外贸商城, 网页设计, 网站建设, 企业建站, 商城网站, 集团网站, 海外网站, 营销网站, 网站推广, 华人网站建设, 华人网站维护, 华人网络兼职, china webdesign, webdesign, seo, joomla web design, 香港網頁設計, 網站建設, 企業建站, 商城網站, 集團網站, 海外網站, 營銷網站, 網站推廣, web design, joomla webdesign, wordpress webdesign, opencart webdesign, magento webdesign, durpal webdesign, vtiger crm, adempiere erp, compiere erp, hosting, domains, vps, email marketing, joomla 网页设计, wordpress 建站, magento 大型外贸商城, durpal 门户网站, seo 网站推广, 网站自然排名, joomla 網站製作, wordpress 定制開發, opencart 維護修改, prestashop 模板修改, magento 培訓實施, durpal 定制修改, seo 營銷推廣, 外鏈收錄排位, joomla, wordpress, opencart, prestashop, magento, durpal, zencart, crm, erp, edm, marketing, joomla template, wordpress themes, magento themes, opencart themes, prestashop themes, 崀山, 崀山科技, 崀山科技全球服务中心, LangShan Technology Global Service Center, LangShan Technology, oowebdesign, LangShan, china webdesign, 網頁製作, 網頁設計, 企业建站, 企業建站, 在線商城, 營銷網站, 網站推廣, 網站營銷, 排名推廣, 產品推廣, 主機維護, 公司兼職, 網站SEO, joomla seo, wordpress seo, joomla 網站推廣, opencart 網站推廣, prestashop 網站推廣, wordpress 網站推廣, magento 網站推廣, joomla 網站排名, prestashop 網站排名, wordpress 網站排名, opencart 網站排名, inhandnetworks, InHand Networks Global Leader in Industrial IoT, Global Leader in Industrial IoT, android-computer, iot, industrial iot, industrial internet of things, m2m, industrial m2m, m2m communication, remote communication, wireless m2m, remote connectivity, remote access, m2m connectivity, iiot, industrial networking, industrial wireless, m2m iot, smart vending, touchscreen vending, cloud-vms, telemeter, vending telemetry, cashless vending, light industrial, commercial, distribution automation, distribution power line monitoring, fault location, fault detection, da monitoring, smart grid, transformer monitoring, intelligent substation, goose-messaging-, remotemachine monitoring, remote secure networks, remote secure networking, secure web based scada, remote diagnostics, remote maintenance, plc-programming, intelligent traffic enforcement, ct scanners remote monitoring, mri remote monitoring, healthcare, wireless atm, branch networking, retail, digital signage, wastewater treatment, remote monitoring, industrial automation, automation, industrial transport, inhand, inhand network, inhand networks, InHand Networks - Global Leader in Industrial IoT, Global Leader in Industrial IoT