From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Google-Smtp-Source: ACJfBosZwZljzeG3ztuSdIuKr3R5uq5n9fA8xA33jXfad7kzWX6PzYhueeyQ62kR8rEMymlzqBUC ARC-Seal: i=1; a=rsa-sha256; t=1515052995; cv=none; d=google.com; s=arc-20160816; b=vUge1HeWKrR4xNnhcwyZ/4M40pv2MyX+/ZC2kIM4NnWb9UKyr96NTZjIzZLAhohlOZ NgU6gNwmt+0LF+eYXBaiAKQpqchaarhHmkDhw9N9S4S+CdVEQRNzjqoYRTeg6zxqARuB FNjXAbo4DsSqrbAMq4pd5yafehOXkQzzdZA+kXZlj3CsJrq3VJERUPdWykI5mQVLKga0 ujHnKgaITZXbSX9I7g8r0sulNVuxM7QXIcX1laaQbM4pPOGxXNTCVX8GYfHeXEMEoS+f QRf7iGqI2sDvrABn+M1yi/UxfrX0cdWk/cY0lUjGotk25bK1PLu2a2dCqfXHEI8vMfkQ z6dg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=cc:subject:to:reply-to:in-reply-to:message-id:from:date :arc-authentication-results; bh=huFwTSoKEZnUpDtr/d2ZnhgmXORFtXhmrgVTtNV4YSw=; b=JQsjxn1cswRmeiFprA8xC7nw0d1H/ahoRzIOtwQL0ObcMS1Njc2ei8nprzFPBcvtA+ sDncmKPKhZWooACpXxergWKQ4BcCQ5FrP2bF7v5MvhdPKYA0NQ27gQ/nX0ok5gtsrFis LHR+UnBzwsOLzvOk0qoMY2/Vr+l6CoAKRG7KPCsqTvWNZWZ7aZPsEQJo7qQzrinqXYmO 87mYyIkfCU2BaA4PY9eQZmMYeiMqXmMrGHZt34wwg7mj1CoYO/5fpJkbr+rlLTH5IUDA +5oswBOhaucsFEnrOzOEhIFeGN/f0SE61UQsBaf0/Yyd9VHdXySu+tz+qQf1aVw3hlS5 cWLw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of greg@wind.enjellic.com designates 76.10.64.91 as permitted sender) smtp.mailfrom=greg@wind.enjellic.com Authentication-Results: mx.google.com; spf=pass (google.com: domain of greg@wind.enjellic.com designates 76.10.64.91 as permitted sender) smtp.mailfrom=greg@wind.enjellic.com Date: Thu, 4 Jan 2018 02:02:08 -0600 From: "Dr. Greg Wettstein" Message-Id: <201801040802.w04828Uj024983@wind.enjellic.com> In-Reply-To: Christian Stroetmann "Re: [PATCH v6 00/11] Intel SGX Driver" (Jan 3, 3:00am) Reply-To: greg@enjellic.com X-Mailer: Mail User's Shell (7.2.6-ESD1.0 03/31/2012) To: Christian Stroetmann Subject: Re: [PATCH v6 00/11] Intel SGX Driver Cc: Pavel Machek , Jarkko Sakkinen , platform-driver-x86@vger.kernel.org, x86@kernel.org, linux-kernel@vger.kernel.org, Borislav Petkov , "David S. Miller" , Greg Kroah-Hartman , Grzegorz Andrejczuk , Haim Cohen , Ingo Molnar , Janakarajan Natarajan , Jim Mattson , Kan Liang , "Kirill A. Shutemov" , Kyle Huey , Len Brown , open list:DOCUMENTATION , "open list:FILESYSTEMS (VFS and infrastructure)" , Mauro Carvalho Chehab , Paolo Bonzini , Piotr Luc , Radim Kr??m???? , Randy Dunlap , Sean Christopherson , Thomas Gleixner , Tom Lendacky , Vikas Shivappa X-getmail-retrieved-from-mailbox: INBOX X-GMAIL-THRID: =?utf-8?q?1587696854965003493?= X-GMAIL-MSGID: =?utf-8?q?1588648209932624687?= X-Mailing-List: linux-kernel@vger.kernel.org List-ID: On Jan 3, 3:00am, Christian Stroetmann wrote: } Subject: Re: [PATCH v6 00/11] Intel SGX Driver Good morning, I hope the day is going well for you. > > Philosophically we take the approach that for high security > > assurance environments that it is virtually impossible to allow > > any untrusted code to run on a platform. Which is why we focus on > > autonomous introspection for these environments. > Interesting. I would like to hear more about this autonomous > introspection concept, specifically what it monitors and how it > reacts on an issue. AI as we call it.. :-), at a high level, is the notion that an operating system platform can be modeled for its intended behavior, just as is done for buildings, bridges and airplanes. The model is based on a precise mathematical description of the set of desired information exchange events that the operating system will be allowed to mediate. Autonomous introspection is the notion of the platform using this model to monitor and self-regulate its behavior. > Maybe you have a summary or short introduction of the concept or/and > a link to a document. The initial concept and implementation were described by the following Linux Security Summit paper: http://kernsec.org/files/lss2015/idfusion-iso-identity-paper.pdf The work has matured a great deal since then. Most notably the modeling and control engine have been lifted out of the kernel into an SGX enclave. In this architecture the kernel cannot act without permission from the enclave based engine, which requires the integrity of the enclave to be violated in order to compromise the kernel. A virtuous circle. > Regards > Christian Stroetmann We can engage further in private e-mail as this may or may not be of general interest. Thanks for the interest. Have a good day. Greg }-- End of excerpt from Christian Stroetmann As always, Dr. G.W. Wettstein, Ph.D. Enjellic Systems Development, LLC. 4206 N. 19th Ave. Specializing in information infra-structure Fargo, ND 58102 development. PH: 701-281-1686 FAX: 701-281-3949 EMAIL: greg@enjellic.com ------------------------------------------------------------------------------ "Four year projections, are you kidding me. We don't know what we are supposed to be doing at the 4 o'clock meeting this afternoon." -- Terry Wieland Resurrection