Virtualization.com

News and insights from the vibrant world of virtualization and cloud computing

Intel virtualization technology

LynuxWorks Debuts LynxSecure 2.0

by Leave a Comment

LynuxWorks today announced the availability of LynxSecure 2.0, a next-generation separation kernel and embedded hypervisor for high assurance systems, on the latest Intel Core 2 Duo processor-based systems.

LynxSecure takes advantage of Intel’s latest hardware-enhanced Intel Virtualization technology (Intel VT) to provide a standards-based, secure software platform for applications with low, medium and high assurance requirements running concurrently on a single system. This meeting of two new technologies generated much interest when previewed with multiple operating systems being run simultaneously on a single Intel chipset with real-time performance and security applications being demonstrated.

LynxSecure was designed from the ground to up to offer a reliable, secure and extendable platform to meet the demanding needs of embedded software developers building complex systems that require application separation. Designers of military, aerospace, medical and financial systems can utilize the safety and security features offered in LynxSecure, and combined with Intel’s latest processors gives very low latency when compared with traditional multi-cpu systems. LynxSecure 2.0 works closely with Intel VT to enable multiple, heterogeneous operating systems (OS) to coexist on the same platform, enabling developers to build a diverse array of applications on a single processor, reducing hardware costs and allowing for easier reuse of legacy software.

The latest generation of Intel Core2 Duo processors offers a number of new features and enhancements that are applicable to embedded developers. Intel’s enhanced virtualization provides hardware-enhanced I/O virtualization and facilitates interactions between the embedded hypervisor and the guest operating systems running on it. There are some new integrated security features which include integrated TPM building blocks and a network outbreak containment block that improve network security with new packet filtering capabilities. Enhancing of both the on-chip power management features and the graphics capabilities offers better performance at lower power, a real benefit for embedded applications.

LynxSecure, with its extremely small code size, maintains hard real-time characteristics and determinism for real-time applications. The software is the first separation kernel & hypervisor to bring multi-core processor support to the high assurance world, providing scalability from deeply embedded applications up to workstations and servers.

LynxSecure is designed to run on any 32-bit or 64-bit processor with a memory management unit (MMU) and provides 100% application binary compatibility between a standalone OS and its virtualized version. Like all LynuxWorks’ products, LynxSecure is based on open standards, but it also offers the highest real-time, safety and security capabilities, conforming to the MILS standard and certifiable to DO-178B level A.

Azure Uses Intel Virtualization Extensions To Counter Malware

by Leave a Comment

—

Paul Royal, principal researcher at Damballa, has developed a new tool called Azure, which takes advantage of the virtualization extensions in Intel‘s chips to evade the virtual machine and sandbox checks malware authors often include in their ‘work’. Because the extensions exist at the hardware level, below the level of the host OS, the malware doesn’t have the ability to detect Azure, allowing researchers to analyze its behavior unimpeded.

“The whole point is to get out of the guest OS so the malware can’t detect you and attack,” said Royal. “Intel VT doesn’t have the weakness of in-guest approaches because it’s completely external. Others use system emulators, but to get everything exactly right in terms of emulation can be tricky.”

Royal plans to release the source code for Azure at the upcoming Black Hat conference in Las Vegas and will make the tool available for download, as well. Royal said he is still working on features that he plans to add to a future version of Azure, including a precision automated unpacker and a system call tracer.

Intel’s virtualization technology (VT) is a set of extensions added to some of the company’s chipsets that help implement virtualization on the hardware, rather than the software level. VT is designed to help enterprises make better use of their hardware resources and save energy.

[Source: SearchSecurity]