CoTrust: Cross-Layer Trusted Computing Architecture for High Assurance Systems

In this proposed effort, we propose to develop a Cross-Layer Trusted Computing Architecture for High Assurance Systems. The key innovation of this proposal includes developments of: (1) integration the state-of-the-art open source microkernel OS (sel4) and hardware architecture (RISC-V processor); (2) secure tagged hardware architecture to protect physical resources; (3) minimum Trusted Computing Base (TCB) in the microkernel system software; (4) completely isolates processes and systems at both software and hardware level; The Cross-Layer trusted computing architecture can enforces a unified and holistic security policies and verification to guarantee high assurance requirements. Finally, all the proposed techniques will be integrated in a functional prototype to demonstrate the feasibility of CoTrust.