Microsoft's Drawbridge and Haven

MrBrian · Oct 11, 2014

From Drawbridge:

Drawbridge is a research prototype of a new form of virtualization for application sandboxing. Drawbridge combines two core technologies: First, a picoprocess, which is a process-based isolation container with a minimal kernel API surface. Second, a library OS, which is a version of Windows enlightened to run efficiently within a picoprocess.
Click to expand...

From Why IT Pros Should Prepare for Microsoft's Stealth Library OS:

Could there be a day when the desktop or mobile operating system you use and developers program to don't matter? The age-old question may not be answered any time soon and don't expect to see any of this in Microsoft's next client OS. But IT pros should prepare themselves for the possibility that Microsoft or other players may someday successfully commercialize a "library operating system" where developers rely primarily on APIs to run their applications, not a client OS or even a virtual machine.
Click to expand...

Microsoft 'Drawbridge' project seeks ways to streamline and better secure Windows.

From Shielding applications from an untrusted cloud with Haven:

Abstract

Today's cloud computing infrastructure requires substantial trust. Cloud users rely on both the provider's staff and its globally-distributed software/hardware platform not to expose any of their private data.

We introduce the notion of shielded execution, which protects the confidentiality and integrity of a program and its data from the platform on which it runs (i.e., the cloud operator's OS, VM and firmware). Our prototype, Haven, is the first system to achieve shielded execution of unmodified legacy applications, including SQL Server and Apache, on a commodity OS (Windows) and commodity hardware. Haven leverages the hardware protection of Intel SGX to defend against privileged code and physical attacks such as memory probes, but also addresses the dual challenges of executing unmodified legacy binaries and protecting them from a malicious host. This work motivated recent changes in the SGX specification.
Click to expand...

Microsoft Research builds a safe 'Haven' for shielding apps in the cloud.

MrBrian · Oct 11, 2014

From the last link in the first post:

As is the case with all Microsoft Research projects, there's no guarantee if or when a given project will be commercialized. It's worth noting, however, that Microsoft seems to have incorporated picoprocesses into Windows 8.1, though they haven't called out that fact or explained why they are there.
Click to expand...

MrBrian · Oct 11, 2014

Drawbridge is the topic of slides "Experiences in the Land of Virtual Abstractions" - hxxp://vee2014.cs.technion.ac.il/docs/VEE14-present601.pdf .

MrBrian · Oct 11, 2014

Windows 'Drawbridge' Container Tech Sets Stage for Docker Battle

MrBrian · Oct 15, 2014

Microsoft Says Windows Will Run Docker, the Next Big Thing in Cloud Computing

Log in or Sign up

Microsoft's Drawbridge and Haven

MrBrian Registered Member

MrBrian Registered Member

MrBrian Registered Member

MrBrian Registered Member

MrBrian Registered Member

Log in or Sign up

Microsoft's Drawbridge and Haven

MrBrian Registered Member

MrBrian Registered Member

MrBrian Registered Member

MrBrian Registered Member

MrBrian Registered Member

Useful Searches