A secure networked laboratory for kernel programming

Abstract

Recently, several flavours of UNIX have appeared which run on inexpensive personal computers. Further, the source code for these operating systems is freely available. This makes offering courses that include realistic kernel programming feasible in an academic environment. However, root access is required in order to modify a system's kernel. This poses a potential security threat both to other systems on the network and to other users of a single machine. This paper presents a lab design which securely integrates machines with untrusted users acting as root into a secured network, and which securely allows multiple users root access to the same machine.

References

1. 1 Chapman, R., and Carlisle, W. H. A linux-based lab for operating systems and network courses. The Linux Journal, 41 (September 1997), 60-65.
2. 2 Kaplenk, J. Using linux to teach UNIX systems administration. The Linux Journal, 44 (December 1997).
3. 3 Mayo, J., and Kearns, P. A secure-networked laboratory for kernel programming. Technical Report TR97--1, Department of Computer Science, College of William and Mary, September 1997.
4. 4 Sherman, M., and Marks, A. Using low-cost workstations to investigate computer networks and distributed systems. Technical Report PCS-TR86-126, Dartmouth College, Computer Science, Hanover, NH, 1986.
5. 5 Ylonen, T. Ssh- secure login connections over the internet, in 6th USENIX Security Symposium (July 1996), USENIX Association, 37-42.

Index Terms

• Applied computing

  • Education

• Security and privacy

  • Systems security

    • Operating systems security

• Social and professional topics

  • Computing / technology policy

    • Computer crime

  • Professional topics

    • Computing education

• Software and its engineering

  • Software organization and properties

    • Contextual software domains

      • Operating systems