/
OpenXT Target Features List

OpenXT Target Features List

Jun 04, 2015

  1. Measurement & attestation

    1. Must provide trusted evidence about the state of the software running on the platform at boot and during run-time

    2. Solution must be extensible to allow for application to various use-cases and types of evidence measurements agents (i.e. must be able to create rules and metrics to measure

  2. vTPM and supporting infrastructure

    1. Virtual trusted platform module that can be used to reflect changes within the software controlling the machine. Supporting infrastructure are services needed for the hardware to be properly used by the vTPM, which is already included in Xen

  3. Introspection of running VMs using an integrity measurement agent

    1. Detect changes in what’s expected in the VM; integrity violations in the Linux kernel (i.e. using LKIM

  4. Newer Kernels

    1. Need to base Xen on a longterm kernel

  5. Upgrade Xen for security

  6. UEFI support on host

  7. 64bit support on host and guest

  8. A more controlled USB policy for increased security (patches have already been submitted)

  9. Service VM build target (i.e. v4v, perhaps revive the NILFVM target)

  10. Fix or replace NetworkManager

    1. Complete the networks objects (VPN, wireless, wired) concept

    2. Consider ConnMann as an alternative

    3. Create the concept of user access and admin acces

  11. Provide better support for vif hotplugging (can be provided with an upgrade of Xen)

  12. System flexibility after build

    1. Support changes to system configuration, updates to Xen, etc

  13. Decomposition of Dom0

    1. Graphics domain to improve the UI VM interface

    2. Control domain to streamline/parallelize the chained VM boot/startup process

    3. Enhanced full disk encryption

  14. Multiple monitor support

  15. Minimize dependency on CPU architecture