Everything about Separation kernel
Type of computer kernel
A separation kernel is a type of security kernel used to simulate a distributed environment. The concept was introduced by John Rushby in a 1981 paper. Rushby proposed the separation kernel as a solution to the difficulties and problems that had arisen in the development and verification of large, complex security kernels that were intended to "provide multilevel secure operation on general-purpose multi-user systems." According to Rushby, "the task of a separation kernel is to create an environment which is indistinguishable from that provided by a physically distributed system: it must appear as if each regime is a separate, isolated machine and that information can only flow from one machine to another along known external communication lines. One of the properties we must prove of a separation kernel, therefore, is that there are no channels for information flow between regimes other than those explicitly provided." Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Separation kernelA 5-minute orientation
- Skim a recent paper: Large Separable Kernel Attention: Rethinking the Large Kernel Attention design in CNNInfluential work since 2022
- Pick up a classic book: Modern Operating SystemsThe most-reprinted book on the subject
- Read the landmark paper: Multichannel Blind Source Separation Using Convolution Kernel CompensationCited 650 times
- Go sideways: Multiple Independent Levels of SecurityA closely related topic
- Go sideways: L4 microkernel familyA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Multichannel Blind Source Separation Using Convolution Kernel Compensation
Kernel-Based Nonlinear Blind Source Separation
Kernel Additive Models for Source Separation
Multi-task learning on nuclear masses and separation energies with the kernel ridge regression
A Virtualized Separation Kernel for Mixed-Criticality Systems
Kernel Eigenspace Separation Transform for Subspace Anomaly Detection in Hyperspectral Imagery
Nanoporous Carbon Prepared from Palm Kernel Shell for CO2/CH4 Separation
Separation of palm kernel oil from palm kernel with supercritical carbon dioxide using pressure swing technique
🆕 Influential since 2022
Large Separable Kernel Attention: Rethinking the Large Kernel Attention design in CNN
New insights into selective depression mechanism of Tamarindus indica kernel gum in flotation separation of fluorapatite and calcite
Detection Method for Walnut Shell-Kernel Separation Accuracy Based on Near-Infrared Spectroscopy
Kernel-FastICA-Based Nonlinear Blind Source Separation for Anti-Jamming Satellite Communications
Palm kernel fatty acid distillate-based bulk liquid membrane for Cu(II) separation: Design and its operating parameters
📚 Books worth reading
Modern Operating SystemsAndrew S. Tanenbaum, Herbert Bos · 1992
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
The Elements of Statistical LearningTrevor Hastie, Robert Tibshirani · 2001
Linear Integral EquationsRam P. Kanwal · 2013
Abstract algebraDavid S. Dummit · 1991
Investigaciones psicológicasJosé Ortega y Gasset · 1982
The Eucharistic SacrificeMortimer, Alfred G. (Alfred Garnett), 1848-1924, Carter, Thomas Thellusson, 1808-1901 · 1901
Programming Languages and SystemsMatthias Felleisen · 2013
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Multiple Independent Levels of Security Multiple Independent Levels of Security/Safety (MILS) is a high-assurance security architecture based on the concepts of separation and controlled information…
- L4 microkernel family L4 is a family of second-generation microkernels, used to implement a variety of types of operating systems (OS), though mostly for Unix-like, Portable…
- Trusted computing base The trusted computing base (TCB) of a computer system is the set of all hardware, firmware, and/or software components that are critical to its security…
- LynxSecure LynxSecure is a least privilege real-time separation kernel hypervisor from Lynx Software Technologies designed for safety and security critical applications…
- SeL4 seL4 (security enhanced L4) is an open-source, high-assurance, capability-based microkernel. It inherits the performance and design characteristics of…
- EROS (microkernel) Extremely Reliable Operating System (EROS) is an operating system developed starting in 1991 at the University of Pennsylvania, and then Johns Hopkins…
- Guard (information security) In information security, a guard is a device or system for allowing computers on otherwise separate networks to communicate, subject to configured constraints…
- Multiple single-level Multiple single-level or multi-security level (MSL) is a means to separate different levels of data by using separate computers or virtual machines for…