An Evaluation Framework for Kernel-Mode Security Modules

Kernel-mode security enhancement technologies are widely used to improve the efficiency of data processing and the security of data and operating systems in recent years. However, the security modules have been implemented without consolidated standards, in kernel-mode which make them hard to be compared, selected and reused. In this paper, a kernel-mode security module evaluation framework (KSEF) is proposed to satisfy such requirements. The main contributions of KSEF are supporting the evaluation of kernel-mode security modules, providing a design pattern which is easy to customize and extendable for different kernel-mode security enhancement applications (KSEAs), and offering a uniform interface for the evaluation and implementation of the kernel-mode security modules. As a result, the KSEF smoothes the steps among the design, test and release of the security products, facilitates the modularized and structured design of KSEA. Finally, base on the idea of KSEF, a concrete implementation of cryptographic service modules evaluation framework in kernel-mode is described in detail.