Feed: Slashdot
Feed Link: https://slashdot.org/
---

Title: Android's pKVM Becomes First Globally Certified Software to Achieve
SESIP Level 5 Security Certification

Link: https://it.slashdot.org/story/25/08/17/212023...

Protected KVM (pKVM), the hypervisor powering the Android Virtualization
Framework, has officially achieved SESIP Level 5 certification (in testing by
cybersecurity lab Dekra against the TrustCB SESIP scheme). Google's security
blog called the certification "a watershed moment," and a "new benchmark" for
both open-source security - and for the future of consumer electronics. "It
provides a single, open-source, and exceptionally high-quality firmware base
that all device manufacturers can build upon." This makes pKVM the first
software security system designed for large-scale deployment in consumer
electronics to meet this assurance bar. The implications for the future of
secure mobile technology are profound. With this level of security assurance,
Android is now positioned to securely support the next generation of high-
criticality isolated workloads. This includes vital features, such as on-
device AI workloads that can operate on ultra-personalized data, with the
highest assurances of privacy and integrity... Achieving Security Evaluation
Standard for IoT Platforms (SESIP) Level 5 is a landmark because it
incorporates AVA_VAN.5, the highest level of vulnerability analysis and
penetration testing under the ISO 15408 (Common Criteria) standard. A system
certified to this level has been evaluated to be resistant to highly skilled,
knowledgeable, well-motivated, and well-funded attackers who may have insider
knowledge and access. This certification is the cornerstone of the next-
generation of Android's multi-layered security strategy. Many of the TEEs
(Trusted Execution Environments) used in the industry have not been formally
certified or have only achieved lower levels of security assurance... Looking
ahead, Android device manufacturers will be required to use isolation
technology that meets this same level of security for various security
operations that the device relies on. Protected KVM ensures that every user
can benefit from a consistent, transparent, and verifiably secure foundation.
"This achievement represents just one important aspect of the immense, multi-
year dedication from the Linux and KVM developer communities and multiple
engineering teams at Google developing pKVM and AVF," the post concludes. "We
look forward to seeing the open-source community and Android ecosystem
continue to build on this foundation, delivering a new era of high-assurance
mobile technology for users."

Read more of this story at Slashdot.

---
VRSS v2.1.180528