Next-Generation Secure Computing Base (NGSCB)

Just finished reading an interesting article by Microsoft entitled Next-Generation Secure Computing Base: Development Considerations for Nexus Computing Agents.

In it Microsoft talks about a new system of seperating code into trusted and normal modes, which they refer to as Nexus Mode and Standard Mode. In standard mode, nothing really changes... the Windows kernel uses its existing system to maintain operations. However when in Nexus Mode, there is a better level of assurance when it comes to secure input/output, protected memory, sealed storage (great for storing keys) and attestation.

By writing Nexus Computing Agents (NCA), a developer could provide a more trusted environment through the Nexus Security Kernel than that of the standard Windows kernel, which has become very brittle over time. The result is an innovative platform that provides a more secure and trustworthy computing environment to Microsoft Windows users.

Not sure what to make of it. I hope that they will be giving me access to this at the DevCon at the Microsoft campus next month, so I can understand it better myself.

Any way you look at it, its something interesting to read. Happy reading.