Open source Qubes OS alpha available

Xen-based virtual machines form basis of secure, open-source operating system

The security researcher who invented malware known as Blue Pill has come up with a secure open source operating system called Qubes OS that is available for alpha-testing downloads.

With Qubes OS, Joanna Rutkowska is borrowing from the expertise she demonstrated four years ago when she virtualized a rootkit to create Blue Pill.

Top 10 YouTube hacking videos

Qubes OS employs Xen virtual machines (VM) as building blocks in which users organize groups of applications. These Linux-based VMs are managed on a single piece of hardware managed by a Xen hypervisor, keeping applications used at work, for example, separate from applications used at home.

So if one VM is set up for Web browsing and during a visit to an infected site a worm gets downloaded, the worm cannot access the other VMs on the same piece of hardware. It is isolated and the applications located on the other VMs continue to work unencumbered.

The primary task of Qubes OS is to isolate VMs from each other. The operating system itself creates a set of VMs such as the network VM and storage VM. The network VM, for instance, isolates networking code in the device from all the other applications on the hardware. If the network VM is compromised the device becomes unable to network and is isolated, but the rest of the code on the machine remains intact.

The operating system comes with a secure graphical user interface subsystem for managing all the VMs and to display available applications that are divided up among more than one VM. The GUI also supports secure cutting and pasting between VMs as well as transferring files without risk of infection spreading, according to a white paper on Qubes OS architecture.

To boost efficiency, all VMs that share a single operating system (so far Qubes supports just Linux but it could support other operating systems) share a single read-only file system to prevent replicating a full Linux image for each VM. The paper says Rutkowska's group chose Xen for its size vs. using a Linux kernel on the hardware supplemented by a KVM hypervisor.  Xen's inherent relative simplicity makes it easier to audit for security problems.

Rutkowska says in her blog that her firm, Invisible Things, has been working on Qubes OS for the past six months and just announced its availability Wednesday. The link to the project Web site was busy Wednesday and Rutkowska advised readers to wait until later this week when the initial rush has died down before trying to download the software.

She says she uses Qubes OS on a Macbook for work, shopping, banking, browsing and for developing Qubes.

Read more about software in Network World's Software section.

Join the PC World newsletter!

Error: Please check your email address.

Tags qubes OSopen sourcerootkitsvirtual machines

Struggling for Christmas presents this year? Check out our Christmas Gift Guide for some top tech suggestions and more.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tim Greene

Network World

Most Popular Reviews

Follow Us

Best Deals on GoodGearGuide

Shopping.com

Latest News Articles

Resources

GGG Evaluation Team

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell

LIFEBOOK UH574

The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi

STYLISTIC Q702

The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott

STYLISTIC Q702

My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Latest Jobs

Shopping.com

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?