Muen – An x86/64 Separation Kernel for High Assurance (muen.codelabs.ch)

The Muen project has unveiled an open-source separation kernel (SK) specifically designed for the Intel x86/64 architecture. Developed by codelabs GmbH in Switzerland, Muen has been formally verified to operate without runtime errors, making it a significant advancement for high-assurance systems in sectors such as national security. By collaborating with secunet Security Networks AG, Muen aims to address critical system requirements with a focus on enhancing security through its isolation mechanisms. Muen's architecture leverages Intel's VT-x for hardware-assisted virtualization, allowing secure separation of different execution components. This technical foundation minimizes kernel size and complexity, enabling easier application of formal verification methods. Key features include multicore support, static resource assignment, and PCI device passthrough, which enhance both performance and security. Notably, the kernel has been written in SPARK 2014, a programming language that emphasizes safety-critical systems. Ongoing development aims to extend Muen’s capabilities while maintaining high assurance for its isolation properties, catching the interest of researchers and industry professionals engaged in secure system architecture and formal verification.