HyperSpector: Virtual distributed monitoring environments for secure intrusion detection

Proceedings of the First ACM/USENIX International Conference on Virual Execution Environments, VEE 05

Volumn , Issue , 2005, Pages 197-207

  Kourai, Kenichi ^a   Chiba, Shigeru ^a  

^a TOKYO INSTITUTE OF TECHNOLOGY   (Japan)

Author keywords

Distributed IDS; Inter VM monitoring; Virtual machine; Virtual network

Indexed keywords

CODES (SYMBOLS); COMPUTER HARDWARE; COMPUTER VIRUSES; DISTRIBUTED COMPUTER SYSTEMS; SERVERS;

DISTRIBUTED IDS; VIRTUAL MACHINES; VIRTUAL NETWORK;

VIRTUAL REALITY;

EID: 32044466453     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1064979.1065006     Document Type: Conference Paper

References (22)

1. Apache HTTP Server Project. Apache HTTP server benchmarking tool, http://www.apache.org/.
2. A. Bohra, I. Neamtiu, P. Gallard, F. Sultan, and L. Iftode. Remote repair of operating system state using Backdoors. In Proceedings of the 1st IEEE International Conference on Autonomic Computing, pages 256-263, 2004.
3. CERT. Multiple vulnerabilities in snort preprocessors. CERT Advisory CA-2003-13.
4. Counterpane Internet Security, Inc. Counterpane, http://www.counterpane. com/.
5. CVE. CAN-1999-1462, http://www.cve.mitre.org/.
6. CVE. CAN-2004-0536, http://www.cve.mitre.org/.
7. J. Dike. A user-mode port of the linux kernel. In Proceedings of the 4th Annual Linux Showcase & Conference, 2000.
8. G. Dunlap, S. King, S. Cinar, M. Basrai, and P. Chen. ReVirt: Enabling intrusion analysis through virtual-machine logging and replay. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation, pages 211-224, 2002.
9. R. Figueiredo, P. Dinda, and J. Fortes. A case for Grid computing on virtual machines. In Proceedings of the 23rd IEEE Conference on Distributed Computing Systems, pages 550-559, 2003.
10. Fyodor. The network mapper. http://www.insecure.org/nmap/.
11. T. Garfinkel and M. Rosenblum. A virtual machine introspection based architecture for intrusion detection. In Proceedings of the Network and Distributed Systems Security Symposium, pages 191-206, 2003.
12. P. Horn. Autonomic computing: IBM perspective on the state of information technology, http://www.research.ibm.com/autonomic/, 2001.
13. P. Kamp and R. Watson. Jails: Confining the omnipotent root. In Proceedings of the 2nd International SANE Conference, 2000.
14. G. Kim and E. Spafford. The design and implementation of Tripwire: A file system integrity checker. In Proceedings of the 2nd ACM Conference on Computer and Communications Security, pages 18-29, 1994.
15. K. Kourai, T. Hirotsu, K. Sato, O. Akashi, K. Fukuda, T. Sugawara, and S. Chiba. Secure and manageable virtual private networks for end-users. In Proceedings of the 28th Annual IEEE Conference on Local Computer Networks, pages 385-394, 2003.
16. S. Osman, D. Subhraveti, G. Su, and J. Nieh. The design and implementation of Zap: A system for migrating computing environments. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation, pages 361-376, 2002.
17. J. Poskanzer. Tiny/turbo/throttling HTTP server, http://www.acme.com/ software/thttpd/.
18. Quest Software. Big Brother systems and network monitor. http://www.quest.com/bigbrother/.
19. M. Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of the 13th USENIX System Administration Conference, pages 229-238, 1999.
20. S. Snapp, J. Brentano, G. Dias, T. Goan, T. Grance, L. Heberlein, C. Ho, K. Levitt, B. Mukherjee, D. Mansur, K. Pon, and S. Smaha. A system for distributed intrusion detection. In Proceedings of the COMPCON, pages 170-176, 1991.
21. VMware, Inc. VMware. http://www.vmware.org/.
22. M. Zee. Implementing a clonable network stack in the FreeBSD kernel. In Proceedings of the USENIX 2003 Annual Technical Conference, pages 137-150, 2003.