A feather-weight virtual machine for windows applications

VEE 2006 - Proceedings of the Second International Conference on Virtual Execution Environments

Volumn 2006, Issue , 2006, Pages 24-34

  Yu, Yang ^a   Guo, Fanglu ^a   Nanda, Susanta ^a   Lam, Lap Chung ^a   Chiueh, Tzi Cker ^a  

^a Stony Brook University   (United States)

Author keywords

Copy on write; Mobile code security; Namespace virtualization; System call interception; Virtual machine

Indexed keywords

COMMUNICATION SYSTEMS; COMPUTER OPERATING SYSTEMS; FAULT TOLERANT COMPUTER SYSTEMS; RESOURCE ALLOCATION; SECURITY OF DATA; VISUALIZATION;

COPY ON WRITE; MOBILE CODE SECURITY; NAMESPACE VIRTUALIZATION; SYSTEM CALL INTERCEPTION; VIRTUAL MACHINE;

VIRTUAL REALITY;

EID: 33745936911     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1134760.1134766     Document Type: Conference Paper

References (42)

1. K. Lawlon, B. Denney, N. D. Guarneri, V. Ruppert, C. Bothamy, and M. Calabrese, "Bochs user manual," http://bochs.sourceforge.nel/doc/ docbook/user/index.hlml.
2. VMware, "Vmware products," http://www.vmware.com/products/, 2006.
3. Microsoft, "Microsoft virtual pc 2004," http://www.microsoft. com/windows/virtualpc/default.mspx.
4. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Prall, and A. Warfield, "Xen and the art of virtualization," in Proceedings of the 19th ACM Symposium on Operating Systems Principles. ACM Press, 2003, pp. 164-177.
5. P. Kamp and R. Watson, "Jails: Confining the omnipotent root," in Proceedings of the 2nd International SANE Conference, 2000.
6. Sun Microsystems, "Solaris containers: Server virtualization and manageability "http://www.sun.com/software/whitepapers/solaris10/ grid_containers.pdf, September 2004.
7. H. Potzl, "Linux-vserver technology," http://linux-vserver.org/ Linux-VServer-Paper, 2004.
8. B. Alpern, J. Auerbach, V. Bala, T. Frauenhofer, T. Mummert, and M. Pigott, "Pds: A virtual execution environment for software deployment," m Proceedings of the 1st International Conference on Virtual Execution Environments, 2005.
9. Softricity, "Application virtualization technology," http://www.softricity.com/products/virtualization.asp.
10. J. Sugerman, G. Venkitachalam, and B. Lim, "Virtualizing i/o devices on vmware workstation's hosted virtual machine monitor," in Proceedings of the 2001 USENIX Annual Technical Conference, June 2001.
11. A. Whitaker, M. Shaw, and S. D. Gribble, "Denali: Lightweight virtual machines for distributed and networked applications," in Proceedings of the USENIX Annual Technical Conference, June 2002.
12. J. Dike, "A user-mode port of the linux kernel," in Proceedings of the 4th Annual Linux Showcase and Conference, 2001.
13. C. A. Waldspurger, "Memory resource management in vmware esx server," in Proceedings of the 5th Symposium on Operating Systems Design and Implementation, December 2002.
14. Sphera, "Sphera server virtualization," http://www.sphera.com/ prod-serv-server_virtualization.php.
15. SWsoft, "Virtuozzo for windows & linux server virtualization," http://www.virtuozzo.com/en/products/virtuozzo/.
16. AppStream, "Appstream technology overview," http://www.appstream.com/products-technology.html.
17. Thinstall, "Application virtualization: A technical overview of the thinstall application virtualization platform," https://thinstall.com/ products/documents/ThinstallTechnicalOverview_V1Feb06.pdf.
18. A. Dornan, "Application streaming: The virtual thin client," http://www.itarchitectmag.com/shared/article/showArticle.jhtml?articleId= 175001526&pgno=1, January 2006.
19. Trigence, "Optimized application management with trigence ae," http://www.trigence.com/whitepaper/download/OptAppMgmt.pdf, 2005.
20. A. Ernst, "Meiosys: Application virtualization and stateful application relocation," http://www.virtual-strategy.com/article/ articleview/680/1/2/, 2005.
21. R. A. Baratto, S. Potter, G. Su, and J. Nieh, "Mobidesk: Mobile virtual desktop computing," in Proceedings of the 10th ACM Conference on Mobile Computing and Networking, 2004.
22. Z. Liang, V. Venkatakrishnan, and R. Sekar, "Isolated program execution: An application transparent approach for executing untrusted programs," in Proceedings of 19th Annual Computer Security Applications Conference, December 2003.
23. W. Sun, Z. Liang, V. Venkatakrishnan, and R. Sekar, "One-way isolation: An effective approach for realizing safe execulion environments," in Proceedings of 12th Annual Network and Distributed System Security Symposium, 2005.
24. GreenBorder, "Greenborder's proactive securily architecture," http://www.greenborder.com/solutions/technology.php.
25. R. Balzer, "Safe email, safe office, and safe web browser," in Proceedings of the DARPA Information Survivability Conference and Exposition, 2003.
26. K. Brown, "Security in longhorn: Focus on least privilege," http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnlong/html/ leastprivlh.asp, 2004.
27. Wine, "Wine user guide," http://www.winehq.com/site/docs/ wineusr-guide/index.
28. Red Hat, Inc, "Cygwin user's guide," http://cygwin.com/cygwin- ug-net/cygwin-ug-net.html.
29. C. Soules, G. Goodson, J. Strunk, and G. Ganger, "Metadata efficiency in a comprehensive versioning file system," in Proceedings of USENIX Conference on File and Storage Technologies, April 2003.
30. N. Zhu and T. Chiueh, "Design, implementation, and evaluation of repairable file service," in Proceedings of the 2003 International Conference on Dependable Systems and Networks, June 2003.
31. K.-K. Muniswamy-Reddy, C. P. Wright, A. Himmer, and E. Zadok, "A versatile and user-oriented versioning file system," in Proceedings of USENIX Conference on File and Storage Technologies, 2004.
32. T. Close, A. H. Karp, and M. Stiegler, "Shatter-proofing windows," Technical Report HPL-2005-87, HP Laboratories Palo Alto, May 2005.
33. M. Corporation, "Technical overview of windows server 2003 terminal services," http://download.microsoft.com/download/2/8/1/281f4d94-ee89-4b21- 9f9e-9accef44a743/TerminalServerOverview.doc, January 2005.
34. G. Nebbett, Windows NT/2000 Native API Reference. New Riders Publishing, 2000.
35. skape and Skywing, "Bypassing patchguard on windows x64," http://www.uninformed.org/?v=3&a=3&t=pdf, December 2005.
36. D. A. Solomon and M. E. Russinovich, Inside Microsoft Windows 2000. Microsoft Press, 2000, ch. 3.
37. T. Chiueh, L. Lam, Y. Yu, P. Cheng, and C. Chang, "Secure mobile code execution service," in Proceedings of 2004 Virus Bulletin Conference, August 2004.
38. T. Chiueh, H. Sankaran, and A. Neogi, "Spout: A transparent distributed execution engine for Java applets," IEEE Journal of Selected Areas in Communications, vol. 20, no. 7, September 2002.
39. R. A. Grimes, Malicious Mobile Code - Virus Protection for Windows. O'Reilly, 2001, ch. 1.
40. A. Conry-Murray, "Product focus: Behavior-blocking stops unknown malicious code," http://www.itarchitect.com/article/NMG20020603S0009, June 2002.
41. F. Guo, Y. Yu, and T. cker Chiueh, "Automated and safe vulnerability assessment," in Proceedings of the 21th Annual Computer Security Applications Conference, December 2005.
42. J. Srouji, P. Schuster, M. Bach, and Y. Kuzmin, "A transparent checkpoint facility on nt," in Proceedings of 2nd USENIX Windows NT Symposium, August 1998.