Building a MAC-based security architecture for the Xen open-source hypervisor

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2005, Issue , 2005, Pages 276-285

  Sailer, Reiner ^a   Jaeger, Trent ^a   Valdez, Enriquillo ^a   Cáceres, Ramón ^a   Perez, Ronald ^a   Berger, Stefan ^a   Griffin, John Linwood ^a   Van Doorn, Leendert ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER ARCHITECTURE; DATA PRIVACY; ROBUSTNESS (CONTROL SYSTEMS); VIRTUAL REALITY;

MANDATORY ACCESS CONTROL (MAC); SECURITY ARCHITECTURE; VIRTUAL MACHINE;

SECURITY OF DATA;

EID: 33750248123     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2005.13     Document Type: Conference Paper

References (35)

1. TCG TPM Specification Version 1.2. http://www.trustedcomputinggroup.org.
2. Advanced Micro Devices. AMD64 Virtualization Codenamed "Pacifica" Technology, Secure Virtual Machine Architecture Reference Manual, Rev 3.01, May 2005. http://www.amd.com/us-en/assets/content_type/ white_papers_and_tech_docs/33047.pdf.
3. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of Virtualization. In Proceedings of the 19th ACM Symposium on Operating Systems Principles, October 2003.
4. D. E. Bell and L. J. LaPadula. Secure computer systems: Unified exposition and multics interpretation. Technical report, MITRE MTR-2997, March 1976.
5. K. J. Biba. Integrity Considerations for Secure Computer Systems. Technical Report MTR-3153, Mitre Corporation, Mitre Corp, Bedford MA, June 1975.
6. W. E. Boebert and R. Y. Kain. A practical alternative to hierarchical integrity policies. 8th National Computer Security Conference, 1985.
7. D. F. C. Brewer and M. J. Nash. The Chinese Wall Security Policy. Proc. IEEE Symposium on Security and Privacy, pages 206-214, May 1989.
8. Common Criteria. Common Criteria for Information Technology Security Evaluation. http://www.commoncriteriaportal.org.
9. th Symposium on Operating System Principles, 1995.
10. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh, Terra: A Virtual Machine-Based Platform for Trusted Computing. In Proc. 9th ACM Symposium on Operating Systems Principles, pages 193-206, 2003.
11. B. D. Gold, R. R. Linde, and P. F. Cudney. KVM/370 in Retrospect. In Proc. IEEE Symposium on Security and Privacy, 1984.
12. R. P. Goldberg. Survey of Virtual Machine Research. IEEE Computer Magazine, 7(6):34-45, 1974.
13. IBM. PHYP: Converged POWER Hypervisor Firmware for pSeries and iSeries. http://www1.ibm.com/servers/enable/site/peducation/abstracts/abs_2bb2.html.
14. IBM Research. The Research Hypervisor - A Multi-Platform, Multi-Purpose Research Hypervisor. http://www.research.ibm.com/ hypervisor.
15. Intel. Intel Virtualization Technology Specification for the IA-32 Intel Architecture, April 2005. ftp://download.intel.com/technology/computing/vptech/ C97063-002.pdf.
16. J. P. Anderson et. al. Computer security technology planning study. Technical Report ESD-TR-73-51, Vol. I+II, Air Force Systems Command, USAF, 1972.
17. T. Jaeger, R. Sailer, and X. Zhang. Analyzing Integrity Protection in the SELinux Example Policy. In 12th USENIX Security Symposium. USENIX, 2003.
18. P. A. Karger and R. R. Schell. Thirty Years Later Lessons from the Multics Security Evaluation. In Annual Computer Security Applications Conference (ACSAC), December 2004.
19. P. A. Karger, M. E. Zurko, D. W. Bonin, A. H. Mason, and C.E. Kahn. A VMM Security Kernel for the VAX Architecture. In Proc. IEEE Symposium on Security and Privacy, May 1990.
20. P. A. Karger, M. E. Zurko, D. W. Bonin, A. H. Mason, and C. E. Kahn. A Retrospective on the VAX VMM Security Kernel. In IEEE Transaction on Software Engineering, November 1991.
21. N. L. Kelem and R. J. Feiertag. A Separation Model for Virtual Machine Monitors. In Proc. IEEE Symposium on Security and Privacy, 1991.
22. th Symposium on Operating System Principles, 1995.
23. S. E. Madnick and J. J. Donovan. Application and analysis of the virtual machine approach to information system security and isolation. Proceedings of the ACM workshop on virtual computer systems, 1973.
24. E. J. McCauley and P. J. Drongowski. KSOS - The design of a secure operating system. In Proc. InAFIPS Conference, pages 345-353, 1979.
25. R. Meushaw and D. Simard. NetTop - Commercial Technology in High Assurance Applications. Tech Trend Notes, Fall 2000.
26. National Security Agency. Security-Enhanced Linux (SELinux). http://www.nsa.gov/selinux.
27. J. Rushby. Proof of Separability - A verification technique for a class of security kernels. In Proc. 5th International Symposium on Programming, volume 137 of Lecture Notes in Computer Science, pages 352-367, Turin, Italy, 1982. Springer-Verlag.
28. R. Sailer, X. Zhang, T. Jaeger, and L. van Doom. Design and Implementation of a TCG-based Integrity Measurement Architecture. In Thirteenth USENIX Security Symposium, pages 223-238, August 2004.
29. R. R. Schell, T. F. Tao, and M. Heckman. Designing the GEMSOS Security Kernel for Security and Performance. 8th National Computer Security Conference, pages 108-119, 1985.
30. H. Scherzer, R. Canetti, P. A. Karger, H. Krawczyk, T. Rabin, and D. C. Toll. Authenticating Mandatory Access Controls and Preserving Privacy for a High-Assurance Smart Card. In (ESORICS), 2003.
31. th Symposium on Operating System Principles, 1999.
32. W. R. Shockley, T. F. Tao, and M. F. Thompson. An Overview of the GEMSOS Class Al Technology and Application Experience, 11th National Computer Security Conference, pages 238-245, October 1988.
33. R. Spencer, P. Loscocco, S. Smalley, M. Hibler, D. Anderson, and J. Lepreau. The Flask Security Architecture: System support for diverse security policies. In Proceedings of The Eighth USENIX Security Symposium, August 1999.
34. VMware. http://www.vmware.com/.
35. XenSource. http://xenbits.xensource.com/xen-unstable.hg.