Practical uses of virtual machines for protection of sensitive user data

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4464 LNCS, Issue , 2007, Pages 145-161

  Kwan, Peter C S ^a   Durfee, Glenn ^b  

^a Princeton University   (United States)

^b PALO ALTO RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; COMPUTER VIRUSES; INFORMATION RETRIEVAL; SECURITY OF DATA; SERVERS;

COMMODITY OPERATING SYSTEM; PERSONAL INFORMATION; SOFTWARE COMPONENT; WEB SERVER;

VIRTUAL CORPORATION;

EID: 37149008159     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-72163-5_13     Document Type: Conference Paper

References (30)

1. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In SOSP '03: Proceedings of the nineteenth ACM symposium on Operating systems principles, pages 164-177, New York, NY, USA, 2003. ACM Press.
2. D. M. Chess and S. R. White. An undetectable computer vims. In Virus Bulletin Conference, Sept. 2002.
3. F. Cohen. Computer viruses: theory and experiments. Comput. Secur., 6(1):22-35, 1987.
4. R. Cox, E. Grosse, R. Pike, D. L. Presotto, and S. Quinlan. Security in Plan 9. In Proceedings of the 11th USENIX Security Symposium, pages 3-16, Berkeley, CA, USA, 2002. USENIX Association.
5. R. Dhamija and J. D. Tygar. The battle against phishing: Dynamic security skins. In SOUPS '05: Proceedings of the 2005 symposium on Usable privacy and security, pages 77-88, New York, NY, USA, 2005. ACM Press.
6. T. Dierks and C. Allen. The TLS Protocol Version 1.0. RFC 2246, Jan. 1999.
7. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: a virtual machinebased platform for trusted computing. In SOSP '03: Proceedings of the nineteenth ACM symposium on Operating systems principles, pages 193-206, New York, NY, USA, 2003. ACM Press.
8. T. Garfinkel and M. Rosenblum. A virtual machine introspection based architecture for intrusion detection. In Internet Society's 2003 Symposium on Network and Distributed System Security (NDSS), pages 191-206, 2003.
9. R. P. Goldberg. Architectural principles for virtual computer systems. PhD thesis, Harvard University, 1972.
10. P. Gutmann. An open-source cryptographic coprocessor. In Proc. 9th USENIX Security Symposium, Denver, CO, Aug 2000.
11. Intel. Intel Virtualization Technology Specification for the IA-32 Intel Architecture, 2005.
12. Intel. Lagrande technology. http://www.intel.com/technology/security, 2005.
13. S. Jiang, S. Smith, and K. Minami. Securing web servers against insider attack. In 17th Annual Computer Security Applications Conference, Dec. 2001.
14. R. B. Lee, P. C. S. Kwan, J. P. McGregor, J. Dwoskin, and Z. Wang. Architecture for protecting critical secrets in microprocessors. In ISCA '05: Proceedings of the 32nd Annual International Symposium on Computer Architecture, pages 2-13, June 2005.
15. D. Lie, C. Thekkath, M. Mitchell, P. Lincoln, D. Boneh, J. Mitchell, and M. Horowitz. Architectural support for copy and tamper resistant software. In ASPLOS-IX: Proceedings of the ninth international conference on Architectural support for programming languages and operating systems, pages 168-177, 2000.
16. J. Marchesini, S. W. Smith, O. Wild, J. Stabiner, and A. Barsamian. Open-source applications of TCPA hardware. In 20th Annual Computer Security Applications Conference, Dec. 2004.
17. B. McCarty. Automated identity theft. IEEE Security & Privacy Magazine, 1(5), 2003.
18. R. Meushaw, M. Schneider, D. Simard, and G. Wagner. Device for and method of secure computing using virtual machines. U.S. Patent no. 6,922,774, July 2005.
19. R. Meushaw and D. Simard. NetTop: Commercial Technology in High Assurance Applications. NSA Tech Trend Notes, 9(4), http://www.vmware.com/pdf/ TechTrendNotes.pdf, 2000.
20. M. T. Raghunath, C. Narayanaswami, C. Carter, and R. Caceres. Reincarnating PCs with Portable SoulPads. Technical Report RC 23418, IBM Research, June 2005.
21. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. Stronger password authentication using browser extensions. In Proc. 14th USENIX Security Symposium, Aug. 2005.
22. C. Sapuntzakis, D. Brumley, R. Chandra, N. Zeldovich, J. Chow, M. S. Lam, and M. Rosenblum. Virtual appliances for deploying and maintaining software. In Proceedings of the Seventeenth Large Installation Systems Administration Conference (LISA 2003), October 2003.
23. S. W. Smith and S. Weingart. Building a high-performance, programmable secure coprocessor. Computer Networks, 31(9):831-860, Apr. 1999.
24. G. E. Suh, C. W. O'Donnell, I. Sachdev, and S. Devadas. Design and implementation of the aegis single-chip secure processor using physical random functions. In ISCA '05: Proceedings of the 32nd Annual International Symposium on Computer Architecture, pages 25-36, 2005.
25. R. Ta-Min, L. Litty, and D. Lie. Splitting interfaces: Making trust between applications and operating systems configurable. In Proc. 7th Symposium on Operating Systems Design and Implementation, Nov 2006.
26. Trusted Computing Group. TCG TPM Specification Version 1.2 Revision 85. http://www.trustedcomputinggroup.org, Feb. 2005.
27. J. D. Tygar and B. Yee. Dyad: a system for using phyiscally secure coprocessors. In Joint Harvard-MIT Workshop on Technological Strategies for the Protection of Intellectual Property in the Network Multimedia Environment, Apr. 1993.
28. VMware. VMware ACE. http://www.vmware.com/products/desktop/ace-features. html.
29. X.org Foundation. Documentation. http://www.x.org/, 2005.
30. T. Ylonen and C. Lonvick. SSH authentication protocol. IETF Internet Draft, Mar. 2005.