TVDc: Managing security in the trusted virtual datacenter

Operating Systems Review (ACM)

Volumn 42, Issue 1, 2008, Pages 40-47

  Berger, Stefan ^a   Cáceres, Ramón ^a   Pendarakis, Dimitrios ^a   Sailer, Reiner ^a   Valdez, Enriquillo ^a   Perez, Ronald ^a   Schildhauer, Wayne ^b   Srinivasan, Deepa ^b  

^a IBM T J WATSON RESEARCH CENTER   (United States)

^b IBM   (United States)

Author keywords

Integrity; Isolation; Mandatory access control; Security; Virtual trusted platform module; Virtualization

Indexed keywords

DATA CENTERS; HARDWARE PLATFORM; HYPERVISOR; MANDATORY ACCESS CONTROL; OPERATING SYSTEMS; POTENTIAL SURFACES; SECURITY ARCHITECTURE; SECURITY ATTACKS; SOFTWARE COMPONENT; SYSTEMS MANAGEMENT; SYSTEMS MANAGEMENT SOFTWARE; TRUSTED COMPUTING TECHNOLOGY; TRUSTED PLATFORM MODULE; VIRTUAL MACHINES; VIRTUALIZATIONS; VIRTUALIZED ENVIRONMENT;

CLONING; COMPUTER OPERATING SYSTEMS; MIDDLEWARE; QUALITY ASSURANCE; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 54049153566     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1341312.1341321     Document Type: Conference Paper

References (22)

1. J. P. Anderson. Computer Security Technology Planning Study. ESD-TR-73-151, Vols. I and II, Air Force Electronic Division Systems, Hanscom AFB, Bedford, MA, Oct. 1972.
2. S. Berger, R. Cáceres, K. Goldman, R. Perez, R. Sailer, and L. van Doorn. vTPM: Virtualizing the Trusted Platform Module. 15th USENIX Security Symposium, July 2006.
3. W. E. Boebert and R. Y. Kain. A Practical Alternative to Hierarchical Integrity Policies. 8th National Computer Security Conference, 1985.
4. D. F. C. Brewer and M. J. Nash. The Chinese Wall Security Policy. IEEE Symposium on Security and Privacy, May 1989.
5. A. Bussani, J. L. Griffin, B. Jasen, K. Julisch, G. Karjoth, H. Maruyama, M. Nakamura, R. Perez, M. Schunter, A. Tanner, L. van Doorn, E. V. Herreweghen, M. Waidner, S. Yoshihama. Trusted Virtual Domains: Secure Foundations for Business and IT Services. Research Report RC23792, IBM Research, November 2005.
6. S. Cabuk, C. I. Dalton, H. Ramasamy, and M. Schunter. Towards Automated Provisioning of Secure Virtualized Networks. Research Report RZ3692. IBM Research, June 2007.
7. J. L. Griffin, T. Jaeger, R. Perez, R. Sailer, L. van Doorn, and R. Cáceres. Trusted Virtual Domains: Toward Secure Distributed Services. 1st IEEE Workshop on Hot Topics in System Dependability, June 2005.
8. IEEE Std. 802.1Q-2003, Virtual Bridged Local Area Networks; ISBN 0-7381-3662-X.
9. Intel Corporation. Trusted Execution Technology Preliminary Architecture Specification, August 2007. URL:http://www.intel.com/technology/security/ downloads/315168.htm
10. T. Jaeger, R. Sailer, and U. Shankar. PRIMA: Policy-Reduced Integrity Measurement Architecture. 11th ACM Symposium on Access Control Models and Technologies (SACMAT), June 2006.
11. W. Mao, H. Jin, and A. Martin. Innovations for Grid Security from Trusted Computing. White paper, June 2005.
12. W. Mao, F. Yan, and C. Chen. Daonity-Grid Security with Behavior Conformity from Trusted Computing. 1st ACM Workshop on Scalable Trusted Computing (STC 2006).
13. H. Maruyama, F. Seliger, N. Nagaratnam, T. Ebringer, S. Munetoh, S. Yoshihama, and T. Nakamura. Trusted Platform on Demand. Technical Report RT0564, IBM, February 2004R.
14. Meushaw and D. Simard. NetTop-Commercial Technology in High Assurance Applications. National Security Agency Tech Trend Notes, Fall 2000.
15. J. M. McCune, S. Berger, R. Cáceres, T. Jaeger, and R. Sailer. Shamon - A System for Distributed Mandatory Access Control. 22nd Annual Computer Security Applications Conference (ACSAC), December 2006.
16. Open Trusted Computing. URL:http://www.opentc.net.
17. R. Sailer, T. Jaeger, E. Valdez, R. Cáceres, R. Perez, S. Berger, J. L. Griffin, and L. van Doorn. Building a MAC-based Security Architecture for the Xen Opensource Hypervisor. 21st Annual Computer Security Applications Conference (ACSAC), December 2005.
18. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and Implementation of a TCG-based Integrity Measurement Architecture. 13th USENIX Security Symposium, August 2004.
19. Trusted Computing Group. URL:https//www.trustedcomputinggroup.org.
20. E. Valdez, R. Sailer, and R. Perez: Retrofitting the IBM POWER Hypervisor to Support Mandatory Access Control. 23rd Annual Computer Security Applications Conference (ACSAC), December 2007 (Accepted for publication).
21. F. Yan, W. Quang, Z. Shen, C. Chen, H. Zhang, and D. Zou. Danoity: An Experience on Enhancing Grid Security by Trusted Computing Technology. ATC, volume 4158 of LNCS, Springer, 2006.
22. Xen Users' Guide Chapter 10 for the Xen sHype/Access Control Module: http://www.cl.cam.ac.uk/research/srg/netos/xen/readmes/user/user.html