I/O for virtual machine monitors: Security and performance issues

IEEE Security and Privacy

Volumn 6, Issue 5, 2008, Pages 16-23

  Karger, Paul A ^a   Safford, David R ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTEXT SWITCHING; DEPARTMENT OF DEFENSES; DEVICE DRIVERS; HYPERVISIONS; HYPERVISOR; MAIN-FRAMES; OPERATING SYSTEMS; PARAVIRTUALIZATION; PERFORMANCE ISSUES; REAL HARDWARES; VIRTUAL MACHINE MONITORS; VIRTUAL PROCESSORS; VIRTUALIZATION;

SHELTERS (FROM ATTACK);

COMPUTER OPERATING SYSTEMS;

EID: 54049158161     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2008.119     Document Type: Article

References (31)

1. Certification Report for PR/SM LPAR for the IBM System z9 Enterprise Class and the IBM System z9 Business Class, BSI-DSZ-CC-0378-2006, Bundesamt für Sicherheit in der Informationstechnik, 2006; www.comnion criteriaportal.org/files/epfiles/0378a.pdf.
2. G.J. Popek and C.S. Kline, "The PDP-11 Virtual Machine Architecture: A Case Study," Prix. 5th ACM Symp. Operating Systems Principles, vol. 9, no. 5, 1975, pp. 97-105.
3. M.D. Vahey, A Virtualizer Efficiency Device, master's thesis, Dept. Computer Science, Univ. of California, Los Angeles, 1975.
4. P. Barbam et al., "Xen and the Art of Visualization," Proc. 19th ACM Symp. Operating Systems Principles (SOSP 03), ACM Press, 2003; www.cl.cam.ac.uk/Research/ SPvG/uetos/papers/2003-xensosp.pdf.
5. B.D. Gold et al., "A Security Retrofit of VM/370," APIPS Conf. Proc., vol. 48, AFIPS Press, 1979, pp. 335-344.
6. P.A. Karger et al., "A Retrospective on the VAX VMM Security Kernel," IEEE Trans. Software Eng., vol. 17, no. 11, 1991, pp. 1147-1165.
7. T.L. Borden, J.P. Heunessy, and J.W. Rymarczyk, "Multiple Operating Systems on One Processor Complex," IBM Systems J., vol. 28, no. 1, 1989, pp. 104-123.
8. J. Alves-Foss, C. Taylor, and P. Oman, "A Multi-Layered Approach to Security in High Assurance Systems," Proc. 37th Hawaii Int'l Conf. System Sciences, IEEE CS Press, 2004, p. 90302.2b; http://csdl.computer.org/ comp/ proceedings/hicss/2004/2056/09/205690302b.pdf.
9. W.M. Vaufleet et al., "MILS: Architecture for HighAssurance Embedded Computing" Crosstalk: J. Defense Software Eng., vol. 18, no. 8, 2005, pp. 12-16; www.stsc.hill.af.mil/crosstalk/2005/08/0508Vanfleet_etal.pdf.
10. D.J. Bernstein, "Cache-Timing Attacks on AES," Univ. of Illinois at Chicago, 2005; http://cr.yp.to/autiforgery/ cachetiming-20050414. pdf.
11. C. Percival, Cache Missing for Fun and Profit, 2005; www. daemonology.net/papers/htt.pdf.
12. O. Aciiçmez, Ç.K. Koç, and J.-P. Seifert, "On the Power of Simple Branch Prediction Analysis," Proc. ACM Symp. Information, Computer and Communications Security, 2007, pp. 312-320; http://islab.oregonstate.edu/koc/ papers/c40.pdf.
13. O. Aciiçmez, Ç.K. Koç, and J.-P. Seifert, "Predicting Secret Keys via Brauch Prediction," Topics in Cryptology-CT-RSA 2007, LNCS 4377, Springer, 2007, pp. 225-242; http://security.ece.orst.edu/koc/papers/c39.pdf.
14. P.A. Karger and H. Kurth. "Increased Information Flow Needs for High-Assurance Composite Evaluations," Proc. 2nd IEEE Int'l Information Assurance Workshop, IEEE CS Press, 2004, pp. 129-140.
15. P.A. Karger, "Multi-Level Security Requirements for Hypervisors," Proc. 21st Ann. Computer Security Applications Conf., IEEE CS Press, 2005, pp. 240-248.
16. W.-M. Hu, "Reducing Timing Channels with Fuzzy Time," Proc. 1991 IEEE Symp. Research in Security and Privacy, IEEE Press, 1991, pp. 8-20.
17. K. Bauer et al., "Low-Resource Routing Attacks against Tor," Proc. 2007 ACM Workshop Privacy in Electronic Society, , ACM Press, 2007, pp. 11-20; http://systems. cs.colorado.edu/%7Ebauerk/papers/wpes25-bauer.pdf.
18. M.B Schaefer et al., "Program Confinement in KVM/370," Proc. ACM Annual Conf., ACM Press, 1977, pp. 404-410.
19. S.W. Smith and D. Safford, "Practical Server Privacy with Secure Coprocessors," IBM Systems J., vol. 40, no. 3, 2001, pp. 683-695.
20. A. Kivity et al., "KVM: The Linux Virtual Machine Monitor," Proc. Linux Symp., vol. 1, 2007, pp. 225-230; http://ols.108.redhat.com/ 2007/Reprints/nakajima -Repriut.pdf.
21. High-bandwidth Digital Content Protection System, rev. 1.3, Digital Content Protection, 2006; www.digital-cp.com/ files/static-page_files/ 8006F925-129D-4C12-C878 99B5A76EF5C3/HDCP_Specification%20Revl_3.pdf.
22. J. Picciotto and J. Epstein, "A Comparison of Trusted X Security Policies, Architectures, and Interoperability," Proc. 8th Ann. Computer Security Applications Conf., IEEE CS Press, 1992, pp. 142-152.
23. AMD I/O Virtualization Technology (IOMMU) Specification, publication no. 34434, Advanced Micro Devices, 2006; www.amd.com/us-en/assets/ content_type/white_papers_and_tech_docs/34434.pdf.
24. J. Humphreys and T. Grieser, "Maiustreamiug Server Visualization: The Intel Approach," IDC, 2006; www. intel.com/busiuess/technologies/ idc_virtualization_wp.pdf.
25. AMD64 Virtualization Codenamed "Pacifica" Technology: Secure Virtual Machine Architecture Reference Manual, publication no. 33047, rev. 3.01, Advanced Micro Devices, 2005; www.amd.com/us-en/assets/conteut_type/ white_papers_and_tech_docs/33 047.pdf.
26. Intel Virtualization Technology Specification for the IA-32 Intel Architecture, C97063-002, Intel, 2005.
27. J.S. Hall and P.T. Robinson, "Visualizing the VAX Architecture," Proc. 18th Int'l Symp. Computer Architecture, 1991, pp. 380-389.
28. J. Nakajima and A.K. Mallick,"Hybrid-VirtualizationEnhanced Virtualization for Linux," Proc. Linux Symp., vol. 2, 2007, pp. 87-96; http://ols.108.redhat. com/2007/Reprints/nakajima-Reprint.pdf.
29. A. Menon et al., "Diagnosing Performance Overheads iu the Xeu Virtual Machine Environment," First ACM/ Usenix Conf on Virtual Execution Environments, 2005, pp. 13-23; www.hpl.hp.com/techreports/2005/ HPL-2005-80.pdf.
30. X. Zhang et al., "XenSocket: A High-Throughput Iuterdomaiu Transport for Virtual Machines," ACMI IFIP/USENIX 8th Int'l Middleware Conf., LNCS 4834, Springer, 2007, pp. 184-203.
31. P.A. Karger, Improving Security and Performance for Capability Systems, Computer Laboratory tech. report no. 149, Univ. of Cambridge, 1988; http://domino. research.ibm.coni/comni/research_people.nsf/pages/ karger.pubs.html/$FILE/trthesis.pdf.