PALM: Security preserving VM live migration for systems with VMM-enforced protection

Proceedings - 3rd Asia-Pacific Trusted Infrastructure Technologies Conference, APTC 2008

Volumn , Issue , 2008, Pages 9-18

  Zhang, Fengzhe ^a   Huang, Yijian ^a   Wang, Huihong ^a   Chen, Haibo ^a   Zang, Binyu ^a  

^a FUDAN UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

COMMODITY OPERATING SYSTEMS; DISTRIBUTED COMPUTING; EXECUTION ENVIRONMENTS; LOAD BALANCES; MIGRATION SYSTEMS; PERFORMANCE DEGRADATIONS; PROTECTION LEVELS; PROTECTION SYSTEMS; PROTOTYPE SYSTEMS; SECURITY VULNERABILITIES; VIRTUAL MACHINE MONITORS; VIRTUAL MACHINES;

COMPUTER OPERATING SYSTEMS; DEGRADATION; ELECTRIC POWER SYSTEM PROTECTION; FAULT TOLERANCE; GRID COMPUTING; QUALITY ASSURANCE; RELIABILITY;

FAULT TOLERANT COMPUTER SYSTEMS;

EID: 58049137106     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/APTC.2008.15     Document Type: Conference Paper

References (23)

1. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In Proc. of SOSP'03, pages 164-177. ACM, 2003.
2. M. Bishop and M. Dilger. Checking for Race Conditions in File Accesses. Computing Systems, 2(2):131-152, 1996.
3. G. Boss, P. Malladi, D. Quan, L. Legregni, and H. Hall. Cloud Computing. White paper, IBM Corporation, 2007.
4. H. Chen, J. Chen, W. Mao, and F. Yan. Daonity-grid security from two levels of virtualization. Information Security Technical Report, 12(3):123-138, 2007.
5. H. Chen, F. Zhang, C. Chen, R. Chen, B. Zang, P. Yew, and W. Mao. Tamper-Resistant Execution in an Untrusted Operating System Using A Virtual Machine Monitor. Technical Report 2007-08001, Parallel Processing Institute, Fudan University, Aug. 2007.
6. P. Chen and B. Noble. When virtual is better than real. In Proc. of the 8th IEEE Workshop on Hot Topics in Operating Systems, May 2001.
7. X. Chen, T. Garfinkel, E. Lewis, P. Subrahmanyam, C. Waldspurger, D. Boneh, J. Dwoskin, and D. Ports. Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems. Proceedings of the 13th international conference on Architectural support for programming languages and operating systems, pages 2-13, 2008.
8. C. Clark, K. Fraser, S. Hand, J. G. Hansen, E. Jul, C. Limpach, I. Pratt, and A. Warfield. Live migration of virtual machines. In Proc. of NSDI, pages 273-286, 2005.
9. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: a virtual machine-based platform for trusted computing. In Proc. of SOSP'03, pages 193-206, 2003.
10. J. Hansen and A. Henriksen. Nomadic operating systems. Master's thesis, Dept. of Computer Science, University of Copenhagen, Denmark, 2002.
11. Intel. LaGrande Technology Architectural Overview. Technical Report 252491-001, Intel Corporation, Sep. 2003.
12. D. Kuhlmann, R. Landfermann, H. Ramasamy, M. Schunter, G. Ramunno, and D. Vernizzi. An open trusted computing architecture - secure virtual machines enabling user-defined policy enforcement. Technical Report RZ3655, IBM Research, 2006.
13. W. McPhee. Operating system integrity in OS/VS2. IBM Journal of Research and Development, 13(3):230, 1974.
14. D. Murray, G. Milos, and S. Hand. Improving Xen security through disaggregation. Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, pages 151-160, 2008.
15. M. Nelson, B.-H. Lim, and G. Hutchins. Fast transparent migration for virtual machines. In Proc. USENIX ATC, 2005.
16. M. Peinado, Y. Chen, P. England, and J. Manferdelli. NGSCB: A Trusted Open System. In Proc. ACISP, pages 86-97, 2004.
17. R. Sailer, E. Valdez, T. Jaeger, R. Perez, L. van Doorn, J. Griffin, and S. Berger. sHype: Secure Hypervisor Approach to Trusted Virtualized Systems. Technical Report RC23511, IBM Research, Feb. 2005.
18. C. P. Sapuntzakis, R. Chandra, B. Pfaff, J. Chow, M. S. Lam, and M. Rosenblum. Optimizing the migration of virtual computers. In Proceedings of the Fifth Symposium on Operating Systems Design and Implementation(OSDI), pages 377-390, Boston, MA, USA., December 2002.
19. G. Strongin. Trusted computing using AMD Pacifica and Presidio secure virtual machine technology. Information Security Technical Report, 10(2):120-132, 2005.
20. System Architecture Group. L4Ka::Pistachio Whitepaper. White paper, University of Karlsruhe, Germany, 2003.
21. R. Ta-Min, L. Litty, and D. Lie. Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable. In Proc. of OSDI'06, pages 279-292, 2006.
22. A.Whitaker, R. Cox, M. Shaw, and S. Gribble. Constructing services with interposable virtual hardware. Proceedings of the First Symposium on Networked Systems Design and Implementation (NSDI04), 2004.
23. J. Yang and K. Shin. Using hypervisor to provide data secrecy for user applications on a per-page basis. Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, pages 71-80, 2008.