Bit visor: A thin hypervisor for enforcing i/o device security

Proceedings of the 2009 ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, VEE'09

Volumn , Issue , 2009, Pages 121-130

  Shinagawa, Takahiro ^a   Eiraku, Hideki ^a   Tanimoto, Kouichi ^a   Omote, Kazumasa ^b   Hasegawa, Shoichi ^a   Horie, Takashi ^a   Hirano, Manabu ^c   Kourai, Kenichi ^d   Oyama, Yoshihiro ^e   Kawai, Eiji ^f   Kono, Kenji ^g   Chiba, Shigeru ^h   Shinjo, Yasushi ^a   Kato, Kazuhiko ^a  

^a UNIVERSITY OF TSUKUBA   (Japan)

^b JAPAN ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY   (Japan)

^c TOYOTA NATIONAL COLLEGE OF TECHNOLOGY   (Japan)

^d KYUSHU INSTITUTE OF TECHNOLOGY   (Japan)

^e UNIVERSITY OF ELECTRO COMMUNICATIONS   (Japan)

^f NARA INSTITUTE OF SCIENCE AND TECHNOLOGY   (Japan)

^g KEIO UNIVERSITY   (Japan)

^h TOKYO INSTITUTE OF TECHNOLOGY   (Japan)

Author keywords

Hypervisors; Parapass through; Shadow DMA descriptor; Trusted computing base; Virtual machine monitors

Indexed keywords

HYPERVISORS; PARAPASS-THROUGH; SHADOW DMA DESCRIPTOR; TRUSTED COMPUTING BASE; VIRTUAL MACHINE MONITORS;

COMPUTER OPERATING SYSTEMS; CRYPTOGRAPHY;

AUTOMOBILE DRIVERS;

EID: 67650079952     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1508293.1508311     Document Type: Conference Paper

References (30)

1. Mohit Aron and Peter Druschel. Soft timers: efficient microsecond software timer support for network processing. In Proc. of the 17th ACM Symposium on Operating Systems Principles, pages 232-246, December 1999. (Pubitemid 129548359)
2. Kurniadi Asrigo, Lionel Litty, and David Lie. Using vmm-based sensors to monitor honeypots. In Proc. of the 2nd International Conference on Virtual Execution Environments, pages 13-23, June 2006. (Pubitemid 44059955)
3. Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, and Andrew Warfield. Xen and the art of virtualization. In Proc. of the 19th ACM Symposium on Operating Systems Principles, pages 164-177, October 2003. (Pubitemid 40929695)
4. Peter M. Chen and Brian D. Noble. When virtual is better than real. In Proc. of the 8th Workshop on Hot Topics in Operating Systems (HotOS-VIII), pages 133-138, May 2001. (Pubitemid 34099931)
5. Xiaoxin Chen, Tal Garfinkel, E. Christopher Lewis, Pratap Subrahmanyam, Carl A. Waldspurger, Dan Boneh, Jeffrey Dwoskin, and Dan R.K. Ports. Overshadow: A virtualization-based approach to retrofitting protection in commodity operating systems. In Proc. of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems, pages 2-13, March 2008. (Pubitemid 351585389)
6. Andy Chou, Junfeng Yang, Benjamin Chelf, and Dawson Engler. An empirical study of operating systems errors. In Proc. of the 18th ACM Symposium on Operating Systems Principles, pages 73-88, October 2001. (Pubitemid 33612606)
7. Advanced Micro Devices. AMD64 architecture programmer's manual volume2: System programming rev 3.14, September 2007.
8. Vinod Ganapathy, Matthew J. Renzelmann, Arini Balakrishnan, Michael M. Swift, and Somesh Jha. The design and implementation of microdrivers. In Proc. of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems, pages 168-178, March 2008. (Pubitemid 351585404)
9. Tal Garfinkel, Ben Pfaff, Jim Chow, Mendel Rosenblum, and Dan Boneh. Terra: A virtual machine-based platform for trusted computing. In Proc. of the 19th ACM Symposium on Operating Systems Principles, pages 193-206, October 2003. (Pubitemid 40929697)
10. Ian Goldberg, David Wagner, Randi Thomas, and Eric A. Brewer. A secure environment for untrusted helper applications. In Proc. of the 6th USENIX Security Symposium, July 1996.
11. R. Goldberg. Architectural Principles for Virtual Computer Systems. PhD thesis, Harvard University, February 1973.
12. IEEE. IEEE standard for cryptographic protection of data on blockoriented storage devices, April 2008. IEEE Std 1619-2007.
13. Stephen T. Jones, Andrea C. Arpaci-Dusseau, and Remzi H. Arpaci- Dusseau. Vmm-based hidden process detection and identification using lycosid. In Proc. of the 4th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, pages 91-100, March 2008.
14. Kenichi Kourai and Shigeru Chiba. HyperSpector: Virtual distributed monitoring environments for secure intrusion detection. In Proc. of the 1st ACM/USENIX International Conference on Virtual Execution Environments, pages 197-207, June 2005. (Pubitemid 43195515)
15. Jiuxing Liu, Wei Huang, Bulent Abali, and Dhabaleswar K. Panda. High performance vmm-bypass i/o in virtual machines. In Proc. of the 2006 USENIX Annual Technical Conference, pages 29-42, May/June 2006.
16. David E. Lowell, Yasushi Saito, and Eileen J. Samberg. Devirtualizable virtual machines enabling general, single-node, online maintenance. In Proc. of the 11th International Conference on Architectural Support for Programming Languages and Operating Systems, pages 211-233, October 2004. (Pubitemid 40122435)
17. Larry McVoy and Carl Staelin. lmbench: Portable tools for performance analysis. In Proc. of the 1996 USENIX Annual Technical Conference, January 1996.
18. R. Meushaw and D. Simard. Nettop: Commercial technology in high assurance applications, 2000.
19. Junichi Murakami. A hypervisor IPS based on hardware assisted virtualization technology. In Black Hat USA 2008, August 2008.
20. Derek G. Murray, Grzegorz Milos, and Steven Hand. Improving xen security through disaggregation. In Proc. of the 4th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, pages 151-160, March 2008.
21. Gil Neiger, Amy Santoni, Felix Leung, Dion Rodgers, and Rich Uhlig. Intel virtualization technology: Hardware support for efficient processor virtualization. Intel Technology Journal, 10(03):167-177, August 2006.
22. Mahendra Ramachandran, Ned Smith, Matthew Wood, Sharad Garg, Jim Stanley, Eswar Eduri, Rinat Rappoport, Arie Chobotaro, Carl Klotz, and Lori Janz. New client virtualization usage models using intel virtualization technology. Intel Technology Journal, 10(03):205-216, August 2006.
23. John Scott Robin. Analysis of the intel pentium's ability to support a secure virtual machine monitor. In Proc. of the 9th USENIX Security Symposium, August 2000.
24. Jerome H. Saltzer and Michael D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9):1278-1308, September 1975.
25. Arvind Seshadri, Mark Luk, Ning Qu, and Adrian Perrig. SecVisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity oses. In Proc. of the 21st ACM Symposium on Operating Systems Principles, pages 335-350, October 2007.
26. Jeffrey Shafer, David Carr, Aravind Menon, Scott Rixner, Alan L. Cox, Willy Zwaenepoel, and Paul Willmann. Concurrent direct network access for virtual machine monitors. In Proc. of the IEEE 13th International Symposium on High Performance Computer Architecture, pages 306-317, February 2007. (Pubitemid 47208175)
27. Lenin Singaravelu, Calton Pu, Hermann Härtig, and Christian Helmuth. Reducing TCB complexity for security-sensitive applications: Three case studies. In Proc. of the 1st ACM SIGOPS/EuroSys European Conference on Computer Systems, pages 161-174, April 2006. (Pubitemid 47485745)
28. VMWare. Vmware esx server virtual infrastructure node evaluator's guide, November 2005. http://www.vmware.com/pdf/esx-vin-eval.pdf.
29. David A. Wheeler. Counting source lines of code (sloc). http://www.dwheeler.com/sloc/.
30. Jisoo Yang and Kang G. Shin. Using hypervisor to provide data secrecy for user applications on a per-page basis. In Proc. of the 4th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, pages 71-80, March 2008.