Virtual machines jailed: Virtualization in systems with small trusted computing bases

ACM International Conference Proceeding Series

Volumn , Issue , 2008, Pages 18-23

  Peter, Michael ^a   Schild, Henning ^a   Lackorzynski, Adam ^a   Warg, Alexander ^a  

^a DRESDEN UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Microkernel; Secure systems; Small trusted computing base; Virtualization

Indexed keywords

CRITICAL COMPONENT; CRITICAL PARTS; LEGACY APPLICATIONS; MICROKERNEL; OPERATING SYSTEMS; PROTECTION DOMAINS; SECURE SYSTEMS; SENSITIVE APPLICATION; SMALL TRUSTED COMPUTING BASE; SOURCE CODE ACCESS; TRUSTED COMPUTING BASE; TRUSTED COMPUTING BASIS; VIRTUAL MACHINES; VIRTUALIZATION; VIRTUALIZATIONS;

COMPUTER OPERATING SYSTEMS;

COMPUTER SCIENCE;

EID: 70349159963     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1518684.1518688     Document Type: Conference Paper

References (24)

1. KVM - Kernel-based Virtualiztion Machine. White paper, Qumranet Inc., 2006.
2. Mozilla foundation security advisories, 2009.
3. Vulnerability Report: Linux Kernel 2.6.x, 2009.
4. Vulnerability Report: X Window System 11 (X11) 7.x, 2009.
5. Advanced Micro Devices. AMD I/O Virtualization Technology (IOMMU) Specification, rev 1.20 edition, 2007.
6. Advanced Micro Devices. AMD64 Architecture Programmer's Manual Volume 2: System Programming, rev 3.14 edition, 2007.
7. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In SOSP '03: Proceedings of the nineteenth ACM symposium on Operating systems principles, pages 164-177, New York, NY, USA, 2003. ACM.
8. F. Bellard. QEMU, a fast and portable dynamic translator. In ATEG '05: Proceedings of the annual conference on USENIX Annual Technical Conference, pages 41-41, Berkeley, CA, USA, 2005. USENIX Association.
9. R. Bhargava, B. Serebrin, F. Spadini, and S. Manne. Accelerating two-dimensional page walks for virtualized systems. In ASPLOS XIII: Proceedings of the 13th international conference on Architectural support for programming languages and operating systems, pages 26-35, New York, NY, USA, 2008. ACM.
10. S. Biemueller and U. Dannowski. L4-Based Real Virtual Machines - An API Proposal. In Proceedings of the MIKES 2007: First International Workshop on MicroKernels for Embedded Systems, pages 36-42, Sydney, Australia, Jan. 16 2007.
11. S. Chong, J. Liu, A. C. Myers, X. Qi, K. Vikram, L. Zheng, and X. Zheng. Secure web application via automatic partitioning. In SOSP '07: Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles, pages 31-44, New York, NY, USA, 2007. ACM.
12. M. Hohmuth, M. Peter, H. Härtig, and J. Shapiro. Reducing TCB size by using untrusted components-small kernels versus virtual machine monitors. In in Proc. of the 11th ACM SIGOPS European Workshop, page 22. ACM Press, 2004.
13. H. Härtig, M. Hohmuth, J. Liedtke, J. Wolter, and S. Schönberg. The performance of μ-kernel-based systems. In SOSP '97: Proceedings of the sixteenth ACM symposium on Operating systems principles, pages 66-77, New York, NY, USA, 1997. ACM.
14. Intel Corporation. Intel 64 and IA-32 Architectures Software Developer's Manual Volume SB: System Programming Guide, Part 2, 253669-028us edition, 2008.
15. Intel Corporation. Intel Virtualization Technology for Directed I/O, rev 1.2 edition, September 2008.
16. J. Liedtke. On microkernel construction. In Proceedings of the 15th ACM Symposium on Operating System, Principles (SOSP-15), Copper Mountain Resort, CO, Dec. 1995.
17. Y. K. Malaiya, Y. K. Malaiya, J. Denton, and J. Denton. Estimating Defect Density Using Test Coverage. Technical report, 1998.
18. J. M. McCune, B. J. Parno, A. Perrig, M. K. Reiter, and H. Isozaki. Flicker: an execution infrastructure for tcb minimization. In Eurosys '08: Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008, pages 315-328, New York, NY, USA, 2008. ACM.
19. M. S. Miller, K.-P. Yee, and J. Shapiro. Capability Myths Demolished, 2003.
20. D. G. Murray and S. Hand. Privilege separation made easy: trusting small libraries not big processes. In EUROSEC '08: Proceedings of the 1st European workshop on system, security, pages 40-46, New York, NY, USA, 2008. ACM.
21. D. G. Murray, G. Milos, and S. Hand. Improving Xen security through disaggregation. In VEE '08: Proceedings of the fourth, ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, pages 151-160, New York, NY, USA, 2008. ACM.
22. J. Saltzer and M. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9):1278-1308, Sept. 1975.
23. L. Singaravelu, C. Pu, H. Härtig, and C. Helmuth. Reducing TCB complexity for security-sensitive applications: three case studies. SIGOPS Oper. Syst. Rev., 40(4):161-174, 2006.
24. L. Singaravelu, C. Pu, H. Härtig, and C. Helmuth. Reducing TCB complexity for security-sensitive applications: three case studies. SIGOPS Oper. Syst. Rev., 40(4):161-174, 2006.