Flexible security configuration for virtual machines

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 35-43

  Rueda, Sandra ^a   Sreenivasan, Yogesh ^a   Jaeger, Trent ^a  

^a The Pennsylvania State University   (United States)

Author keywords

Access control; Compliance; Policy; Virtual machines

Indexed keywords

COMPLIANCE; EFFECTIVE MECHANISMS; POLICY; POLICY MODEL; SECURE SYSTEM; SECURITY GOALS; VIRTUAL MACHINES; WEB APPLICATION;

ACCESS CONTROL; NETWORK LAYERS; SECURITY SYSTEMS;

COMPUTER ARCHITECTURE;

EID: 70349236163     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1456508.1456515     Document Type: Conference Paper

References (24)

1. R. J. Adair, R. U. Bayles, L. W. Comeau, and R. J. Creasy. A Virtual Machine System for the 360/40. Technical Report 320-2007, IBM Corporation, Cambridge Scientific Center, Cambridge MA, USA, May 1966.
2. Stephen Chong, Jed Liu, Andrew C. Myers, Xin Qi, K. Vikram, Lantian Zheng, and Xin Zheng. Secure web application via automatic partitioning. In SOSP, pages 31-44, 2007.
3. G. Coker. Xen Security Modules (XSM). http://www.xen.org/files/xensummit- 4/ xsm-summit-041707-Coker.pdf, April 2007. These are presentation slides from the 2007 Xen Summit.
4. Richard S. Cox, Steven D. Gribble, Henry M. Levy, and Jacob Gorm Hansen. A safety-oriented platform for web applications. In SP '06: Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P'06), pages 350-364, Washington, DC, USA, 2006. IEEE Computer Society.
5. S.W. Devine, E. Bugnion, and M. Rosenblum. Virtualization system including a virtual machine monitor for a computer with a segmented architecture. VMWare, Inc., October 1998. US Patent No. 6397242.
6. HP NetTop: A Technical Overview. Available at: http://h71028.www7.hp.com/ enterprise/ downloads/HP-NetTop-Whitepaper2.pdf, 2004.
7. B. Hicks, S. Rueda, T. Jaeger, and P. McDaniel. From trusted to secure: Building and executing applications that enforce system security. In Proceedings of the USENIX Annual Technical Conference, 2007.
8. Trent Jaeger, Kevin Butler, David H. King, Serge Hallyn, Joy Latten, and Xiaolan Zhang. Leveraging IPsec for mandatory access control across systems. In Proceedings of the Second International Conference on Security and Privacy in Communication Networks, August 2006.
9. Paul A. Karger, Mary Ellen Zurko, Douglas W. Bonin, Andrew H. Mason, and Clifford E. Kahn. A retrospective on the vax vmm security kernel. IEEE Trans. Softw. Eng., 17(11):1147-1165, 1991.
10. M. Lageman. Solaris Containers - What They Are and How to Use Them. http://www.sun.com/blueprints/ 0505/819-2679.pdf,May 2005.
11. G. McGraw and E. Felten. Java Security. Wiley Computer, 1997.
12. R. Meushaw and D. Simard. Nettop - commercial technology in high assurance applications, 2000. http: //www.vmware.com/pdf/TechTrendNotes.pdf.
13. A. C. Myers, N. Nystrom, L. Zheng, and S. Zdancewic. Jif: Java + information flow. Software release. Located at http://www.cs.cornell.edu/jif, July 2001.
14. NSA. Security-enhanced Linux. http://www.nsa.gov/selinux.
15. Oracle database. http://www.oracle.com/database.
16. The Lobo Project. Lobo: Java Web Browser. http://lobobrowser.org/.
17. Niels Provos, Markus Friedl, and Peter Honeyman. Preventing privilege escalation. In 12th USENIX Security Symposium, August 2003.
18. Sandra Rueda, Dave King, and Trent Jaeger. Verifying the compliance of trusted programs. In Proceedings of the 17th Annual USENIX Security Symposium (USENIX '08), Aug 2008.
19. John Rushby. The design and verification of secure systems. In Eight ACM Symposium on Operating System Principles, 1981.
20. Reiner Sailer, Trent Jaeger, Enriquillo Valdez, Ramon Caceres, Ronald Perez, Stefan Berger, John Linwood Griffin, and Leendert van Doorn. Building a mac-based security architecture for the xen open-source hypervisor. In ACSAC '05: Proceedings of the 21st Annual Computer Security Applications Conference, pages 276-285, Washington, DC, USA, 2005. IEEE Computer Society.
21. V. Simonet. The Flow Caml System: Documentation and User's Manual. Technical Report 0282, Institut National de Recherche en Informatique et en Automatique (INRIA), July 2003. © INRIA.
22. E. Walsh. Application of the Flask architecture to the X Window System server. In Proceedings of the 2007 SELinux Symposium, March 2007. Available at http: //selinux-symposium.org/2007/agenda.php.
23. Information Week. U.S. Spy Agencies Go Web 2.0 In Effort To Better Share Information. http: //www.informationweek.com/news/internet/ showArticle.jhtml? articleID=201801990.
24. Wikipedia. Open Source Intelligence. http://en.wikipedia.org/wiki/Open- source-intelligence.