Fine-grained I/O access control of the mobile devices based on the Xen architecture

Proceedings of the Annual International Conference on Mobile Computing and Networking, MOBICOM

Volumn , Issue , 2009, Pages 273-283

  Lee, Sung Min ^a   Suh, Sang Bum ^a   Jeong, Bokdeuk ^a   Mo, Sangdok ^a   Jung, Brian Myungjune ^a   Yoo, Jung Hyun ^a   Ryu, Jae Min ^a   Lee, Dong Hyuk ^a  

^a SAMSUNG Electronics   (South Korea)

Author keywords

I O access control; Smart phone security; Virtual machine; Virtual machine monitor

Indexed keywords

ACCESS CONTROL MECHANISM; I/O DEVICE; LINUX KERNEL; PERFORMANCE DEGRADATION; PRECISE CONTROL; REGRESSION EQUATION; SECURITY POLICY; SMART PHONES; STORAGE DEVICES; SYSTEM FAULTS; VIRTUAL MACHINE MONITOR; VIRTUAL MACHINE MONITORS; VIRTUAL MACHINES; VIRTUALIZATIONS;

AUTOMOBILE DRIVERS; COMPUTER OPERATING SYSTEMS; COMPUTER SCIENCE; DEGRADATION; MOBILE COMPUTING; MOBILE DEVICES; NETWORK SECURITY; PORTABLE EQUIPMENT; SECURITY SYSTEMS; TELEPHONE SETS; WIRELESS NETWORKS;

ACCESS CONTROL;

EID: 70450277224     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1614320.1614351     Document Type: Conference Paper

References (35)

1. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield, "Xen and the art of virtualization," In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), 2003.
2. S. Suh, "Secure Architecture and Implementation of Xen on ARM for Mobile Device," 4th Xen Summit, IBM T.J. Watson, April 2007.
3. th Xen Summit, Sun Microsystems, November 2007.
4. Secure Xen on ARM project, http://wiki.xensource.com/xenwiki/XenARM
5. th Annual IEEE Consumer Communications & Networking Conference, USA, January 2008.
6. th Annual IEEE Consumer Communications & Networking Conference, USA, January 2008.
7. K. Fraser, S. Hand, R. Neugebauer, I. Pratt, A. Warfield, and M. Williamson, "Safe Hardware Access with the Xen Virtual Machine Monitor," In Proceedings of the Workshop on Operating System and Architectural Support for the on-demand IT Infrastructure (OASIS), 2004.
8. K. Fraser, S. Hand, R. Neugebauer, I. Pratt, A. Warfield, and M. Williamson, "Reconstructing I/O," Technical Report UCAM-CL-TR-596, University of Cambridge, 2005.
9. A. Chou, J. Yang, B. Chelf, S. Hallem, and D. R. Engler, "An Empirical Study of Operating Systems Errors," In Symposium on Operating Systems Principles, pp. 73-88, 2001.
10. P. Chubb, "Linux Kernel Infrastructure for User-Level Device Drivers," In Proceedings of the Workshop on Object Systems and Software Architectures, 2004.
11. P. Chubb, "Get More Device Drivers out of the Kernel!," Ottawa Linux Symposium, 2004.
12. F. Armand, M. Gien, G. Maigne, G. Mardinian, "Shared Device Driver Model for Virtualized Mobile Handsets," The Workshop on Virtualization in Mobile Computing, USA, June 2008.
13. th Annual IEEE Consumer Communications & Networking Conference, USA, January 2009.
14. Android Malware, http://www.wired.com/gadgetlab/2009/01/rogue-googlepho/
15. National Security Agency, "Security-Enhanced Linux (SE-Linux)," http://www.nsa.gov/selinux
16. Trusted Computing Group, "TCG Mobile Trusted Module Specification," Specification version 0.9 Revision 1, 2006.
17. W. A. Arbaugh, D. J. Farber, J. M. Smith, "A Secure and Reliable Bootstrap Architecture," In Proceedings of IEEE Security and Privacy Conference, pp. 65-71, 1997.
18. Symantec Corporation, "SymbOS. Cabir," http://securityresponse. symantec.com/avcenter/venc/data/epoc. cabir.html
19. A. Bose and K. G. Shin, "On Mobile Viruses Exploiting Messaging and Bluetooth Services," Second International Conference on Security and Privacy in Communication Networks, USA, 2006.
20. th International Middleware Conference (Middleware 2006), Australia, November 2006.
21. Kprobes, http://www.ibm.com/developerworks/library/l-kprobes.html.
22. iperf, http://sourceforge.net/projects/iperf/
23. Bonnie, http://www.textuality.com/bonnie/
24. xentop, http://www.xen.org/
25. A. Joshi, S. T. King, G. W. Dunlap, P. M. Chen, "Detecting Past and Present Intrusions through Vulnerability-Specific Predicates," In Proceedings of the 20th Symposium on Operating Systems Principles (SOSP), October 2005.
26. A. Bose, X. Hu, K. G. Shin, T. Park, "Behavioral Detection of Malware on Mobile Handsets," The Sixth International Conference on Mobile Systems, Applications, and Services, USA, June 2008.
27. T. Garfinkel, M. Rosenblum, "A Virtual Machine Introspection Based on Architecture for Intrusion Detection," Internet Society's Symposium on Network and Distributed System Security (NDSS), 2003.
28. T. Deshane, D. Dimatos, G. Hamilton, M. Hapuarachchi, W. Hu, M. McCabe, J. N. Mathews, "Performance Isolation of a Misbehaving Virtual Machine with Xen, VMware and Solaris Containers," White Paper, Clarkson University, February 2006.
29. R. Sailer, T. Jaeger, E. Valdez, R. Caceres, R. Perez, S. Berger, J. L. Griffin, and L. van Doorn, "Building a MAC-Based Security Architecture for the Xen Open-Source Hypervisor," Annual Computer Security Application Conference, 2005.
30. R. Sailer, E. Valdez, T. Jaeger, R. Perez, L. van Doorn, J. L. Griffin, and S. Berger. "sHype: A secure hypervisor approach to trusted virtualized systems," IBM Research Report, 2005.
31. rd Xen Summit, IBM T.J. Watson, 2006.
32. R. Spencer, S. Smalley, P. Loscocco, M. Hibler, D. Andersen, and J. Lepreau, "The Flask Security Architecture: System Support for Diverse Security Policies," In Proceedings of the 8th USENIX Security Symposium, 1999.
33. th ACM Symposium on Operating Systems Principles (SOSP), 2003.
34. D. C. Nash, T. L. Martin, D. S. Ha, and M. S. Hsiao, "Towards an Intrusion Detection System for Battery Exhaustion Attacks on Mobile Computing Devices," In Proceedings of the Pervasive Computing and Communications Workshops, pp. 141-145, 2005.
35. D. C. Nash, "An Intrusion Detection System for Battery Exhaustion Attacks Mobile Computers," Master's thesis, Virginia Polytechnic Institute and State University, 2005.