KvmSec: A security extension for Linux kernel virtual machines

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2009, Pages 2029-2034

  Lombardi, Flavio ^a   Di Pietro, Roberto ^b,c  

^a CNR   (Italy)

^b UNIVERSITAT ROVIRA I VIRGILI   (Spain)

^c ROMA TRE UNIVERSITY   (Italy)

Author keywords

Hypervisor; Integrity; Kernel virtual machine; Real time monitoring; Virtual machine

Indexed keywords

ARCHITECTURAL LAYERS; DATA CENTERS; FURTHER DEVELOPMENT; HYPERVISOR; LINUX KERNEL; REAL TIME MONITORING; ROADMAP; ROOTKITS; SECURE COMMUNICATIONS; SECURITY MANAGEMENT SYSTEMS; SERVER FARMS; SYSTEM SECURITY; VIRTUAL MACHINES; VIRTUALIZATIONS;

COMPUTER SCIENCE; NETWORK SECURITY; TECHNOLOGICAL FORECASTING;

COMPUTER OPERATING SYSTEMS;

EID: 72949120122     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1529282.1529733     Document Type: Conference Paper

References (16)

1. Advanced intrusion detection environment. http://sourceforge.net/ projects/aide, 2005.
2. Sgi inc. lkcd - Linux kernel crash dump. http://lkcd.sf.net, April 2006.
3. M. Aiken, M. Fähndrich, C. Hawblitzel, and al. Deconstructing process isolation. In MSPC '06: Proc. of the 2006 workshop on Memory system perf. and correctness, pages 1-10, New York, NY, USA, 2006.
4. P. Barham, B. Dragovic, K. Fraser, and al. Xen and the art of virtualization. SIGOPS Operating Syst. Review, 37(5):164-177, 2003.
5. F. Bellard. Qemu, a fast and portable dynamic translator. In ATEC '05: Proc. of USENIX Annual Tech. conf., pages 41-41, Berkeley, CA, USA, 2005.
6. R. Di Pietro and L. V. Mancini. Intrusion Detection Systems, volume 38 of Advances in Information Security. Springer-Verlag, 2008.
7. T. Jaeger, R. Sailer, and Y. Sreenivasan. Managing the risk of covert information flows in virtual machine systems. In SACMAT '07: Proc. of the 12th ACM symposium on Access control models and technologies, pages 81-90, New York, NY, USA, 2007.
8. P. A. Loscocco, P. W. Wilson, J. A. Pendergrass, and al. Linux kernel integrity measurement using contextual inspection. In STC '07: Proc. of the 2007 ACM workshop on Scalable trusted computing, pages 21-29, New York, NY, USA, 2007.
9. B. D. Payne, M. Carbone, M. Sharif, and W. Lee. Lares: An architecture for secure active monitoring using virtualization. In SP '08: Proc. of the 2008 IEEE symposium on Security and Privacy), pages 233-247, Washington DC, USA, 2008.
10. Qumranet. Linux kernel virtual machine. http://kvm.qumranet.com.
11. N. A. Quynh and Y. Takefuji. A novel approach for a le-system integrity monitor tool of xen virtual machine. In ASIACCS '07: Proc. of the 2nd ACM symp. on Information, computer and comm. security, pages 194-202, New York, NY, USA, 2007.
12. N. A. Quynh and Y. Takefuji. Towards a tamper-resistant kernel rootkit detector. In SAC '07: Proc. of the 2007 ACM symposium on Applied computing, pages 276-283, New York, NY, USA, 2007.
13. R. Sailer, X. Zhang, T. Jaeger, and al. Design and implementation of a TCG-based integrity measurement architecture. In SSYM'04: Proc. of the 13th conf. on USENIX Security symposium, pages 16-16, Berkeley, CA, USA, 2004.
14. A. Seshadri, M. Luk, N. Qu, and A. Perrig. Secvisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity oses. In SOSP '07: Proc. of ACM SIGOPS symposium on Operating systems principles, pages 335-350, New York, NY, USA, 2007.
15. F. Tamberi, D.Maggiari, D. Sgandurra, and al. Semantics-driven introspection in a virtual environment. In Proc. ISIAS 08, pages 299-302, 2008.
16. J. Yang and K. G. Shin. Using hypervisor to provide data secrecy for user applications on a per-page basis. In Proc. of the ACM intl. VEE conf., pages 71-80, New York, NY, USA, 2008.