Application containers without virtual machines

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 39-41

  Sherr, Micah ^a   Blaze, Matt ^a  

^a UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

Application containers; File system security; Virtual machines

Indexed keywords

APPLICATION DATA; FILE SYSTEMS; KERNEL MODIFICATIONS; OTHER APPLICATIONS; POSITION PAPERS; VIRTUAL MACHINES; WEB PAGE;

CONTAINERS;

NETWORK SECURITY;

EID: 74049153249     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655148.1655155     Document Type: Conference Paper

References (8)

1. M. Blaze. A Cryptographic File System for UNIX. In 1st ACM Conference on Computer and Communications Security (CCS), pages 9-16, 1993.
2. K. Borders, E. V. Weele, B. Lau, and A. Prakash. Protecting Confidential Data on Personal Computers with Storage Capsules. In 18th USENIX Security Symposium, August 2009.
3. I. Goldberg, D. Wagner, R. Thomas, and E. A. Brewer. A Secure Environment for Untrusted Helper Applications. In Sixth USENIX Security Symposium, July 1996.
4. T. Jaeger, R. Sailer, and X. Zhang. Analyzing integrity protection in the SELinux example policy. In SSYM'03: Proceedings of the 12th Conference on USENIX Security Symposium, 2003.
5. Z. Liang, V. N. Venkatakrishnan, and R. Sekar. Isolated program execution: An application transparent approach for executing untrusted programs. In ACSAC '03: Proceedings of the 19th Annual Computer Security Applications Conference, page 182, Washington, DC, USA, 2003. IEEE Computer Society.
6. National Security Agency (NSA). Security-Enhanced Linux (SELinux). http://www.nsa.gov/research/selinux.
7. TrueCrypt Foundation. TrueCrypt: Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux. http://www.truecrypt.org/.
8. C. Weinhold and H. Härtig. VPFS: building a virtual private file system with a small trusted computing base. In Eurosys '08: Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008, pages 81-93, 2008.