Centralized security policy support for virtual machine

LISA 2006 - 20th Large Installation System Administration Conference

Volumn , Issue , 2006, Pages 79-87

  Quynh, Nguyen Anh ^a   Ando, Ruo ^a   Takefuji, Yoshiyasu ^a  

^a KEIO UNIVERSITY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; COMPUTER CONTROL SYSTEMS; INTRUSION DETECTION; SECURITY SYSTEMS; VIRTUAL MACHINE;

DEVELOPMENT PROCESS; LOGGING DATA; MAC SCHEMES; MANDATORY ACCESS CONTROL; POLICY MANAGEMENT; SECURITY POLICY; VIRTUAL MACHINE ENVIRONMENTS;

NETWORK SECURITY;

EID: 77950583783     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. McAfee Avert Labs: Rootkits, Part 1 of 3: The Growing Threat, 2006, http://www.mcafee.com/us/ local-content/white-papers/threat-center/wp-newappleofmalwareseye-en.pdf
2. Naraine, Ryan, Microsoft: Stealth Rootkits Are Bombarding XP SP2 Boxes, 2005, http://www. eweek.com/article2/0,1895,1896605,00.asp
3. Loscocco, P. A., S. D. Smalley, P. A. Muckelbauer, R. C. Taylor, S. J. Turner, J. F. Farrell, "The inevitability of failure: The flawed assumption of security in modern computing environments," Proceedings of the 21st National Information System Security Conference, 1998
4. Bishop, M., Computer Security: Art and Science, Addison-Wesley Professional, 2002
5. Fedora Core Mailing List: "Keeping SELinux on," 2006, http://lwn.net/Articles/173812/
6. Dragovic, B., K. Fraser, S. Hand, T. Harris, A. Ho, I. Pratt, A. Warfield, P. Barham, R. Neugebauer, "Xen and the art of virtualization," Proceedings of the ACM Symposium on Operating Systems Principles, 2003
7. Pratt, I., K. Fraser, S. Hand, C. Limpach, A. Warfield, D. Magenheimer, J. Nakajima, A. Mallick, "Xen 3.0 and the art of virtualization," Proceedings of the 2005 Ottawa Linux Symposium, Ottawa, Canada, 2005
8. Xen project, Xen virtual machine monitor, 2006, http://www.cl.cam.ac.uk/Research/SRG/netos/xen/
9. Clark, B., T. Deshane, E. Dow, S. Evanchik, M. Finlayson, J. Herne, J. N. Matthews, "Xen and the art of repeated research," Proceedings of the Usenix annual technical conference, Freenix track, pp. 135-144, 2004
10. DOD 5200.28-STD: Department of defense trusted computer system evaluation criteria, 1985
11. Smalley, S., C. Vance, W. Salamon, Implementing SELinux as a Linux Security Modulep Nai labs report, NAI Labs, 2005
12. LIDS team, Linux Intrusion Detection System, 2005, http://www.lids.org
13. Ruder, Andrew, Trustees ACL, 2006, http://trustees. aeruder.net/
14. AppArmor team, AppArmor project, 2006, http://en. opensuse.org/Apparmor
15. Cowan, C., S. Beattie, G. Kroah-Hartman, C. Pu, P. Wagle, V. Gligor, "SubDomain: Parsimonious server security," 14th USENIX Systems Administration Conference (LISA 2000), New Orleans, LA, 2000
16. Wright, C., C. Cowan, J. Morris, S. Smalley, G. Kroah-Hartman, "Linux Security Modules: General Security Support for the Linux Kernel," Proceedings of the 11th Usenix Security Symposium, 2002
17. Smalley, S., T. Fraser, C. Vance, Linux Security Modules: General Security Hooks for Linux, 2003, http://lsm.immunix.org/docs/overview/linux securitymodule.html
18. Xen project, Xen interface manual, 2006, http://www.cl.cam.ac.uk/Research/SRG/netos/xen/ readmes/interface/interface.html
19. Kroah-Hartman, Greg, Driving Me Nuts ? Things Yo u Never Should Do in the Kernel, 2005, http:// www.linuxjournal.com/article/8110
20. RSBAC Team, RSBAC: Extending Linux Security Beyond the Limits, 2006, http://www.rsbac.org/
21. Spengler, Brad, Grsecurity, 2006, http://www. grsecurity.net/