Using hypervisor to provide data secrecy for user applications on a per-page basis

VEE'08 - Proceedings of the 4th International Conference on Virtual Execution Environments

Volumn , Issue , 2008, Pages 71-80

  Yang, Jisoo ^a   Shin, Kang G ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

Application protection; Data privacy; Hypervisor; Virtualization

Indexed keywords

ACCESS PERMISSIONS; APPLICATION DATA; APPLICATION EXECUTION; DATA CENTERS; HYPERVISOR; MEMORY PAGES; MODERN COMPUTER SYSTEMS; OPERATING SYSTEMS; OPTIMIZATION TECHNIQUES; RUNNING-IN; RUNTIME OVERHEADS; SECURITY CONTEXT; SERVER APPLICATIONS; TRUSTED COMPUTING BASE; VIRTUAL ADDRESS SPACE; VIRTUALIZATION; VIRTUALIZATIONS; WEB SERVERS;

COMPUTER OPERATING SYSTEMS; NETWORK SECURITY; SERVERS;

DATA PRIVACY;

EID: 77952404303     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1346256.1346267     Document Type: Conference Paper

References (33)

1. Diet Libe a libe optimized for small size, http://www.fefe.de/dietlibc/.
2. Boaz Barak, Oded Goldreich, Rusell Impagliazzo, Steven Rudich, Amit Sahai, Salil Vadhan, and Ke Yang. On the (im)possibility of obfuscating programs. In Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology (CRYPTO), pages 1-18, Aug 2001.
3. Paul Barham, Boris Dragovic, Keir Fraser, Steve Hand, Tim Harris, Alex Ho, Rolf Neugebauer Ian Pratt, and Andrew Warfield. Xen and the art of virtualization. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), pages 164-177, Oct 2003.
4. Stefan Berger, Ramón Cáceres, Kenneth A. Goldman, Ronald Perez, Reiner Sailer, and Leendert van Doom. vTPM: Virtualizing the trusted platform module. In Proceedings of the 15th USENIX Security Symposium, pages 305-320, Aug 2006.
5. Thomas C. Bressoud and Fred B. Schneider. Hypervisor-based faulttolerance. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP), pages 1-11, Dec 1995.
6. David Brumley and Dawn Song. Privtrans: Automatically partitioning programs for privilege separation. In Proceedings of the 13th USENIX Security Symposium, Aug 2004.
7. Benjie Chen and Robert Morris. Certifying program execution with secure processors. In Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HotOS), May 2003.
8. Tzi-cker Chiueh, Ganesh Venkitachalam, and Prashant Pradhan. Integrating segmentation and paging protection for safe, efficient and transparent software extensions. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP), pages 140-153, Dec 1999.
9. Christian Collberg, Clark Thomborson, and Douglas Low. Manufacturing cheap, resilient, and stealthy opaque constructs. In Proceedings of the 25th ACM Symposium on Principles of Programming Languages (POPL), pages 184-196, Jan 1998.
10. Christian S. Collberg and Clark Thomborson. Watermarking, tamper-proofing, and obfuscation - tools for software protection. Transactions on Software Engineering, 28(8):735-746, 2002.
11. Landon P. Cox and Peter M. Chen. Pocket hypervisors: Opportunities and challenges. In Proceedings of the 8th IEEE Workshop on Mobile Computing Systems and Applications (HotMobile), Feb 2007.
12. Tal Garfinkel, Ben Pfaf, Jim Chow, Mendel Rosenblum, and Dan Boneh. Terra: A virtual machine-based platform for trusted computing. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), pages 193-206, Oct 2003.
13. Tal Garfinkel and Mendel Rosenblum. A virtual machine introspection based architecture for intrusion detection. In Proceedings of the 10th Annual Symposium on Network and Distributed System Security (NDSS), pages 191-206, Feb 2003.
14. Hermann Härtig. Security architectures revisited. In Proceedings of the 10th Workshop on ACM SIGOPS European Workshop, pages 16-23, Sep 2002.
15. Michael Hohmuth, Michael Peter, Hermann Härtig, and Jonathan S. Shapiro. Reducing TCB size by using untrusted components - small kernels versus virtual-machine monitors. In Proceedings of the 11th Workshop on ACM SIGOPS European Workshop, page 22, Sep 2004.
16. Intel Corporation. IA-32 Intel Architecture Software Developer's Manual.
17. Ashlesha Joshi, Samuel T. King, George W. Dunlap, and Peter M. Chen. Detecting past and present intrusions through vulnerability specific predicates. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP), pages 91-104, Oct 2005.
18. Bernhard Kauer. OSLO: Improving the security of trusted computing. In Proceedings of the 16th USENIX Security Symposium, pages 229-237, Aug 2007.
19. Samuel T. King and Peter M. Chen. Backtracking intrusions. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), pages 223-236, Oct 2003.
20. Butler W. Lampson. Protection. In Proceedings of the 5th Annual Princeton Conference on Information Sciences and Systems, pages 437-443, Mar 1971.
21. David Lie, Chandramohan A. Thekkath, and Mark Horowitz. Implementing an untrusted operating system on trusted hardware. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), pages 178-192, Oct 2003.
22. Cullen Linn and Saumya Debray. Obfuscation of executable code to improve resistance to static disassembly. In Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS), pages 27-31, Oct 2003.
23. Birgit Pfitzmann, James Riordan, Christian Stüble, Michael Waidner, and Arnd Weber. The PERSEUS system architecture. Technical Report RZ 3335 (#93381), IBM Research Division, Zurich Laboratory, Apr 2001.
24. Jerome H. Saltzer. Protection and the control of information sharing in multics. Communications of the ACM, 17(7):388-402, Jul 1974.
25. Jerome H. Saltzer and Michael D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9):1278-1308, Sep 1975.
26. Arvind Seshadri, Mark Luk, Ning Qu, and Adrian Perrig. SecVisor: A tiny hypervisor to provide lifetime kernel code integrity for commodity OSes. In Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP), pages 335-350, Oct 2007.
27. Lenin Singaravelu, Calton Pu, Hermann Härtig, and Christian Helmuth. Reducing TCB complexity for security-sensitive applications: Three case studies. In Proceedings of the EuroSys 2006, Apr 2006.
28. G. Edward Suh, Dwaine Clarke, Blaise Gassend, Marten van Dijk, and Srinivas Devadas. AEGIS: Architecture for tamper-evident and tamper-resistant processing. In Proceedings of the 17th International Conference on Supercomputing (ICS), pages 160-171, Jun 2003.
29. Richard Ta-Min, Lionel Litty, and David Lie. Splitting interfaces: Making trust between applications and operating system configurable. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI), Nov 2006.
30. Carl A. Waldspurger. Memory resource management in VMware ESX Server. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI), pages 181-194, Dec 2002.
31. Emmett Witchel, Junghwan Rhee, and Krste Asanovié. Mondrix: Memory isonation for linux using mondriaan memory protection. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP), pages 31-114, Oct 2005.
32. Steve Zdancewic, Lantian Zheng, Nathaniel Nystrom, and Andrew C. Myers. Untrusted hosts and confidentiality: Secure program partitioning. In Proceedings of the 18th ACM Symposium on Operating Systems Principles (SOSP), pages 1-14, Oct 2001.
33. Xin Zhao, Kevin Borders, and Atul Prakash. Towards protecting sensitive files in a compromised system. In Proceedings of the 3rd International IEEE Security in Storage Workshop, Dec 2005.