Applications of a feather-weight virtual machine

VEE'08 - Proceedings of the 4th International Conference on Virtual Execution Environments

Volumn , Issue , 2008, Pages 171-180

  Yu, Yang ^a   Kolam, Hariharan ^a   Lam, Lap Chung ^a   Chiueh, Tzi Cker ^a  

^a Stony Brook University   (United States)

Author keywords

Binary server; Browser exploit; Information theft; Virtual machine; Web crawler

Indexed keywords

APPLICATION DEPLOYMENT; CONFIDENTIAL FILES; DESIGN GOAL; DISPLAY-ONLY FILE SERVERS; END USERS; EXECUTION ENVIRONMENTS; FAULT-TOLERANT; FILE CONTENTS; FILE SERVERS; INFORMATION THEFTS; RESOURCE SHARING; RUNNING-IN; RUNTIME ENVIRONMENTS; VIRTUAL MACHINE; VIRTUAL MACHINES; VIRTUALIZATIONS; WEB CRAWLERS;

CRIME; SERVERS; WORLD WIDE WEB;

WINDOWS OPERATING SYSTEM;

EID: 77952414590     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1346256.1346280     Document Type: Conference Paper

References (29)

1. Yang Yu, Fanglu Guo, Susanta Nanda, Lap-chung Lam, and Tzi-cker Chiueh. A Feather-weight Virtual Machine for Windows Applications. In Proceedings of the 2nd International Conference on Virtual Execution Environments, June 2006.
2. Fanglu Guo, Yang Yu, and Tzi-cker Chiueh. Automated and Safe Vulnerability Assessment. In Proceedings of the 21th Annual Computer Security Applications Conference, December 2005.
3. Yang Yu and Tzi-cker Chiueh. Display-Only File Server: A Solution Against Information Theft due to Insider Attack. In Proceedings of 4th ACM Workshop on Digital Rights Management, December 2004.
4. Kevin Lawton, Bryce Denney, N. David Guarneri, Volker Ruppert, and Christophe Bothamy. Bochs User Manual. http://bochs.sourceforge.net/doc/docbook/ user/index.html.
5. VMware. VMware Products. http://www.vmware.com/products/home.html.
6. Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, and Andrew Warfield. Xen and the Art of Virtualization. In Proceedings of the 19th ACM Symposium on Operating Systems Principles, pages 164-177. ACM Press, 2003.
7. Poul-Henning Kamp and Robert N. M. Watson. Jails: Confining the Omnipotent Root. In Proceedings of the 2nd International SANE Conference, 2000.
8. Herbert Potzl. Linux-VServer Technology. http://linux-vserver.org/Linux- VServer-Paper, 2004.
9. Sun Microsystems. Solaris Containers: Server Virtualization and Manageability. http://www.sun.com/software/whitepapers/solaris10/ grid-containers.pdf, September 2004.
10. SWsoft. Virtuozzo Server Virtualization. http://www.swsoft.com/en/ products/virtuozzo.
11. Yi-Min Wang, Doug Beck, Xuxian Jiang, Roussi Roussev, Chad Verbowski, Shuo Chen, and Sam King. Automated Web Patrol with Strider Honey Monkeys: Finding Web Sites That Exploit Browser Vulnerabilities. In Proceedings of 13th Annual Network and Distributed System Security Symposium, February 2006.
12. Alexander Moshchuk, Tanya Bragin, Steven D. Gribble, and Henry M. Levy. A Crawler-based Study of Spyware on the Web. In Proceeding of the 13th Annual Network and Distributed System Security Symposium, February 2006.
13. Niels Provos, Dean McNamee, Panayiotis Mavrommatis, Ke Wang, and Nagendra Modadugu. The Ghost In The Browser Analysis of Web-based Malware. In Proceeding of the first Workshop on Hot Topics in Understanding Botnets, April 2007.
14. Alexander Moshchuk, Tanya Bragin, Damien Deville, Steven D. Gobble, and Henry M. Levy. SpyProxy: Execution-based Detection of Malicious Web Content. In Proceeding of the 16th USENIX Security Symposium, August 2007.
15. Microsoft Corporation. Technical Overview of Windows Server 2003 Terminal Services. http://download.microsoft.com/download/2/8/1/281f4d94-ee89-4b21-9f9e- 9accef44a743/TerminalServerOverview.doc, January 2005.
16. Citrix Ardence. Software-Streaming Platform. http://www.ardence.com/ enterprise/products.aspx?id=56.
17. Constantine Sapuntzakis, David Brumley, Ramesh Chandra, Nickolai Zeldovich, Jim Chow, Monica S. Lam, and Mendel Rosenblum. Virtual Appliances for Deploying and Maintaining Software. In Proceedings of 17th Large Installation Systems Administration Conference, October 2003.
18. Ramesh Chandra, Nickolai Zeldovich, Constantine Sapuntzakis, and Monica S. Lam. The Collective: A Cache-Based System Management Architecture. In Proceedings of the 2nd Symposium on Networked Systems Design and Implementation, May 2005.
19. Microsoft. Microsoft SoftGrid Application Virtualization. http://www.microsoft.com/systemcenter/softgrid/default.mspx.
20. AppStream. AppStream Technology Overview. http://www.appstream.com/ products-technology.html.
21. Bowen Alpern, Joshua Auerbach, Vasanth Bala, Thomas Frauenhofer, Todd Mummert, and Michael Pigott. PDS: A Virtual Execution Environment for Software Deployment. In Proceedings of the 1st International Conference on Virtual Execution Environments, 2005.
22. Thinstall. Application Virtualization: A Technical Overview of the Thinstall Application Virtualization Platform. http://thinstall.com/assets/docs/ ThinstallWP-ApplicVirtualization4a.pdf.
23. Microsoft Corporation. Windows Rights Management Services. http://www.microsoft.com/windowsserver2003/technologies/rightsmgmt.
24. Authentica. Authentica Secure Mail, Authentica Secure Mobile Mail, and Authentica Secure Documents. http://software.emc.com/microsites/regional/ authentica.
25. Liquid Machines. Liquid Machines Document Control, http: //www.liquidmachines .com.
26. Xavier Roche. HTTrack Website Copier, http://www.httrack.com.
27. Yi-Min Wang, Roussi Roussev, Chad Verbowski, Aaron Johnson, Ming-Wei Wu, Yennun Huang, and Sy-Yen Kuo. Gatekeeper: Monitoring Auto-Start Extensibility Points (ASEPs) for Spyware Management. In Proceedings of 18th Large Installation System Administration Conference, November 2004.
28. McAfee. McAfee SiteAdvisor. http://www.siteadvisor.com/analysis/ reviewercentral.
29. RSA Laboratories. Diffie-Hellman key agreement protocol. http://www.rsa.com/rsalabs/node.asp?id=2248.