NOVA: A microhypervisor-based secure virtualization architecture

EuroSys'10 - Proceedings of the EuroSys 2010 Conference

Volumn , Issue , 2010, Pages 209-222

  Steinberg, Udo ^a   Kauer, Bernhard ^a  

^a DRESDEN UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

architecture; virtualization

Indexed keywords

EXISTING SYSTEMS; HYPERVISOR; OPERATING SYSTEMS; ORDER OF MAGNITUDE; RESOURCE UTILIZATIONS; TOTAL COST OF OWNERSHIP; TRUSTED COMPUTING BASE; VIRTUALIZATION; VIRTUALIZATION LAYERS; VIRTUALIZATIONS;

COMPUTER OPERATING SYSTEMS; COST REDUCTION; PROGRAM PROCESSORS;

NETWORK SECURITY;

EID: 77954565496     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1755913.1755935     Document Type: Conference Paper

References (40)

1. K. Adams and O. Agesen. A Comparison of Software and Hardware Techniques for x86 Virtualization. In Proceedings of the 12th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 2-13. ACM, 2006.
2. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the Art of Virtualization. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), pages 164-177. ACM, 2003.
3. A. Baumann, P. Barham, P.-E. Dagand, T. Harris, R. Isaacs, S. Peter, T. Roscoe, A. Schüpbach, and A. Singhania. The Multikernel: A New OS Architecture for Scalable Multicore Systems. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles (SOSP), pages 29-44. ACM, 2009.
4. F. Bellard. QEMU, A Fast and Portable Dynamic Translator. In Proceedings of the USENIX Annual Technical Conference (ATC), pages 41-46. USENIX Association, 2005.
5. R. Bhargava, B. Serebrin, F. Spadini, and S. Manne. Accelerating Two-Dimensional Page Walks for Virtualized Systems. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 26-35. ACM, 2008.
6. E. Bugnion, S. Devine, and M. Rosenblum. Disco: Running Commodity Operating Systems on Scalable Multiprocessors. In Proceedings of the 16th ACM Symposium on Operating Systems Principles (SOSP), pages 143-156. ACM, 1997.
7. X. Chen, T. Garfinkel, E. C. Lewis, P. Subrahmanyam, C. A. Waldspurger, D. Boneh, J. Dwoskin, and D. R. Ports. Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 2-13. ACM, 2008.
8. V. Chipounov and G. Candea. Reverse Engineering of Binary Device Drivers with RevNIC. In Proceedings of the 5th ACM SIGOPS/EuroSys European Conference on Computer Systems. ACM, 2010.
9. C. Clark, K. Fraser, S. Hand, J. G. Hansen, E. Jul, C. Limpach, I. Pratt, and A. Warfield. Live Migration of Virtual Machines. In Proceedings of the 2nd ACM/USENIX Symposium on Networked Systems Design and Implementation (NSDI), pages 273-286. USENIX Association, 2005.
10. G. W. Dunlap, S. T. King, S. Cinar, M. A. Basrai, and P. M. Chen. ReVirt: Enabling Intrusion Analysis Through Virtual-Machine Logging and Replay. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI), pages 211-224. ACM, 2002.
11. R. P. Goldberg. Survey of Virtual Machine Research. Computer, 7(6):34-45, 1974.
12. D. Grawrock. The Intel Safer Computing Initiative. Intel Press, 2006.
13. H. Härtig, M. Hohmuth, J. Liedtke, J. Wolter, and S. Schönberg. The Performance of μ-kernel-based Systems. In Proceedings of the 16th ACM Symposium on Operating Systems Principles (SOSP), pages 66-77. ACM, 1997.
14. J. N. Herder, H. Bos, B. Gras, P. Homburg, and A. S. Tanenbaum. Construction of a Highly Dependable Operating System. In Proceedings of the 6th European Dependable Computing Conference (EDCC), pages 3-12. IEEE Computer Society, 2006.
15. Intel 64 and IA-32 Architectures Software Developer's Manual Volume 3B: System Programming Guide. Intel Corporation, 2008. SKU #253669.
16. S. T. King, G. W. Dunlap, and P. M. Chen. Debugging Operating Systems with Time-Traveling Virtual Machines. In Proceedings of the USENIX Annual Technical Conference (ATC), pages 1-15. USENIX Association, 2005.
17. A. Kivity, Y. Kamay, D. Laor, U. Lublin, and A. Liguori. KVM: The Linux Virtual Machine Monitor. In Proceedings of the Linux Symposium, pages 225-230, 2007.
18. D. N. Kleidermacher. Towards a High Assurance Multi-level Secure PC for Intelligence Communities. In Proceedings of the IEEE Conference on Technologies for Homeland Security, pages 609-614. IEEE Computer Society, 2008.
19. G. Klein, K. Elphinstone, G. Heiser, J. Andronick, D. Cock, P. Derrin, D. Elkaduwe, K. Engelhardt, R. Kolanski, M. Norrish, T. Sewell, H. Tuch, and S. Winwood. seL4: Formal Verification of an OS Kernel. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles (SOSP), pages 207-220. ACM, 2009.
20. K. Kortchinsky. Cloudburst - Hacking 3D and Breaking out of VMware. In Black Hat USA, 2009.
21. A. Lackorzynski and A. Warg. Taming Subsystems: Capabilities as Universal Resource Access Control in L4. In Proceedings of the 2nd Workshop on Isolation and Integration in Embedded Systems (IIES), pages 25-30. ACM, 2009.
22. D. Leinenbach and T. Santen. Verifying the Microsoft Hyper-V Hypervisor with VCC. In Proceedings of the 16th International Symposium on Formal Methods, pages 806-809. Springer, 2009.
23. J. LeVasseur, V. Uhlig, J. Stöß, and S. Götz. Unmodified Device Driver Reuse and Improved System Dependability via Virtual Machines. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI), pages 17-30. USENIX Association, 2004.
24. J. Liedtke. On Micro-Kernel Construction. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP), pages 237-250. ACM, 1995.
25. J. Liedtke. Improving IPC by Kernel Design. In Proceedings of the 14th ACM Symposium on Operating Systems Principles (SOSP), pages 175-188. ACM, 1993.
26. Microsoft Hyper-V. http://www.microsoft.com/hyperv/.
27. D. G. Murray, G. Milos, and S. Hand. Improving Xen Security through Disaggregation. In Proceedings of the 4th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE), pages 151-160. ACM, 2008.
28. T. Ormandy. An Empirical Study into the Security Exposure to Hosts of Hostile Virtualized Environments. In CanSecWest, 2007.
29. M. Peter, H. Schild, A. Lackorzynski, and A. Warg. Virtual Machines Jailed: Virtualization in Systems with Small Trusted Computing Bases. In Proceedings of the 1st EuroSys Workshop on Virtualization Technology for Dependable Systems (VTDS), pages 18-23. ACM, 2009.
30. L. Ryzhyk, P. Chubb, I. Kuz, E. Le Sueur, and G. Heiser. Automatic Device Driver Synthesis with Termite. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles (SOSP), pages 73-86. ACM, 2009.
31. A. Seshadri, M. Luk, N. Qu, and A. Perrig. SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes. In Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP), pages 335-350. ACM, 2007.
32. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: A Fast Capability System. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP), pages 170-185. ACM, 1999.
33. J. S. Shapiro, M. S. Doerrie, E. Northup, S. Sridhar, and M. Miller. Towards a Verified, General-Purpose Operating System Kernel. In Proceedings of the 1st NICTA Workshop on Operating System Verification, pages 1-18. National ICT Australia, 2004.
34. T. Shinagawa, H. Eiraku, K. Tanimoto, K. Omote, S. Hasegawa, T. Horie, M. Hirano, K. Kourai, Y. Ohyama, E. Kawai, K. Kono, S. Chiba, Y. Shinjo, and K. Kato. BitVisor: A Thin Hypervisor for Enforcing I/O Device Security. In Proceedings of the 5th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE). ACM, 2009.
35. L. Singaravelu, C. Pu, H. Härtig, and C. Helmuth. Reducing TCB Complexity for Security-Sensitive Applications: Three Case Studies. In Proceedings of the 1st ACM SIGOPS/EuroSys European Conference on Computer Systems, pages 161-174. ACM, 2006.
36. R. Ta-Min, L. Litty, and D. Lie. Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation (OSDI), pages 279-292. USENIX Association, 2006.
37. R. Uhlig, G. Neiger, D. Rodgers, A. L. Santoni, F. C. M. Martins, A. V. Anderson, S. M. Bennett, A. Kagi, F. H. Leung, and L. Smith. Intel Virtualization Technology. Computer, 38 (5):48-56, 2005.
38. VMware ESX Server Virtual Infrastructure Node Evaluator's Guide. http://www.vmware.com/pdf/esx-vine-val.pdf.
39. VMware ESXi. http://www.vmware.com/esx/.
40. R. Wojtczuk. Subverting the Xen Hypervisor. In Black Hat USA, 2008.