A virtualization assurance language for isolation and deployment

Proceedings - 2011 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2011

Volumn , Issue , 2011, Pages 33-40

  Bleikertz, Sören ^a   Groß, Thomas ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATED DEDUCTION; COMPLEX CONFIGURATION; DIFFERENTIAL ANALYSIS; DYNAMIC SCALING; FORMAL FOUNDATION; MISCONFIGURATIONS; MULTI TENANTS; POLICY LANGUAGE; SECURITY ASSURANCE; SECURITY GOALS; SECURITY REQUIREMENTS; SECURITY RISKS; VIRTUAL MACHINES; VIRTUALIZATIONS;

CLOUD COMPUTING; MODEL CHECKING; THEOREM PROVING;

NETWORK SECURITY;

EID: 80052409843     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2011.10     Document Type: Conference Paper

References (22)

1. Bowen Alpern and Fred B. Schneider. Recognizing safety and liveness. Technical report, Cornell University, Ithaca, NY, USA, 1986.
2. Alessandro Armando, David A. Basin, Yohan Boichut, Yannick Chevalier, Luca Compagna, Jorge Cúellar, Paul Hankes Drielsma, Pierre-Cyrille Héam, Olga Kouchnarenko, Jacopo Mantovani, Sebastian Mödersheim, David von Oheimb, Michaël Rusinowitch, Judson Santiago, Mathieu Turuani, Luca Viganò, and Laurent Vigneron. The avispa tool for the automated validation of internet security protocols and applications. In CAV, pages 281-285, 2005.
3. Alessandro Armando and Luca Compagna. SATMC: A SAT-Based Model Checker for Security Protocols. In Logics in Artificial Intelligence, 2004.
4. AVISPA. The Intermediate Format. Deliverable D2.3, Automated Validation of Internet Security Protocols and Applications (AVISPA), 2003. http://www.avispa-project.org/delivs/2.3/d2-3.pdf.
5. Hitesh Ballani and Paul Francis. Conman: a step towards network manageability. In Proceedings of the 2007 conference on Applications, technologies, architectures, and protocols for computer communications, SIGCOMM '07, pages 205-216, New York, NY, USA, 2007. ACM.
6. David Basin, Sebastian Mödersheim, and Luca Viganò. Ofmc: A symbolic model checker for security protocols. International Journal of Information Security, 4(3):181-208, June 2005. Published online December 2004.
7. Stefan Berger, Ramón Cáceres, Dimitrios Pendarakis, Reiner Sailer, Enriquillo Valdez, Ronald Perez, Wayne Schildhauer, and Deepa Srinivasan. Tvdc: managing security in the trusted virtual datacenter. SIGOPS Oper. Syst. Rev., 42:40-47, January 2008.
8. Sören Bleikertz, Matthias Schunter, Christian W. Probst, Dimitrios Pendarakis, and Konrad Eriksson. Security audits of multi-tier virtual infrastructures in public infrastructure clouds. In Proceedings of the 2010 ACM workshop on Cloud computing security workshop, CCSW '10, pages 93-102, New York, NY, USA, 2010. ACM.
9. Nicodemos Damianou, Naranker Dulay, Emil Lupu, and Morris Sloman. The ponder policy specification language. In Proceedings of the International Workshop on Policies for Distributed Systems and Networks, POLICY '01, pages 18-38, London, UK, 2001. Springer- Verlag.
10. DMTF. Open virtualization format specification. Technical report, DMTF, 2010.
11. Daniel Jackson. Alloy: a lightweight object modelling notation. ACM Trans. Softw. Eng. Methodol., 11:256-290, April 2002.
12. Lalana Kagal, Tim Finin, and Anupam Joshi. A policy language for a pervasive computing environment. In Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY '03, pages 63-, Washington, DC, USA, 2003. IEEE Computer Society.
13. Sunil D. Krothapalli, Xin Sun, Yu-Wei E. Sung, Suan Aik Yeo, and Sanjay G. Rao. A toolkit for automating and visualizing vlan configuration. In SafeConfig '09: Proceedings of the 2nd ACM workshop on Assurable and usable security configuration, pages 63-70, New York, NY, USA, 2009. ACM.
14. L. Lamport. Proving the correctness of multiprocess programs. IEEE Trans. Softw. Eng., 3:125-143, March 1977.
15. Jeanna Matthews, Tal Garfinkel, Christofer Hoff, and Jeff Wheeler. Virtual machine contracts for datacenter and cloud computing environments. In Proceedings of the 1st workshop on Automated control for datacenters and clouds, ACDC '09, pages 25-30, New York, NY, USA, 2009. ACM.
16. Sanjai Narain. Network configuration management via model finding. In Proceedings of the 19th conference on Large Installation System Administration Conference - Volume 19, LISA '05, pages 15-15, Berkeley, CA, USA, 2005. USENIX Association.
17. Sanjai Narain, Y.-H. Alice Cheng, Alex Poylisher, and Rajesh Talpade. Network single point of failure analysis via model finding. In Proceedings of First Alloy Workshop, 2006.
18. David Oppenheimer, Archana Ganapathi, and David A. Patterson. Why do internet services fail, and what can be done about it? In Proceedings of the 4th conference on USENIX Symposium on Internet Technologies and Systems - Volume 4, USITS'03, Berkeley, CA, USA, 2003. USENIX Association.
19. Lawrence C. Paulson. Isabelle: a Generic Theorem Prover. Number 828 in Lecture Notes in Computer Science. Springer - Berlin, 1994.
20. Thomas Ristenpart, Eran Tromer, Hovav Shacham, and Stefan Savage. Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds. In CCS '09: Proceedings of the 16th ACM conference on Computer and communications security, pages 199-212, New York, NY, USA, 2009. ACM.
21. Reiner Sailer, Enriquillo Valdez, Trent Jaeger, Ronald Perez, Leendert Van Doorn, John Linwood Griffin, Stefan Berger, Reiner Sailer, Enriquillo Valdez, Trent Jaeger, Ronald Perez, Leendert Doorn, John Linwood, and Griffin Stefan Berger. sHype: Secure Hypervisor Approach to Trusted Virtualized Systems. Technical Report RC23511, IBM Research, 2005.
22. Geoffrey G. Xie, Jibin Zhan, David A. Maltz, Hui Zhang, Albert Greenberg, Gisli Hjalmtysson, and Jennifer Rexford. On Static Reachability Analysis of IP Networks, 2004.