Isolating commodity hosted hypervisors with hyperlock

EuroSys'12 - Proceedings of the EuroSys 2012 Conference

Volumn , Issue , 2012, Pages 127-140

  Wang, Zhi ^a   Wu, Chiachih ^a   Grace, Michael ^a   Jiang, Xuxian ^a  

^a North Carolina State University   (United States)

Author keywords

Hypervisor; Isolation; KVM; Virtualization

Indexed keywords

ADDRESS SPACE; CLOSE INTEGRATION; COMMODITY OPERATING SYSTEMS; HYPERVISOR; INSTRUCTION SET; ISOLATION; KVM; PERFORMANCE MEASUREMENTS; PROOF OF CONCEPT; RUNTIMES; SOFTWARE BUG; TRUSTED COMPUTING BASE; USER PROGRAMS; VIRTUAL MACHINES; VIRTUALIZATIONS;

COMPUTER OPERATING SYSTEMS; SEPARATION;

PROGRAM DEBUGGING;

EID: 84860595860     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2168836.2168850     Document Type: Conference Paper

References (43)

1. Kernel Samepage Merging. http://lwn.net/Articles/330589/.
2. W&X. http://en.wikipedia.org/wiki/W&X.
3. ABADI, M., BUDIU, M., ERLINGSSON, U., AND LIGATTI, J. Control-Flow Integrity: Principles, Implementations, and Applications. In Proceedings of the 12th ACM Conference on Computer and Communications Security (November 2005).
4. AZAB, A. M., NING, P., WANG, Z., JIANG, X., ZHANG, X., AND SKALSKY, N. C. HyperSentry: Enabling Stealthy In-context Measurement of Hypervisor Integrity. In Proceedings of the 17th ACM Conference on Computer and Communications Security (October 2010).
5. BARHAM, P., DRAGOVIC, B., FRASER, K., HAND, S., HARRIS, T. L., HO, A., NEUGEBAUER, R., PRATT, I., AND WARFIELD, A. Xen and the Art of Virtualization. In Proceedings of the 19th ACM Symposium on Operating Systems Principles (October 2003).
6. BEN-YEHUDA, M., DAY, M. D., DUBITZKY, Z., FACTOR, M., HAREL, N., GORDON, A., LIGUORI, A., WASSERMAN, O., AND YASSOUR, B.-A. The Turtles Project: Design and Implementation of Nested Virtualization. In Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (October 2010).
7. BOYD-WICKIZER, S., AND ZELDOVICH, N. Tolerating Malicious Device Drivers in Linux. In Proceedings of the 2010 USENIX Annual Technical Conference (June 2010).
8. BUCHANAN, E., ROEMER, R., SHACHAM, H., AND SAVAGE, S. When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC. In Proceedings of the 15th ACM Conference on Computer and Communications Security (October 2008).
9. COKER, R. Bonnie++. http://www.coker.com.au/bonnie++/.
10. COLP, P., NANAVATI, M., ZHU, J., AIELLO, W., COKER, G., DEEGAN, T., LOSCOCCO, P., AND WARFIELD, A. Breaking Up is Hard to Do: Security and Functionality in a Commodity Hypervisor. In Proceedings of the 23rd ACM Symposium on Operating Systems Principles (October 2011).
11. CORBET, J. Memory Management Notifiers. http://lwn.net/Articles/266320/.
12. ELHAGE, N. Virtualization Under Attack: Breaking out of KVM. http://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.html.
13. ERLINGSSON, U., VALLEY, S., ABADI, M., VRABLE, M., BUDIU, M., AND NECULA, G. C. XFI: Software Guards for System Address Spaces. In Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation (November 2006).
14. FORD, B., AND COX, R. Vx32: Lightweight User-level Sandboxing on the x86. In Proceedings of 2008 USENIX Annual Technical Conference (June 2008).
15. GANAPATHY, V., RENZELMANN, M. J., BALAKRISHNAN, A., SWIFT, M. M., AND JHA, S. The Design and Implementation of Microdrivers. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (March 2008).
16. GARFINKEL, T. Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools. In Proceedings of the 20th Annual Network and Distributed Systems Security Symposium (February 2003).
17. GRAF, A., AND ROEDEL, J. Nesting the Virtualized World. Linux Plumbers Conference, September 2009.
18. INTEL. Intel 64 and IA-32 Architectures Software Developerś Manual Volume 3: System Programming Guide, Part 1 and Part 2, 2010.
19. KIVITY, A., KAMAY, Y., LAOR, D., LUBLIN, U., AND LIGUORI, A. kvm: the Linux Virtual Machine Monitor. In Proceedings of the 2007 Ottawa Linux Symposium (June 2007).
20. KLEIN, G., ELPHINSTONE, K., HEISER, G., ANDRONICK, J., COCK, D., DERRIN, P., ELKADUWE, D., ENGELHARDT, K., KOLANSKI, R., NORRISH, M., SEWELL, T., TUCH, H., AND WINWOOD, S. seL4: Formal Verification of an OS Kernel. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles (October 2009).
21. KORTCHINSKY, K. CLOUDBURST: A VMware Guest to Host Escape Story. http://www.blackhat.com/presentations/bh-usa-09/KORTCHINSKY/BHUSA09-Kortchinsky- Cloudburst-SLIDES.pdf.
22. MAO, Y., CHEN, H., ZHOU, D., WANG, X., ZELDOVICH, N., AND KAASHOEK, M. F. Software Fault Isolation with API Integrity and Multi-principal Modules. In Proceedings of the 23rd ACM Symposium on Operating Systems Principles (October 2011).
23. MCCAMANT, S., AND MORRISETT, G. Evaluating SFI for a CISC architecture. In Proceedings of the 15th conference on USENIX Security Symposium (July 2006).
24. MURRAY, D. G., MILOS, G., AND HAND, S. Improving Xen Security through Disaggregation. In Proceedings of the 4th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (March 2008).
25. National Vulnerability Database. http://nvd.nist.gov/.
26. PETER, M., SCHILD, H., LACKORZYNSKI, A., AND WARG, A. Virtual Machines Jailed: Virtualization in Systems with Small Trusted Computing Bases. In Proceedings of the 1st EuroSys Workshop on Virtualization Technology for Dependable Systems (March 2009).
27. PROVOS, N. Improving Host Security with System Call Policies. In Proceedings of the 12th Usenix Security Symposium (August 2002).
28. RED HAT. KVM: Kernel-based Virtual Machine. www.redhat.com/f/pdf/rhev/ DOC-KVM.pdf.
29. RUSSELL, R. Virtio: Towards a De-facto Standard for Virtual I/O Devices. ACM SIGOPS Operating Systems Review 42, 5 (2008).
30. RUTKOWSKA, J. On Formally Verified Microkernels (and on attacking them). http://theinvisiblethings.blogspot.com/2010/05/on-formally-verified- microkernels-and.html.
31. SHARIF, M., LEE, W., CUI, W., AND LANZI, A. Secure In-VM Monitoring Using Hardware Virtualization. In Proceedings of the 16th ACM Conference on Computer and Communications Security (November 2009).
32. SRIVASTAVA, A., AND GIFFIN, J. Efficient Monitoring of Untrusted Kernel-Mode Execution. In Proceedings of the 18th Annual Network and Distributed System Security Symposium (February 2011).
33. STANDARD PERFORMANCE EVALUATION CORPORATION. SPEC CPU2006. http://www.spec.org/cpu2006.
34. STEINBERG, U., AND KAUER, B. NOVA: a Microhypervisor-based Secure Virtualization Architecture. In Proceedings of the 5th European Conference on Computer Systems (April 2010).
35. SWIFT, M. M., BERSHAD, B. N., AND LEVY, H. M. Improving the Reliability of Commodity Operating Systems. In Proceedings of the 19th ACM symposium on Operating Systems Principles (October 2003).
36. SZEFER, J., KELLER, E., LEE, R. B., AND REXFORD, J. Eliminating the Hypervisor Attack Surface for a More Secure Cloud. In Proceedings of the 18th ACM Conference on Computer and Communications Security (October 2011).
37. VMWARE. Timekeeping in VMware Virtual Machines. http://www.vmware.com/ files/pdf/Timekeeping-In-VirtualMachines.pdf.
38. WAHBE, R., LUCCO, S., ANDERSON, T. E., AND GRAHAM, S. L. Efficient Software-based Fault Isolation. In Proceedings of the 14th ACM Symposium On Operating System Principles (December 1993).
39. WANG, Z., AND JIANG, X. HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Contr ol-Flow Integrity. In Proceedings of the 31st IEEE Symposium on Security and Privacy (May 2010).
40. WATSON, R. N. M., ANDERSON, J., LAURIE, B., AND KENNAWAY, K. Capsicum: Practical Capabilities for UNIX. In Proceedings of the 19th USENIX Security Symposium (August 2010).
41. WILLIAMS, D., REYNOLDS, P., WALSH, K., SIRER, E. G., AND SCHNEIDER, F. B. Device Driver Safety through a Reference Validation Mechanism. In Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation (December 2008).
42. XIONG, X., TIAN, D., AND LIU, P. Practical Protection of Kernel Integrity for Commodity OS from Untrusted Extensions. In Proceedings of the 18th Annual Network and Distributed System Security Symposium (February 2011).
43. YEE, B., SEHR, D., DARDYK, G., CHEN, J. B., MUTH, R., ORM, T., OKASAKA, S., NARULA, N., FULLAGAR, N., AND INC, G. Native Client: A Sandbox for Portable, Untrusted x86 Native Code. In Proceedings of the 30th IEEE Symposium on Security and Privacy (May 2009).