When virtual is harder than real: Security challenges in virtual machine based computing environments

Proceedings of HotOS 2005 - 10th Workshop on Hot Topics in Operating Systems

Volumn , Issue , 2005, Pages

  Garfinkel, Tal ^a   Rosenblum, Mendel ^a  

^a Stanford University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY;

COMPUTING ENVIRONMENTS; SECURITY ARCHITECTURE; SECURITY CHALLENGES; SECURITY PROBLEMS; STATIC SECURITY; VIRTUAL COMPUTING ENVIRONMENT;

VIRTUAL MACHINE;

EID: 84944386303     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (13)

1. M. Bellare, S. Goldwasser, and D. Micciancio.”Pseudo-random” number generation within cryptographic algorithms: The DDS case. In CRYPTO, pages 277-291, 1997.
2. S. M. Bellovin. Security problems in the TCP/IP protocol suite. SIGCOMM Comput. Commun. Rev., 19(2):32-48, 1989.
3. P. M. Chen and B. D. Noble. When virtual is better than real. In (HOTOS-VIII), Schloss Elmau, Germany, May 2001.
4. G. W. Dunlap, S. T. King, S. Cinar, M. A. Basrai, and P. M. Chen. Revirt: Enabling intrusion analysis through virtual-machine logging and replay. In OSDI, 2002.
5. U. Fiege, A. Fiat, and A. Shamir. Zero knowledge proofs of identity. In STOC'87: Proceedings of the nineteenth annual ACM conference on Theory of computing, pages 210-217, New York, NY, USA, 1987. ACM Press.
6. T. Garfinkel, B. Pfaff, J. Chow, and M. Rosenblum. Data lifetime is a systems problem. In Proc. 11th ACM SIGOPS European Workshop, september 2004.
7. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A virtual machine-based platform for trusted computing. In Proceedings of the 19th Symposium on Operating System Principles(SOSP 2003), October 2003.
8. T. Garfinkel and M. Rosenblum. A virtual machine introspection based architecture for intrusion detection. In Proc. Network and Distributed Systems Security Symposium, February 2003.
9. L. Gordon, M. L. W. Lucyshyn, and R. Richardson. CSI/FBI computer crime and security survey. http://www.gocsi.com, 2004.
10. M. Kozuch and M. Satyanarayanan. Internet suspend/resume. In Forth IEEE Workshop on Mobile Computing Systems and Applications, pages 40-, 2002.
11. C. Sapuntzakis and M. S. Lam. Virtual appliances in the Collective: A road to hassle-free computing. In (HOTOS-XI), May 2003.
12. C.-P. Schnorr. Efficient signature generation by smart cards. J. Cryptology, 4(3):161-174, 1991.
13. H. J. Wang, C. Guo, D. R. Simon, and A. Zugenmaier. Shield: Vulnerability-driven network filters for preventing known vulnerability exploits. In Proc. of ACM SIGCOMM, August 2004.