Analysis of the intel Pentium's ability to support a secure virtual machine monitor

Proceedings of the 9th USENIX Security Symposium

Volumn , Issue , 2000, Pages

  Robin, John Scott ^a   Irvine, Cynthia E ^b  

^a USAF   (United States)

^b Naval Postgraduate School

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION PROGRAMS; COMMERCIAL OFF-THE-SHELF; NETWORK SECURITY; VIRTUAL MACHINE;

HARDWARE PLATFORM; MULTIPLE OPERATING SYSTEMS; POLICY ENFORCEMENT; POTENTIAL BENEFITS; SECURITY POLICY; SECURITY PROBLEMS; SYSTEM PLATFORMS; VIRTUAL MACHINE MONITORS;

COMPUTER ARCHITECTURE;

EID: 85084161596     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. ISO/IEC 15408 - Common Criteria for Information Technology Security Evaluation. Technical Report CCIB-98-026, May 1998.
2. Alpha Architecture Handkbook. Technical Report Order Number: ECQD2KC-TE, October 1998.
3. E. R. Altman, D. Kaeli, and Y. Sheffer. Welcome to the Opportunities of Binary Translation. IEEE Computer, 33(3):40-45, March 2000.
4. J. P. Anderson. Computer Security Technology Planning Study. Technical Report ESD-TR-73-51, Air Force Electronic Systems Division, Hanscom AFB, Bedford, MA, 1972. (Also available as Vol. I, DITCAD-758206. Vol. II, DITCAD-772806).
5. C. Attanasio, P. Markenstein, and R. J. Phillips. Penetrating an Operating System: a Study of VM/370 Integrity. IBM Systems Journal, 15(1):102-116, 1976.
6. D. E. Bell and L. LaPadula. Secure Computer Systems: Mathematical Foundations and Model. Technical Report M74-244, MITRE Corp., Bedford, MA, 1973.
7. K. J. Biba. Integrity Considerations for Secure Computer Systems. Technical Report ESD-TR-76-372, MITRE Corp., 1977.
8. E. Bugnion, S. Devine, K. Govil, and M. Rosenblum. Disco: Running Commodity Operating Systems on Scaleable Multiprocessors. ACM Transactions on Computer Systems, 15(4):412-447, November 1997.
9. B. Gold, R. Linde, R. J. Peller, M. Schaefer, J. Scheid, and P. D. Ward. A security retrofit fo vm/370. In R. E. Merwin, editor, National Computer Conference, Volume 48, pages 335-344, New York, NY, June 1979. AFIPS.
10. B. Gold, R. R. Linde, and P. F. Cudney. KVM/370 in Retrospect. In Proceedings of the 1984 IEEE Symposium on Security and Privacy, pages 13-23, Oakland, CA, April 1984. IEEE Computer Society Press.
11. B. Gold, R. R. Linde, M. Schaefer, and J. F. Scheid. Vm/370 security retrofit program. In Proceedings 1977 Annual Conference, pages 411-418, Seattle, WA, October 1977. A.C.M.
12. R. Goldberg. Architectural Principles for Virtual Computer Systems. Ph.D. thesis, Harvard University, Cambridge, MA, 1972.
13. J. Hall and P. T. Robinson. Virtualizing the VAX Architecture. In Proceedings of the 18th International Symposium on Computer Architecture, pages 380-389, Toronto, Canada, May 1991.
14. W.-M. Hu. Reducing Timing Channels with Fuzzy Time. In Proceedings 1991 IEEE Symposium on Research in Security and Privacy, pages 8-20. IEEE Computer Society Press, 1991.
15. Intel. Intel Architecture Software Devloper's Manual, Volume 1: Basic Architecture. Intel Corporation, Santa Clara, CA, 1999.
16. Intel. Intel Architecture Software Devloper's Manual, Volume 2: Instruction Set Reference. Intel Corporation, Santa Clara, CA, 1999.
17. P. A. Karger, M. E. Zurko, D. W. Bonin, A. H. Mason, and C. E. Kahn. A Retrospective on the VAX VMM Security Kernel. Transactions on Software Engineering, 17(11):1147-1165, November 1991.
18. A. Klaiber. The Technology Behind Crusoe™ Processors. Transmeta Corporation, Santa Clara, CA, January 2000. also http://www.transmeta.com.
19. K. Lawton. http://www.bochs.com, July 1999.
20. K. Lawton. Running Multiple Operating Systems Concurrently on the IA32 PC Using Virtualization Techniques. http://www.freemware.org/research/paper.txt, June 1999.
21. S. E. Madnick and J. J. Donavan. Application and Analysis of the Virtual Machine Approach to Information System Security. In ACM SIGARCH-SYSOPS Workshop on Virtual Computer Systems, pages 210-224, Boston, MA, March 1973. A.C.M.
22. National Computer Security Center. Department of Defense Trusted Computer System Evaluation Criteria, DoD 5200.28-STD, December 1985.
23. National Computer Security Center. Final Evaluation Report: Boeing Space and Defense Group, MLS LAN Secure Network Server System, 28 August 1991.
24. National Computer Security Center. Final Evaluation Report of HFSIXTS-200, CSC-EPL-92/003 C-Evaluation No. 21-92, 27 May 1992.
25. National Computer Security Center. Final Evaluation Report: Trusted Information Systems, Inc. Trusted XENIX Version 4.0, January 1994.
26. National Computer Security Center. Final Evaluation Report: Verdix Corporation VSLAN 5.1/VS-LANE5.1, 11 January 1994.
27. National Computer Security Center. Final Evaluation Report of Gemini Computers, Incorporated Gemini Trusted Network Processor, Version 1.01, 28 June 1995.
28. G. Popek and R. Goldberg. Formal Requirements for Virtualizable 3rd Generation Architectures. Communications of the A.C.M., 17(7):412-421, 1974.
29. R. Rashid, D. Julin, D. Orr, R. Sanzi, R. Baron, A. Forin, D. Golub, and M. Jones. Mach: A system software kernel. In Proceedings of the 34th Computer Society International Conference COM-PCON 89, San Francisco, CA, February 1989. IEEE Computer Society Press.
30. J. S. Robin. Analyzing the Intel Pentium's Capability to Support a Secure Virtual Machine Monitor. Master's thesis, Naval Postgraduate School, Monterey, CA, September 1999.
31. M. Rosenblum. Lecture at Stanford University. 17 August 1999.
32. J. H. Saltzer and M. D. Schroeder. The Protection of Information in Computer Systems. Proceedings of the IEEE, 63(9):1278-1308, 1975.
33. M. Schaefer and B. Gold. Program Confinement in KVM/370. In Proceedings 1977 Annual Conference, pages 404-410, Seattle, WA, October 1977. A.C.M.
34. M. D. Schroeder and J. H. Saltzer. A Hardware Architecture for Implementing Protection Rings. Comm. A.C.M., 15(3):157-170, 1972.
35. O. Sibert, P. A. Porras, and R. Lindell. The Intel 80 × 86 Processor Architecture: Pitfalls for Secure Systems. In Proceedings 1995 IEEE Symposium on Security and Privacy, pages 211-222, Oakland, CA, May 1995. IEEE Computer Society Press.
36. VMware Inc. Welcome to VMware, Inc - Virtual Platform Technology, March 1999. http://www.vmware.com/standards/index.html.
37. Wine. http://www.winehq.com, June 2000.