NDLI: Improving Xen security through disaggregation

Please wait, while we are loading the content...

Scheduling I/O in virtual machine monitors

Trace fragment selection within method-based JVMs

Using hypervisor to provide data secrecy for user applications on a per-page basis

Policy enforcement and compliance proofs for Xen virtual machines

A principled approach to nondeferred reference-counting garbage collection

Improving Xen security through disaggregation

Inter-domain socket communications supporting high performance and full binary compatibility on Xen

A method specialisation and virtualised execution environment for Java

Virtual machine-provided context sensitive page mappings

Opening black boxes: using semantic information to combat virtual machine image sprawl

Cell GC: using the cell synergistic processor as a garbage collection coprocessor

Running a Java VM inside an operating system kernel

Characterization & analysis of a server consolidation benchmark

Process-shared and persistent code caches

VMM-based hidden process detection and identification using Lycosid

Execution replay of multiprocessor virtual machines

Applications of a feather-weight virtual machine

Netchannel: a VMM-level mechanism for continuous, transparentdevice access during VM migration

Improving Xen security through disaggregation

Content Provider	ACM Digital Library
Author	Murray, Derek Gordon Hand, Steven Milos, Grzegorz
Abstract	Virtual machine monitors (VMMs) have been hailed as the basis for an increasing number of reliable or trusted computing systems. The Xen VMM is a relatively small piece of software -- a hypervisor -- that runs at a lower level than a conventional operating system in order to provide isolation between virtual machines: its size is offered as an argument for its trustworthiness. However, the management of a Xen-based system requires a privileged, full-blown operating system to be included in the trusted computing base (TCB). In this paper, we introduce our work to disaggregate the management virtual machine in a Xen-based system. We begin by analysing the Xen architecture and explaining why the status quo results in a large TCB. We then describe our implementation, which moves the domain builder, the most important privileged component, into a minimal trusted compartment. We illustrate how this approach may be used to implement "trusted virtualisation" and improve the security of virtual TPM implementations. Finally, we evaluate our approach in terms of the reduction in TCB size, and by performing a security analysis of the disaggregated system.
Starting Page	151
Ending Page	160
Page Count	10
File Format	PDF
ISBN	9781595937964
DOI	10.1145/1346256.1346278
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2008-03-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Disaggregation Trusted computing base Virtual machines
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in