NDLI: Fine-grained I/O access control of the mobile devices based on the Xen architecture

Please wait, while we are loading the content...

Dynamic spectrum access in DTV whitespaces: design rules, architecture and algorithms

SAM: enabling practical spatial multiple access in wireless LAN

Capacity of large-scale CSMA wireless networks

Opportunistic flooding in low-duty-cycle wireless sensor networks with unreliable links

Neighbor discovery in wireless networks and the coupon collector's problem

A scalable micro wireless interconnect structure for CMPs

SurroundSense: mobile phone localization via ambience fingerprinting

OpenLIDS: a lightweight intrusion detection system for wireless mesh networks

Mining spectrum usage data: a large-scale spectrum measurement study

Order matters: transmission reordering in wireless networks

Scheduling partition for order optimal capacity in large-scale wireless networks

Compressive data gathering for large-scale wireless sensor networks

Frequency-aware rate adaptation and MAC protocols

Glia: a practical solution for effective high datarate wifi-arrays

Fine-grained I/O access control of the mobile devices based on the Xen architecture

On the effectiveness of secret key extraction from wireless signal strength in real environments

A quorum-based framework for establishing control channels in dynamic spectrum access networks

Design, implementation and evaluation of an efficient opportunistic retransmission protocol

Mobility increases the connectivity of K-hop clustered wireless networks

Data fusion improves the coverage of wireless sensor networks

Optimal beam scheduling for multicasting in wireless networks

Link layer behavior of body area networks at 2.4 GHz

A fundamental scalability criterion for data aggregation in VANETs

Localization with snap-inducing shaped residuals (SISR): coping with errors in measurement

Throughput-efficient sequential channel sensing and probing in cognitive radio networks under sensing errors

Esense: communication through energy sensing

Lifetime and coverage guarantees through distributed coordinate-free sensor activation

Challenge: ultra-low-power energy-harvesting active networked tags (EnHANTs)

CENTAUR: realizing the full potential of centralized wlans through a hybrid data path

Hiding stars with fireworks: location privacy through camouflage

Fine-grained I/O access control of the mobile devices based on the Xen architecture

Content Provider	ACM Digital Library
Author	Jeong, Bokdeuk Ryu, Jae-Min Suh, Sang-Bum Jung, Brian Myungjune Lee, Dong-Hyuk Mo, Sangdok Lee, Sung-Min Yoo, Jung-Hyun
Abstract	System virtualization is now available for mobile devices allowing for many advantages. Two of the major benefits from virtualization are system fault isolation and security. The isolated driver domain (IDD) model, a widely adopted architecture, enables strong system fault isolation by limiting the impact of driver faults to the driver domain itself. However, excessive I/O requests from a malicious domain to an IDD can cause CPU overuse of the IDD and performance degradation of applications in the IDD and other domains that share the same I/O device with the malicious do-main. If the IDD model is applied to mobile devices, this failure of performance isolation could also lead to battery drain, and thus it introduces a new severe threat to mobile devices. In order to solve this problem, we propose a fine-grained I/O access control mechanism in an IDD. Requests from guest domains are managed by an accounting module in terms of CPU usage, with the calcula-tion of estimated CPU consumption using regression equations. The requests are scheduled by an I/O access control enforcer ac-cording to security policies. As a result, our mechanism provides precise control on the CPU usage of a guest domain due to I/O device access, and prevents malicious guest domains from CPU overuse, performance degradation, and battery drain. We have implemented a prototype of our approach considering both network and storage devices with a real smart phone (SGH-i780) that runs two para-virtualized Linux kernels on top of Secure Xen on ARM. The evaluation shows our approach effectively protects a smart phone against excessive I/O attacks and guarantees availability.
Starting Page	273
Ending Page	284
Page Count	12
File Format	PDF
ISBN	9781605587028
DOI	10.1145/1614320.1614351
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-09-20
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Virtual machine monitor Smart phone security Virtual machine I/o access control
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Fine-grained I/O access control based on Xen virtualization for 3G/4G mobile devices

Fine-grained I/O access control based on xen virtualization for 3G/4G mobile devices

Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices

Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices (2007)

A new I/O device virtualization modelon Xen

Measuring CPU overhead for I/O processing in the Xen virtual machine monitor (2005)

Fine-grained access control for html5-based mobile applications in android.

Measuring CPU overhead for I/O processing in the Xen virtual machine monitor (2005)

Introducing Role-Based Access Control to a Secure Virtual Machine Monitor: Security Policy Enforcement Mechanism for Distributed Computers

Fine-grained I/O access control of the mobile devices based on the Xen architecture

Similar Documents

Fine-grained I/O access control based on Xen virtualization for 3G/4G mobile devices

Fine-grained I/O access control based on xen virtualization for 3G/4G mobile devices

Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices

Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices (2007)

A new I/O device virtualization modelon Xen

Measuring CPU overhead for I/O processing in the Xen virtual machine monitor (2005)

Fine-grained access control for html5-based mobile applications in android.

Measuring CPU overhead for I/O processing in the Xen virtual machine monitor (2005)

Introducing Role-Based Access Control to a Secure Virtual Machine Monitor: Security Policy Enforcement Mechanism for Distributed Computers

Fine-grained I/O access control of the mobile devices based on the Xen architecture