NDLI: A Multi-Layer Mandatory Access Control Mechanism for Mobile Devices Based on Virtualization

Content Provider	IEEE Xplore Digital Library
Author	Sung-Min Lee Sang-bum Suh Bokdeuk Jeong Sangdok Mo
Copyright Year	2008
Description	Author affiliation: SAMSUNG ELECTRON. CO. LTD., Suwon (Sung-Min Lee; Sang-bum Suh; Bokdeuk Jeong; Sangdok Mo)
Abstract	In this paper we present a multi-layer mandatory access control mechanism (ACM) for mobile devices based on system virtualization technology. We discuss a detailed threat model to mobile devices in the real world to develop an ACM fitted to mobile devices. Then, we propose a novel multi-layer access control mechanism for mobile devices, which provides strong protection against the identified mobile threats as well as performance efficiency. Our Virtual Machine Monitor (VMM) and secure domain have independent access control modules to effectively control mobile device's resources. Access control module at VMM controls access requests from a domain to physical/virtual resources in order to confine sharing resources among domains for confidentiality. It also protects a mobile device against DoS attacks draining limited system resources such as battery and memory to guarantee availability. In addition, access control at secure domain enforces fine-grained control of resources (e.g., file system access control) in upper layer without degrading performance of a mobile device due to additional hypercall invocations. Furthermore, there is no bypass of our access control since our ACM is placed inside VMM which is simple and small enough to verify its safety and we eliminated the chance of VMM corruption by checking integrity of VMM including ACM during bootstrap time.
Starting Page	251
Ending Page	256
File Size	262933
Page Count	6
File Format	PDF
ISBN	9781424414567
e-ISBN	9781424414574
DOI	10.1109/ccnc08.2007.63
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-01-10
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Protection Virtual machine monitors Computer crime Batteries Availability Control systems File systems Degradation Safety
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

VRFPS: A Novel Virtual Machine-Based Real-time File Protection System

Retrofitting the IBM POWER Hypervisor to Support Mandatory Access Control

Virtualization Security Combining Mandatory Access Control and Virtual Machine Introspection

Fine-grained I/O access control based on xen virtualization for 3G/4G mobile devices

Virtualization Security Combining Mandatory Access Control and Virtual Machine Introspection

Shamon: A System for Distributed Mandatory Access Control

Hypervisor design considering network performance for multi-core CE devices

Fine-grained I/O access control based on Xen virtualization for 3G/4G mobile devices

MILS virtualization for Integrated Modular Avionics

A Multi-Layer Mandatory Access Control Mechanism for Mobile Devices Based on Virtualization

Similar Documents

VRFPS: A Novel Virtual Machine-Based Real-time File Protection System

Retrofitting the IBM POWER Hypervisor to Support Mandatory Access Control

Virtualization Security Combining Mandatory Access Control and Virtual Machine Introspection

Fine-grained I/O access control based on xen virtualization for 3G/4G mobile devices

Virtualization Security Combining Mandatory Access Control and Virtual Machine Introspection

Shamon: A System for Distributed Mandatory Access Control

Hypervisor design considering network performance for multi-core CE devices

Fine-grained I/O access control based on Xen virtualization for 3G/4G mobile devices

MILS virtualization for Integrated Modular Avionics

A Multi-Layer Mandatory Access Control Mechanism for Mobile Devices Based on Virtualization