VCCBox: Practical Confinement of Untrusted Software in Virtual Cloud Computing
文献类型：会议论文
| 作者 | Jun Jiang ; Meining Nie ; Purui Su ; Dengguo Feng |
| 出版日期 | 2013 |
| 会议名称 | ICST International Conference on Security and Privacy in Communication Networks |
| 会议日期 | 2013/9/25-2013/9/27 |
| 会议地点 | Sydney, Australia |
| 关键词 | Sandbox Hypervisor based security Hardware assisted virtualization Cloud computing |
| 中文摘要 | Recent maturity of virtualization has enabled its wide adoption in cloud environment. However, legacy security issues still exist in the cloud and are further enlarged. For instance, the execution of untrusted software may cause more harm to system security. Though conventional sandboxes can be used to constrain the destructive program behaviors, they suffer from various deficiencies. In this paper, we propose VCCBox, a practical sandbox that confines untrusted applications in cloud environment. Leveraging the state-of-the-art hardware assisted virtualization technology and novel design, it is able to work effectively and efficiently. VCCBox implements its system call interception and access control policy enforcement inside the hypervisor and create an interface to dynamically load policies. The in-VMM design renders our system hard to bypass and easy to deploy in cloud environment, and dynamic policy loading provides high efficiency. We have implemented a proof-of-concept system based on Xen and the evaluation exhibits that our system achieves the design goal of effectiveness and efficiency. |
| 收录类别 | CPCI（ISTP） ; EI |
| 会议录出版者 | Springer-Verlag |
| 学科主题 | 数据安全与计算机安全 ; 计算机系统设计 ; 操作系统与操作环境 ; 程序设计及其语言 ; 编译系统 |
| 会议录出版地 | Berlin Heidelberg |
| 语种 | 英语 |
| 源URL | [http://ir.iscas.ac.cn/handle/311060/16374]  |
| 专题 | 软件研究所_信息安全国家重点实验室_会议论文 |
| 推荐引用方式 GB/T 7714 | Jun Jiang,Meining Nie,Purui Su,et al. VCCBox: Practical Confinement of Untrusted Software in Virtual Cloud Computing[C]. 见:ICST International Conference on Security and Privacy in Communication Networks. Sydney, Australia. 2013/9/25-2013/9/27. |
入库方式： OAI收割
来源：软件研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。