ID | 57474 |
FullText URL | |
Author |
Sato, Masaya
Graduate School of Natural Science and Technology, Okayama University
ORCID
Kaken ID
publons
researchmap
Taniguchi, Hideo
Graduate School of Natural Science and Technology, Okayama University
Kaken ID
publons
researchmap
Yamauchi, Toshihiro
Graduate School of Natural Science and Technology, Okayama University
ORCID
Kaken ID
publons
researchmap
|
Abstract | Security or system management software is essential for keeping systems secure. To deter attacks on essential services, hiding information related to essential services is helpful. This paper describes the design, the implementation, and the evaluation of a method to make files invisible to all services except their corresponding essential services and provides access methods to those files in a virtual machine (VM). In the proposed method, the virtual machine monitor (VMM) monitors the system call, which invoked by an essential process to access essential files, and requests proxy execution to the proxy process on another VM. The VMM returns the result and skips the execution of the original system call on the protection target VM. Thus, access to essential files by the essential service is skipped on the protection target VM, but the essential service can access the file content.
|
Keywords | virtual machine monitor
file manipulation
system call proxy
essential services
|
Note | This fulltext will be available in May 2020
|
Published Date | 2019-05-28
|
Publication Title |
International Journal of Space-Based and Situated Computing
|
Volume | volume9
|
Issue | issue1
|
Publisher | Inderscience Enterprises
|
Start Page | 1
|
End Page | 10
|
ISSN | 20444893
|
Content Type |
Journal Article
|
language |
English
|
OAI-PMH Set |
岡山大学
|
File Version | author
|
DOI | |
Web of Science KeyUT | |
Related Url | isVersionOf https://doi.org/10.1504/IJSSC.2019.100007
|
Funder Name |
Japan Society for the Promotion of Science
|
助成番号 | 18K18051 : 重要サービス保護のための仮想計算機モニタによる通信処理制御法の研究 Research Project
16H02829 : 仮想化環境と制御システムの証拠保全を実現する基盤ソフトウェアの研究
|