start-ver=1.4
cd-journal=joma
no-vol=9
cd-vols=
no-issue=1
article-no=
start-page=1
end-page=10
dt-received=
dt-revised=
dt-accepted=
dt-pub-year=2019
dt-pub=20190528
dt-online=
en-article=
kn-article=
en-subject=
kn-subject=
en-title=
kn-title=Design and implementation of hiding method for file manipulation of essential services by system call proxy using virtual machine monitor
en-subtitle=
kn-subtitle=
en-abstract=
kn-abstract= Security or system management software is essential for keeping systems secure. To deter attacks on essential services, hiding information related to essential services is helpful. This paper describes the design, the implementation, and the evaluation of a method to make files invisible to all services except their corresponding essential services and provides access methods to those files in a virtual machine (VM). In the proposed method, the virtual machine monitor (VMM) monitors the system call, which invoked by an essential process to access essential files, and requests proxy execution to the proxy process on another VM. The VMM returns the result and skips the execution of the original system call on the protection target VM. Thus, access to essential files by the essential service is skipped on the protection target VM, but the essential service can access the file content.
en-copyright=
kn-copyright=

en-aut-name=SatoMasaya
en-aut-sei=Sato
en-aut-mei=Masaya
kn-aut-name=
kn-aut-sei=
kn-aut-mei=
aut-affil-num=1
ORCID=

en-aut-name=TaniguchiHideo
en-aut-sei=Taniguchi
en-aut-mei=Hideo
kn-aut-name=
kn-aut-sei=
kn-aut-mei=
aut-affil-num=2
ORCID=

en-aut-name=YamauchiToshihiro
en-aut-sei=Yamauchi
en-aut-mei=Toshihiro
kn-aut-name=
kn-aut-sei=
kn-aut-mei=
aut-affil-num=3
ORCID=

affil-num=1
en-affil=Graduate School of Natural Science and Technology, Okayama University
kn-affil=

affil-num=2
en-affil=Graduate School of Natural Science and Technology, Okayama University
kn-affil=

affil-num=3
en-affil=Graduate School of Natural Science and Technology, Okayama University
kn-affil=
en-keyword=virtual machine monitor
kn-keyword=virtual machine monitor
en-keyword=file manipulation
kn-keyword=file manipulation
en-keyword=system call proxy
kn-keyword=system call proxy
en-keyword=essential services
kn-keyword=essential services
END