ID 57474
Author
Sato, Masaya Graduate School of Natural Science and Technology, Okayama University Kakenhi
Taniguchi, Hideo Graduate School of Natural Science and Technology, Okayama University Kakenhi
Yamauchi, Toshihiro Graduate School of Natural Science and Technology, Okayama University Kakenhi
Abstract
Security or system management software is essential for keeping systems secure. To deter attacks on essential services, hiding information related to essential services is helpful. This paper describes the design, the implementation, and the evaluation of a method to make files invisible to all services except their corresponding essential services and provides access methods to those files in a virtual machine (VM). In the proposed method, the virtual machine monitor (VMM) monitors the system call, which invoked by an essential process to access essential files, and requests proxy execution to the proxy process on another VM. The VMM returns the result and skips the execution of the original system call on the protection target VM. Thus, access to essential files by the essential service is skipped on the protection target VM, but the essential service can access the file content.
Keywords
virtual machine monitor
file manipulation
system call proxy
essential services
Note
This fulltext will be available in May 2020
Published Date
2019-05-28
Publication Title
International Journal of Space-Based and Situated Computing
Volume
volume9
Issue
issue1
Publisher
Inderscience Enterprises
Start Page
1
End Page
10
ISSN
20444893
Content Type
Journal Article
language
英語
OAI-PMH Set
岡山大学
File Version
author
DOI
Web of Sience KeyUT
Related Url
isVersionOf https://doi.org/10.1504/IJSSC.2019.100007
Funder Name
Japan Society for the Promotion of Science
助成番号
18K18051 : 重要サービス保護のための仮想計算機モニタによる通信処理制御法の研究 Research Project
16H02829 : 仮想化環境と制御システムの証拠保全を実現する基盤ソフトウェアの研究