<?xml version="1.0" encoding="UTF-8"?>
<ArticleSet xmlns="http://www.openarchives.org/OAI/2.0/">
  <Article>
    <Journal>
      <PublisherName>Inderscience Enterprises</PublisherName>
      <JournalTitle>Acta Medica Okayama</JournalTitle>
      <Issn>20444893</Issn>
      <Volume>9</Volume>
      <Issue>1</Issue>
      <PubDate PubStatus="ppublish">
        <Year>2019</Year>
        <Month/>
      </PubDate>
    </Journal>
    <ArticleTitle>Design and implementation of hiding method for file manipulation of essential services by system call proxy using virtual machine monitor</ArticleTitle>
    <FirstPage LZero="delete">1</FirstPage>
    <LastPage>10</LastPage>
    <Language>EN</Language>
    <AuthorList>
      <Author>
        <FirstName EmptyYN="N">Masaya</FirstName>
        <LastName>Sato</LastName>
        <Affiliation>Graduate School of Natural Science and Technology, Okayama University</Affiliation>
      </Author>
      <Author>
        <FirstName EmptyYN="N">Hideo</FirstName>
        <LastName>Taniguchi</LastName>
        <Affiliation>Graduate School of Natural Science and Technology, Okayama University</Affiliation>
      </Author>
      <Author>
        <FirstName EmptyYN="N">Toshihiro</FirstName>
        <LastName>Yamauchi</LastName>
        <Affiliation>Graduate School of Natural Science and Technology, Okayama University</Affiliation>
      </Author>
    </AuthorList>
    <PublicationType/>
    <ArticleIdList>
      <ArticleId IdType="doi"/>
    </ArticleIdList>
    <Abstract> Security or system management software is essential for keeping systems secure. To deter attacks on essential services, hiding information related to essential services is helpful. This paper describes the design, the implementation, and the evaluation of a method to make files invisible to all services except their corresponding essential services and provides access methods to those files in a virtual machine (VM). In the proposed method, the virtual machine monitor (VMM) monitors the system call, which invoked by an essential process to access essential files, and requests proxy execution to the proxy process on another VM. The VMM returns the result and skips the execution of the original system call on the protection target VM. Thus, access to essential files by the essential service is skipped on the protection target VM, but the essential service can access the file content.</Abstract>
    <CoiStatement>No potential conflict of interest relevant to this article was reported.</CoiStatement>
    <ObjectList>
      <Object Type="keyword">
        <Param Name="value">virtual machine monitor</Param>
      </Object>
      <Object Type="keyword">
        <Param Name="value">file manipulation</Param>
      </Object>
      <Object Type="keyword">
        <Param Name="value">system call proxy</Param>
      </Object>
      <Object Type="keyword">
        <Param Name="value">essential services</Param>
      </Object>
    </ObjectList>
    <ReferenceList/>
  </Article>
</ArticleSet>
