中国科学院软件研究所机构知识库
Advanced  
ISCAS OpenIR  > 信息安全国家重点实验室  > 会议论文
Subject: 计算机科学技术基础学科::数据安全与计算机安全 ; 计算机系统结构::计算机系统设计 ; 计算机软件::操作系统与操作环境 ; 计算机软件::程序设计及其语言 ; 计算机软件::编译系统
Title:
VCCBox: Practical Confinement of Untrusted Software in Virtual Cloud Computing
Author: Jun Jiang ; Meining Nie ; Purui Su ; Dengguo Feng
Conference Name: ICST International Conference on Security and Privacy in Communication Networks
Conference Date: 2013/9/25-2013/9/27
Issued Date: 2013
Conference Place: Sydney, Australia
Keyword: Sandbox ; Hypervisor based security ; Hardware assisted virtualization ; Cloud computing
Publisher: Springer-Verlag
Publish Place: Berlin Heidelberg
Indexed Type: CPCI(ISTP) ; EI
Abstract: Recent maturity of virtualization has enabled its wide adoption in cloud environment. However, legacy security issues still exist in the cloud and are further enlarged. For instance, the execution of untrusted software may cause more harm to system security. Though conventional sandboxes can be used to constrain the destructive program behaviors, they suffer from various deficiencies. In this paper, we propose VCCBox, a practical sandbox that confines untrusted applications in cloud environment. Leveraging the state-of-the-art hardware assisted virtualization technology and novel design, it is able to work effectively and efficiently. VCCBox implements its system call interception and access control policy enforcement inside the hypervisor and create an interface to dynamically load policies. The in-VMM design renders our system hard to bypass and easy to deploy in cloud environment, and dynamic policy loading provides high efficiency. We have implemented a proof-of-concept system based on Xen and the evaluation exhibits that our system achieves the design goal of effectiveness and efficiency.
Language: 英语
Content Type: 会议论文
URI: http://ir.iscas.ac.cn/handle/311060/16374
Appears in Collections:信息安全国家重点实验室_会议论文

Files in This Item:
File Name/ File Size Content Type Version Access License
vccbox.pdf(539KB)----限制开放 联系获取全文

Recommended Citation:
Jun Jiang,Meining Nie,Purui Su,et al. VCCBox: Practical Confinement of Untrusted Software in Virtual Cloud Computing[C]. 见:ICST International Conference on Security and Privacy in Communication Networks. Sydney, Australia. 2013/9/25-2013/9/27.
Service
Recommend this item
Sava as my favorate item
Show this item's statistics
Export Endnote File
Google Scholar
Similar articles in Google Scholar
[Jun Jiang]'s Articles
[Meining Nie]'s Articles
[Purui Su]'s Articles
CSDL cross search
Similar articles in CSDL Cross Search
[Jun Jiang]‘s Articles
[Meining Nie]‘s Articles
[Purui Su]‘s Articles
Related Copyright Policies
Null
Social Bookmarking
Add to CiteULike Add to Connotea Add to Del.icio.us Add to Digg Add to Reddit
所有评论 (0)
暂无评论
 
评注功能仅针对注册用户开放,请您登录
您对该条目有什么异议,请填写以下表单,管理员会尽快联系您。
内 容:
Email:  *
单位:
验证码:   刷新
您在IR的使用过程中有什么好的想法或者建议可以反馈给我们。
标 题:
 *
内 容:
Email:  *
验证码:   刷新

Items in IR are protected by copyright, with all rights reserved, unless otherwise indicated.

 

 

Valid XHTML 1.0!
Copyright © 2007-2020  中国科学院软件研究所 - Feedback
Powered by CSpace