Fine-grained Security Mechanisms Using Virtual Machines

点击翻译按钮获取中文摘要

We have developed fine-grained access control systems using OS-level information in the virtual machine monitor (VMM). The developed systems prevent only illegal file accesses and communication even if the attackers take the control of an OS. We have also developed a system in which the VMM directly changes OS-level scheduling. Through the development of these systems, we defined a new interface necessary for using OS-level information in the VMM.