Fine-grained Security Mechanisms Using Virtual Machines

我们已经开发出细粒度的访问控制系统，使用操作系统级的信息，在虚拟机监视器（VMM）。所开发的系统只防止非法的文件访问和通信，即使攻击者采取控制的操作系统。我们还开发了一个系统，其中VMM直接改变操作系统级调度。通过这些系统的开发，我们定义了一个新的接口，在VMM中使用操作系统级的信息。

We have developed fine-grained access control systems using OS-level information in the virtual machine monitor (VMM). The developed systems prevent only illegal file accesses and communication even if the attackers take the control of an OS. We have also developed a system in which the VMM directly changes OS-level scheduling. Through the development of these systems, we defined a new interface necessary for using OS-level information in the VMM.