Chinese wall isolation mechanism and its implementation on VMM

Guanhai Wang; Minglu Li; Chuliang Weng

doi:10.1007/978-3-642-14944-3_2

Chinese wall isolation mechanism and its implementation on VMM

Guanhai Wang
, Minglu Li
, Chuliang Weng

Shanghai Jiao Tong University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Scopus citations

Abstract

Virtualization is achieving increasing popularity and there are some mandatory access control (MAC) mechanisms available which control overt communications among virtual machines (VM) in virtual machine systems. However such mechanisms cannot block covert channels. A strong isolation mechanism at hardware layer can benefit solutions to this problem. Hence, in this paper we propose an isolation mechanism based on Chinese Wall policy to make an air-gap among VMs which have conflict of interest, and implement it on a popular virtual machine monitor (VMM), Xen. It regulates the VMM allocating hardware resources like physical memory, CPUs and I/O adapters to VMs without many losses of system performance. Hence it provides stronger isolation among VMs than VMMs do.

Original language	English
Title of host publication	Systems and Virtualization Management
Subtitle of host publication	Standards and the Cloud -Third International DMTF Academic AllianceWorkshop, SVM 2009, Revised Selected Papers
Editors	Latifa Boursas, Mark Carlson, Hai Jin, Michelle Sibilla, KesWold
Pages	13-18
Number of pages	6
DOIs	https://doi.org/10.1007/978-3-642-14944-3_2
State	Published - 2010
Externally published	Yes
Event	3rd International DMTF Academic Alliance Workshop on Systems and Virtualization Management: Standards and the Cloud, SVM 2009 - Wuhan, China Duration: 22 Sep 2009 → 23 Sep 2009

Publication series

Name	Communications in Computer and Information Science
Volume	71
ISSN (Print)	1865-0929

Conference

Conference	3rd International DMTF Academic Alliance Workshop on Systems and Virtualization Management: Standards and the Cloud, SVM 2009
Country/Territory	China
City	Wuhan
Period	22/09/09 → 23/09/09

Access to Document

10.1007/978-3-642-14944-3_2

Cite this

Wang, G., Li, M., & Weng, C. (2010). Chinese wall isolation mechanism and its implementation on VMM. In L. Boursas, M. Carlson, H. Jin, M. Sibilla, & KesWold (Eds.), Systems and Virtualization Management: Standards and the Cloud -Third International DMTF Academic AllianceWorkshop, SVM 2009, Revised Selected Papers (pp. 13-18). (Communications in Computer and Information Science; Vol. 71). https://doi.org/10.1007/978-3-642-14944-3_2

Wang, Guanhai ; Li, Minglu ; Weng, Chuliang. / Chinese wall isolation mechanism and its implementation on VMM. Systems and Virtualization Management: Standards and the Cloud -Third International DMTF Academic AllianceWorkshop, SVM 2009, Revised Selected Papers. editor / Latifa Boursas ; Mark Carlson ; Hai Jin ; Michelle Sibilla ; KesWold. 2010. pp. 13-18 (Communications in Computer and Information Science).

@inproceedings{02bde2c69b66499084c4f68ae389ae74,

title = "Chinese wall isolation mechanism and its implementation on VMM",

abstract = "Virtualization is achieving increasing popularity and there are some mandatory access control (MAC) mechanisms available which control overt communications among virtual machines (VM) in virtual machine systems. However such mechanisms cannot block covert channels. A strong isolation mechanism at hardware layer can benefit solutions to this problem. Hence, in this paper we propose an isolation mechanism based on Chinese Wall policy to make an air-gap among VMs which have conflict of interest, and implement it on a popular virtual machine monitor (VMM), Xen. It regulates the VMM allocating hardware resources like physical memory, CPUs and I/O adapters to VMs without many losses of system performance. Hence it provides stronger isolation among VMs than VMMs do.",

author = "Guanhai Wang and Minglu Li and Chuliang Weng",

year = "2010",

doi = "10.1007/978-3-642-14944-3\_2",

language = "英语",

isbn = "9783642149436",

series = "Communications in Computer and Information Science",

pages = "13--18",

editor = "Latifa Boursas and Mark Carlson and Hai Jin and Michelle Sibilla and KesWold",

booktitle = "Systems and Virtualization Management",

note = "3rd International DMTF Academic Alliance Workshop on Systems and Virtualization Management: Standards and the Cloud, SVM 2009 ; Conference date: 22-09-2009 Through 23-09-2009",

}

Wang, G, Li, M & Weng, C 2010, Chinese wall isolation mechanism and its implementation on VMM. in L Boursas, M Carlson, H Jin, M Sibilla & KesWold (eds), Systems and Virtualization Management: Standards and the Cloud -Third International DMTF Academic AllianceWorkshop, SVM 2009, Revised Selected Papers. Communications in Computer and Information Science, vol. 71, pp. 13-18, 3rd International DMTF Academic Alliance Workshop on Systems and Virtualization Management: Standards and the Cloud, SVM 2009, Wuhan, China, 22/09/09. https://doi.org/10.1007/978-3-642-14944-3_2

Chinese wall isolation mechanism and its implementation on VMM. / Wang, Guanhai; Li, Minglu; Weng, Chuliang.
Systems and Virtualization Management: Standards and the Cloud -Third International DMTF Academic AllianceWorkshop, SVM 2009, Revised Selected Papers. ed. / Latifa Boursas; Mark Carlson; Hai Jin; Michelle Sibilla; KesWold. 2010. p. 13-18 (Communications in Computer and Information Science; Vol. 71).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Chinese wall isolation mechanism and its implementation on VMM

AU - Wang, Guanhai

AU - Li, Minglu

AU - Weng, Chuliang

PY - 2010

Y1 - 2010

N2 - Virtualization is achieving increasing popularity and there are some mandatory access control (MAC) mechanisms available which control overt communications among virtual machines (VM) in virtual machine systems. However such mechanisms cannot block covert channels. A strong isolation mechanism at hardware layer can benefit solutions to this problem. Hence, in this paper we propose an isolation mechanism based on Chinese Wall policy to make an air-gap among VMs which have conflict of interest, and implement it on a popular virtual machine monitor (VMM), Xen. It regulates the VMM allocating hardware resources like physical memory, CPUs and I/O adapters to VMs without many losses of system performance. Hence it provides stronger isolation among VMs than VMMs do.

AB - Virtualization is achieving increasing popularity and there are some mandatory access control (MAC) mechanisms available which control overt communications among virtual machines (VM) in virtual machine systems. However such mechanisms cannot block covert channels. A strong isolation mechanism at hardware layer can benefit solutions to this problem. Hence, in this paper we propose an isolation mechanism based on Chinese Wall policy to make an air-gap among VMs which have conflict of interest, and implement it on a popular virtual machine monitor (VMM), Xen. It regulates the VMM allocating hardware resources like physical memory, CPUs and I/O adapters to VMs without many losses of system performance. Hence it provides stronger isolation among VMs than VMMs do.

UR - https://www.scopus.com/pages/publications/84880502477

U2 - 10.1007/978-3-642-14944-3_2

DO - 10.1007/978-3-642-14944-3_2

M3 - 会议稿件

AN - SCOPUS:84880502477

SN - 9783642149436

T3 - Communications in Computer and Information Science

SP - 13

EP - 18

BT - Systems and Virtualization Management

A2 - Boursas, Latifa

A2 - Carlson, Mark

A2 - Jin, Hai

A2 - Sibilla, Michelle

A2 - KesWold, null

T2 - 3rd International DMTF Academic Alliance Workshop on Systems and Virtualization Management: Standards and the Cloud, SVM 2009

Y2 - 22 September 2009 through 23 September 2009

ER -

Wang G, Li M, Weng C. Chinese wall isolation mechanism and its implementation on VMM. In Boursas L, Carlson M, Jin H, Sibilla M, KesWold, editors, Systems and Virtualization Management: Standards and the Cloud -Third International DMTF Academic AllianceWorkshop, SVM 2009, Revised Selected Papers. 2010. p. 13-18. (Communications in Computer and Information Science). doi: 10.1007/978-3-642-14944-3_2

Chinese wall isolation mechanism and its implementation on VMM

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this