vmOS: A virtualization-based, secure desktop system

doi:10.1016/j.cose.2016.10.008

vmOS: A virtualization-based, secure desktop system

2017-03-01

3

PRE

AI

DOI：10.1016/j.cose.2016.10.008

原文链接

原文求助

摘要

En 中文

Centralized management is typically applied in modern operating system (OS) architecture; however, such systems are prone to crash when any certain component of the OS is explicitly damaged. The basic reason is that these OSes can rarely support a thoroughly secure or isolated environment either between OS kernel-mode components or between user mode softwares. To mitigate this issue, we propose vmOS, an operating system that aims at improving the security of desktop computing environment. vmOS applies isolation technique to reduce attack surface, virtualization and mandatory access control to provide isolated environment among system components, application software and user privacy. We implement vmOS by adopting hardware-supported virtualization technology and modifying several well-known open source softwares, which aim to provide run-time efficiency of integrated system. Finally, we evaluate the security and performance by some vulnerability exploits and benchmark tools, showing that vmOS is capable of assuring the overall security of users' desktop computing with less overhead. (C) 2016 Elsevier Ltd. All rights reserved.

Keyword:

Hardware virtualization

Virtual machine isolation

Mandatory access control

Secure desktop system

Qemu

KVM

vmOS: A virtualization-based, secure desktop system

摘要

AI总结

期刊

机构

引用论文