Paper Info
Title
Evaluation and design of function for tracing diffusion of classified information for file operations with KVM.
Abstract
Cases of classified information leakage have become increasingly common. To address this problem, we have proposed a function for tracing the diffusion of classified information within an operating system. However, this function suffers from the following two problems: first, in order to introduce the function, the operating system's source code must be modified. Second, there is a risk that the function will be disabled when the operating system is attacked. Thus, we have designed a function for tracing the diffusion of classified information in a guest operating system by using a virtual machine monitor. By using a virtual machine monitor, we can introduce the proposed function in various environments without modifying the operating system's source code. In addition, attacks aimed at the proposed function are made more difficult, because the virtual machine monitor is isolated from the operating system. In this paper, we describe the implementation of the proposed function for file operations and child process creation in the guest operating system with a kernel-based virtual machine. Further, we demonstrate the traceability of diffusing classified information by file operations and child process creation. We also report the logical lines of code required to introduce the proposed function and performance overheads.
Year
DOI
Venue
2016
10.1007/s11227-016-1671-5
The Journal of Supercomputing
Keywords
Field
DocType
Information leak prevention,Virtualization,Semantic gap,VMM
Virtualization,Child process,Virtual machine,Computer science,Source code,Parallel computing,Hypervisor,Real-time computing,Classified information,Tracing,Distributed computing,Source lines of code
Journal
Volume
Issue
ISSN
72
5
0920-8542
Citations 
PageRank 
References 
1
0.35
13
Authors
4
Name
Order
Citations
PageRank
Shota Fujii162.57
Masaya Sato266.56
Toshihiro Yamauchi3179.39
Hideo Taniguchi410.35