Secure and Fast Log Transfer Mechanism for Virtual Machine (Preprint)

スポンサーリンク

概要

• 論文の詳細を見る

• Ensuring the integrity of logs is essential to reliably detect and counteract attacks because adversaries tamper with logs to hide their activities on a computer. Even though some studies proposed various protections of log files, adversaries can tamper with logs in kernel space with kernel-level malicious software (malware) because file access and inter-process communication are provided by an OS kernel. Virtual machine introspection (VMI) can collect logs from virtual machines (VMs) without interposition of a kernel. It is difficult for malware to hinder that log collection, because a VM and VM monitor (VMM) are strongly separated. However, complexity and unnecessary performance overhead arise because VMI is not specialized for log collection. This paper proposes a secure and fast log transfer method using library replacement for VMs. In the proposed method, a process on a VM requests a log transfer to a VMM using the modified library, which contains a trigger for a log transfer. The VMM collects logs from the VM and isolate them to another VM. The proposed method provides VM-level log isolation and security for the mechanism itself with low performance overhead.------------------------------This is a preprint of an article intended for publication Journal ofInformation Processing(JIP). This preprint should not be cited. Thisarticle should be cited as: Journal of Information Processing Vol.22(2014) No.4 (online)------------------------------

• 一般社団法人情報処理学会の論文
• 2014-09-15

著者

• Toshihiro Yamauchi

  Graduate School Of Natural Science And Technology Okayama University

• Masaya Sato

  Graduate School of Natural Science and Technology, Okayama University

関連論文

• SELinux Security Policy Configuration System with Higher Level Language
• Secure and Fast Log Transfer Mechanism for Virtual Machine (Preprint)

スポンサーリンク