Evaluation and design of function for tracing diffusion of classified information for file operations with KVM

Shota Fujii, Masaya Sato, Toshihiro Yamauchi, Hideo Taniguchi

Research output: Contribution to journalArticlepeer-review

3 Citations (Scopus)

Abstract

Cases of classified information leakage have become increasingly common. To address this problem, we have proposed a function for tracing the diffusion of classified information within an operating system. However, this function suffers from the following two problems: first, in order to introduce the function, the operating system’s source code must be modified. Second, there is a risk that the function will be disabled when the operating system is attacked. Thus, we have designed a function for tracing the diffusion of classified information in a guest operating system by using a virtual machine monitor. By using a virtual machine monitor, we can introduce the proposed function in various environments without modifying the operating system’s source code. In addition, attacks aimed at the proposed function are made more difficult, because the virtual machine monitor is isolated from the operating system. In this paper, we describe the implementation of the proposed function for file operations and child process creation in the guest operating system with a kernel-based virtual machine. Further, we demonstrate the traceability of diffusing classified information by file operations and child process creation. We also report the logical lines of code required to introduce the proposed function and performance overheads.

Original languageEnglish
Pages (from-to)1841-1861
Number of pages21
JournalJournal of Supercomputing
Volume72
Issue number5
DOIs
Publication statusPublished - May 1 2016

Keywords

  • Information leak prevention
  • Semantic gap
  • VMM
  • Virtualization

ASJC Scopus subject areas

  • Software
  • Theoretical Computer Science
  • Information Systems
  • Hardware and Architecture

Fingerprint

Dive into the research topics of 'Evaluation and design of function for tracing diffusion of classified information for file operations with KVM'. Together they form a unique fingerprint.

Cite this