Linux - Open Source White Papers
Building a MAC-Based Security Architecture for the Xen Open-Source Hypervisor
Overview This paper presents the sHype hypervisor security architecture and examines in detail its mandatory access control facilities. While existing hypervisor security approaches aiming at high assurance have been proven useful for high-security environments that prioritize security over performance and code reuse, the approach aims at commercial security where near-zero performance overhead, non-intrusive implementation, and usability are of paramount importance. sHype enforces strong isolation at the granularity of a virtual machine, thus providing a robust foundation on which higher software layers can enact finer-grained controls. The paper provides the rationale behind the sHype design and describes and evaluates the implementation for the Xen open-source hypervisor.
| Publisher | IBM | File Format | |
|---|---|---|---|
| Date Published | October 2005 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 1 out of 3 users found this white paper useful
White Paper RSS
Download
