Dynamic Information-flow Tracking via Virtual Machines

• Project/Area Number: 20700020
• Research Category: Grant-in-Aid for Young Scientists (B)
• Allocation Type: Single-year Grants
• Research Field: Software
• Research Institution: University of Tsukuba
• Principal Investigator: SHINAGAWA Takahiro University of Tsukuba, 大学院・システム情報工学研究科, 講師 (40361745)
• Project Period (FY): 2008 – 2009
• Project Status: Completed (Fiscal Year 2009)
• Budget Amount: ¥4,290,000 (Direct Cost: ¥3,300,000、Indirect Cost: ¥990,000); Fiscal Year 2009: ¥1,950,000 (Direct Cost: ¥1,500,000、Indirect Cost: ¥450,000); Fiscal Year 2008: ¥2,340,000 (Direct Cost: ¥1,800,000、Indirect Cost: ¥540,000)
• Keywords: 仮想マシンモニタ / セキュリティ / 動的情報流追跡 / 仮想マシン / 情報流追跡

Research Abstract

We have carried out the research on virtual machine technologies for enforcing the security of operating systems by monitoring the flow of information. We have developed a virtual machine monitor technology for monitoring I/O access to devices, allowing the virtual machine monitor to mediate and protect file access from the operating systems.

Research Products

• [Journal Article] Hypervisor-based Prevention of Persistent Rootkits (2010)
  • Author(s): 忠鉢洋輔, 品川高廣, 加藤和彦
  • Journal Title: In Proc.of the 25th ACM Symposium On Applied Computing 1 Pages: 214-220
  • Peer Reviewed
• [Journal Article] 実行時のフェーズを用いたセキュリティポリシー簡略化 (2009)
  • Author(s): 品川高廣, 忠鉢洋輔, 河野健二, 加藤和彦
  • Journal Title: 情報処理学会論文誌:コンピューティングシステム 第2巻 Pages: 166-177
  • Peer Reviewed
• [Presentation] Hypervisor-based Prevention of Persistent Rootkits. (2010)
  • Author(s): Yosuke Chubachi, Takahiro Shinagawa, Kazuhiko Kato
  • Organizer: 25th ACM Symposium On Applied Computing (ACM SAC 2010)
  • Place of Presentation: Sierre, Switzerland
  • Year and Date: 2010-03-24
• [Presentation] 仮想マシンモニタによるゲストOSのファイル保護. (2009)
  • Author(s): 忠鉢洋輔, 品川高廣, 加藤和彦
  • Organizer: 情報処理学会研究報告(2009- OS-111), 第111回システムソフトウェアとオペレーティングシステム研究会, 情報処理学会
  • Place of Presentation: 沖縄
  • Year and Date: 2009-04-24
• [Presentation] 仮想マシンモニタによるゲストOSのファイル保護 (2009)
  • Author(s): 忠鉢洋輔, 品川高廣, 加藤和彦
  • Organizer: 第111回システムソフトウェアとオペレーティングシステム研究会
  • Place of Presentation: 沖縄 沖縄県青年会館
  • Year and Date: 2009-04-24
• [Presentation] BitVisor: A Thin Hypervisor for Enforcing I/O Device Security. (2009)
  • Author(s): Takahiro Shinagawa, Hideki Eiraku, Kouichi Tanimoto, Kazumasa Omote, Shoichi Hasegawa, Takashi Horie, Manabu Hirano, Kenichi Kourai, Yoshihiro Oyama, Eiji Kawai, Kenji Kono, Shigeru Chiba, Yasushi Shinjo, Kazuhiko Kato
  • Organizer: 2009 ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE 2009)
  • Place of Presentation: Washington, DC, USA
  • Year and Date: 2009-03-13