| B. Gold, R. R. Linde, M. Schaefer, and J. F. Scheid. Vm/370 security retrofit program. In Proceedings 1977 Annual Conference, pages 411--418, Seattle, WA, October 1977. A.C.M. |
....environments [21] Within a constrained VM, legacy operating systems and applications are executed unmodified and are easily upgraded and replaced even within the context of rapidly evolving software product lifecycles. In the past, some virtual machine monitors, such as the SDC KVM 370 [11, 9, 33, 10] and the DEC VAX SVS [17] have been used to separate mandatory security classes. A secure VMM for the Intel Pentium 1 processor architecture would be very desirable because a single machine could be used to implement critical security policies while also running popular Win32 operating systems ....
....multiprogramming operating system. It was also suggested that the redundant security mechanisms found in the VMM and the OS executing in one of its virtual machines enhanced security [21] Penetration experiments indicated that redundant weak implementations are insufficient to secure a system [5, 11]. KVM 370was an early secure Type I VMM [11, 33, 9] Called a security retrofit, two approaches to the work were examined: 1) hardening of the existing VM 370 control program (CP) to repair identified penetration vulnerabilities and (2) a redesign of the VM 370 CP to place all ....
[Article contains additional citation context not shown here]
B. Gold, R. R. Linde, M. Schaefer, and J. F. Scheid. Vm/370 security retrofit program. In Proceedings 1977 Annual Conference, pages 411--418, Seattle, WA, October 1977. A.C.M.
....create isolated environments for multiple operating systems or operating system instances. A secure VMM would provide assurance that information is confined within security levels. KVM provided an early example of a VMM embracing the notion of high assurance policy enforcement by a security kernel [13, 12]. The Class A1 VAX VMM is an example of such a system [17] For the purposes of the MLS LAN, the VMM would provide a virtual machine for instances of the terminal server. For each classification level, a separate terminal server able to support multiple clients at that level could be dynamically ....
B. Gold, R. R. Linde, M. Schaefer, and J. F. Scheid. Vm/370 security retrofit program. In Proceedings 1977 Annual Conference, pages 411-- 418, Seattle, WA, October 1977. A.C.M.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC