Show simple item record

dc.contributor.authorKrishnan, Neelima
dc.contributor.authorHitefield, Seth
dc.contributor.authorClancy, T. Charles
dc.contributor.authorMcGwier, Robert W.
dc.contributor.authorTront, Joseph G.
dc.date.accessioned2018-09-26T20:18:36Z
dc.date.available2018-09-26T20:18:36Z
dc.date.issued2013-06-28
dc.identifier.citationKrishan, Neelima, et al. Multipersona Hypovisors: Securing Mobile Devices through High-Performance Light-Weight Subsystem Isolation. Department of Computer Science, Virginia Polytechnic Institute & State University, 2013.en_US
dc.identifier.urihttp://hdl.handle.net/10945/60056
dc.descriptionFunded by Naval Postgraduate Schoolen_US
dc.description.abstractWe propose and detail a system called multipersona Hypovisors for providing light-weight isolation for enhancing security on Multipersona mobile devices, particularly with respect to the current memory constraints of these devices. Multipersona Hypovisors leverage Linux kernel cGroups and namespaces to establish independent process container, al-lowing isolation of the Multipersona process tree from other simultaneous instances of Multipersona and the hypovisor which is an underlying Angstrom-based embedded Linux distributions designed to add additional security to the system. The system incorporates a wide range of data integrity tools in the embedded hypovisor, and an SE Linux-enabled kernel for mandatory access control and integrity tools for transparent auditing of running Multipersona instances. A prototype is presented which uses integrity tools external to the Multipersona container to audit it for malicious activity, and also has the ability to support a multipersona environment with multiple encrypted personas existing individually or simultaneously on the device. Two versions are demonstrated, one which allows cold-swapping of personas for high-assurance scenarios and also one that supports hot-swapping. Analysis shows that the hypovisor has a 40-50 MB impact on the overall memory footprint for the system.en_US
dc.description.sponsorshipNaval Postgraduate School under contract N00244-11-P-2026en_US
dc.description.sponsorshipL-3 Communications National Security Solutions Center
dc.format.extent9 p.en_US
dc.language.isoen_USen_US
dc.publisherVirginia Techen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
dc.subjectMobile Deviceen_US
dc.subjectLight-Weight Virtualizationen_US
dc.subjectSE Linuxen_US
dc.subjectSecurityen_US
dc.subjectAccess Controlen_US
dc.subjectSystem Policyen_US
dc.subjectMultipersonaen_US
dc.titleMultipersona Hypovisors: Securing Mobile Devices through High-Performance Light-Weight Subsystem Isolationen_US
dc.typeArticleen_US
dc.description.funderN00244-11-P-2026


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record