{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T03:57:41Z","timestamp":1782878261051,"version":"3.54.5"},"publisher-location":"Cham","reference-count":49,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319115986","type":"print"},{"value":"9783319115993","type":"electronic"}],"license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-11599-3_5","type":"book-chapter","created":{"date-parts":[[2014,10,6]],"date-time":"2014-10-06T13:15:19Z","timestamp":1412601319000},"page":"77-93","source":"Crossref","is-referenced-by-count":45,"title":["Security of OS-Level Virtualization Technologies"],"prefix":"10.1007","author":[{"given":"Elena","family":"Reshetova","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Janne","family":"Karhunen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas","family":"Nyman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"N.","family":"Asokan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"5_CR1","unstructured":"AppArmor project wiki, http:\/\/wiki.apparmor.net\/index.php\/Main_Page"},{"key":"5_CR2","unstructured":"Cellrox project, http:\/\/www.cellrox.com\/"},{"key":"5_CR3","unstructured":"Cgroups, https:\/\/www.kernel.org\/doc\/Documentation\/cgroups\/cgroups.txt"},{"key":"5_CR4","unstructured":"iCore project page, http:\/\/icoresoftware.com\/"},{"key":"5_CR5","unstructured":"Linux Containers mailing list, http:\/\/lists.linuxfoundation.org\/pipermail\/containers\/2013-September\/033466.html"},{"key":"5_CR6","unstructured":"Linux Network Namespaces, http:\/\/www.opencloudblog.com\/?p=42"},{"key":"5_CR7","unstructured":"Linux Programmer\u2019s Manual page on chroot(2) from 20.9.2010 (release 3.35)"},{"key":"5_CR8","unstructured":"Linux Programmer\u2019s Manual pages (release 3.35)"},{"key":"5_CR9","unstructured":"Linux-VServer project, http:\/\/linux-vserver.org"},{"key":"5_CR10","unstructured":"LxC project, http:\/\/linuxcontainers.org\/"},{"key":"5_CR11","unstructured":"Namespace support for Android binder, http:\/\/lwn.net\/Articles\/577957\/"},{"key":"5_CR12","unstructured":"OpenVZ project, http:\/\/openvz.org"},{"key":"5_CR13","unstructured":"RCTL, https:\/\/wiki.freebsd.org\/Hierarchical_Resource_Limits"},{"key":"5_CR14","unstructured":"Sandboxie project page, http:\/\/www.sandboxie.com\/"},{"key":"5_CR15","unstructured":"Smack project, http:\/\/schaufler-ca.com\/home"},{"key":"5_CR16","unstructured":"TIPC project, http:\/\/tipc.sourceforge.net\/"},{"key":"5_CR17","unstructured":"Biederman: Multiple Instances of the Global Linux Namespaces. In: Linux Symposium, pp. 101\u2013112 (2006)"},{"key":"5_CR18","unstructured":"Corbet: Seccomp and sandboxing, http:\/\/lwn.net\/Articles\/332974\/"},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Creasy: The origin of the VM\/370 time-sharing system. IBM Journal of Research and Development, 483\u2013490 (1981)","DOI":"10.1147\/rd.255.0483"},{"key":"5_CR20","unstructured":"Edge: Another union filesystem approach, https:\/\/lwn.net\/Articles\/403012\/"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Alpern, et al.: PDS: a virtual execution environment for software deployment. In: VEE, pp. 175\u2013185 (2005)","DOI":"10.1145\/1064979.1065004"},{"key":"5_CR22","doi-asserted-by":"crossref","unstructured":"Andrus, et al.: Cells: a virtual mobile smartphone architecture. In: ACM SOSP, pp. 173\u2013187 (2011)","DOI":"10.1145\/2043556.2043574"},{"key":"5_CR23","unstructured":"Asokan, et al.: Security of OS-level virtualization technologies: Technical report, http:\/\/arxiv.org\/abs\/1407.4245"},{"key":"5_CR24","unstructured":"Banga, et al.: Resource containers: A new facility for resource management in server systems. In: OSDI, pp. 45\u201358 (1999)"},{"key":"5_CR25","doi-asserted-by":"crossref","unstructured":"Barham, et al.: Xen and the art of virtualization. In: ACM SIGOPS OSR, pp. 164\u2013177 (2003)","DOI":"10.1145\/1165389.945462"},{"key":"5_CR26","doi-asserted-by":"crossref","unstructured":"Bhattiprolu, et al.: Virtual servers and checkpoint\/restart in mainstream Linux. In: ACM SIGOPS OSR, pp. 104\u2013113 (2008)","DOI":"10.1145\/1400097.1400109"},{"key":"5_CR27","doi-asserted-by":"crossref","unstructured":"Chaudhary, et al.: A comparison of virtualization technologies for HPC. In: AINA, pp. 861\u2013868 (2008)","DOI":"10.1109\/AINA.2008.45"},{"key":"5_CR28","doi-asserted-by":"crossref","unstructured":"Dodis, et al.: Security analysis of pseudo-random number generators with input:\/dev\/random is not robust. In: 2013 ACM SIGSAC, pp. 647\u2013658 (2013)","DOI":"10.1145\/2508859.2516653"},{"key":"5_CR29","unstructured":"Kamp, et al.: Jails: Confining the omnipotent root. In: SANE, p. 116 (2000)"},{"key":"5_CR30","unstructured":"Kivity, et al.: KVM: the Linux virtual machine monitor. In: Linux Symposium, vol.\u00a01, pp. 225\u2013230 (2007)"},{"key":"5_CR31","unstructured":"Mirkin, et al.: Containers checkpointing and live migration. In: Linux Symposium, pp. 85\u201392 (2008)"},{"key":"5_CR32","doi-asserted-by":"crossref","unstructured":"Osman, et al.: The design and implementation of Zap: A system for migrating computing environments. In: ACM SIGOPS OSR, pp. 361\u2013376 (2002)","DOI":"10.1145\/844128.844162"},{"key":"5_CR33","unstructured":"Padala, et al.: Performance evaluation of virtualization technologies for server consolidation. HP Labs Tec. Report (2007)"},{"key":"5_CR34","unstructured":"Pike, et al.: Plan 9 from Bell Labs. In: UKUUG, pp. 1\u20139 (1990)"},{"key":"5_CR35","doi-asserted-by":"crossref","unstructured":"Pike, et al.: The Use of Name Spaces in Plan 9. In: 5th Workshop on ACM SIGOPS European Workshop, pp. 1\u20135 (1992)","DOI":"10.1145\/506378.506413"},{"key":"5_CR36","unstructured":"Price, et al.: Solaris Zones: Operating System Support for Consolidating Commercial Workloads. In: LISA, pp. 241\u2013254 (2004)"},{"key":"5_CR37","doi-asserted-by":"crossref","unstructured":"Regola, et al.: Recommendations for virtualization technologies in high performance computing. In: IEEE CloudCom, pp. 409\u2013416 (2010)","DOI":"10.1109\/CloudCom.2010.71"},{"key":"5_CR38","unstructured":"Shim, et al.: Bring Your Own Device (BYOD): Current Status, Issues, and Future Directions (2013)"},{"key":"5_CR39","unstructured":"Smalley, et al.: Implementing SELinux as a Linux security module. NAI Labs Report 1, 43 (2001)"},{"key":"5_CR40","unstructured":"Watson, et al.: Capsicum: Practical Capabilities for UNIX. In: USENIX, pp. 29\u201346 (2010)"},{"key":"5_CR41","series-title":"IFIP AICT","doi-asserted-by":"crossref","first-page":"148","DOI":"10.1007\/978-3-642-39218-4_12","volume-title":"Security and Privacy Protection in Information Processing Systems","author":"S. Wessel","year":"2013","unstructured":"Wessel, S., Stumpf, F., Herdt, I., Eckert, C.: Improving Mobile Device Security with Operating System-Level Virtualization. In: Janczewski, L.J., Wolfe, H.B., Shenoi, S. (eds.) SEC 2013. IFIP AICT, vol.\u00a0405, pp. 148\u2013161. Springer, Heidelberg (2013)"},{"key":"5_CR42","unstructured":"Wright, et al.: Linux security module framework. In: Linux Symposium, pp. 604\u2013617 (2002)"},{"key":"5_CR43","doi-asserted-by":"crossref","unstructured":"Xavier, et al.: Performance evaluation of container-based virtualization for high performance computing environments. In: PDP, pp. 233\u2013240 (2013)","DOI":"10.1109\/PDP.2013.41"},{"key":"5_CR44","doi-asserted-by":"crossref","unstructured":"Yang, et al.: Impacts of Virtualization Technologies on Hadoop. In: ISDEA, pp. 846\u2013849 (2013)","DOI":"10.1109\/ISDEA.2012.200"},{"key":"5_CR45","doi-asserted-by":"crossref","unstructured":"Yu, et al.: A feather-weight virtual machine for windows applications. In: VEE, pp. 24\u201334 (2006)","DOI":"10.1145\/1134760.1134766"},{"key":"5_CR46","unstructured":"The Open Group. The Single UNIX\u00ae Specification: Authorized Guide to Version 4 (2010), http:\/\/www.unix.org\/version4\/theguide.html"},{"key":"5_CR47","doi-asserted-by":"crossref","unstructured":"Kizza: Virtualization Infrastructure and Related Security Issues. In: Guide to Computer Network Security, pp. 447\u2013464 (2013)","DOI":"10.1007\/978-1-4471-4543-1_21"},{"key":"5_CR48","unstructured":"Kolyshkin: Virtualization in Linux. White paper, OpenVZ (2006)"},{"key":"5_CR49","unstructured":"Rosenblum: VMware\u2019s Virtual Platform. In: Hot Chips, pp. 185\u2013196 (1999)"}],"container-title":["Lecture Notes in Computer Science","Secure IT Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-11599-3_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,5]],"date-time":"2025-05-05T01:13:45Z","timestamp":1746407625000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-11599-3_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319115986","9783319115993"],"references-count":49,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-11599-3_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014]]}}}