{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,9]],"date-time":"2024-09-09T16:52:04Z","timestamp":1725900724095},"publisher-location":"Berlin, Heidelberg","reference-count":45,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642145964"},{"type":"electronic","value":"9783642145971"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-14597-1_10","type":"book-chapter","created":{"date-parts":[[2010,7,9]],"date-time":"2010-07-09T13:50:13Z","timestamp":1278683413000},"page":"156-179","source":"Crossref","is-referenced-by-count":20,"title":["Trusted Virtual Domains \u2013 Design, Implementation and Lessons Learned"],"prefix":"10.1007","author":[{"given":"Luigi","family":"Catuogno","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexandra","family":"Dmitrienko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Konrad","family":"Eriksson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dirk","family":"Kuhlmann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gianluca","family":"Ramunno","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ahmad-Reza","family":"Sadeghi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Steffen","family":"Schulz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthias","family":"Schunter","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marcel","family":"Winandy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Zhan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"10_CR1","unstructured":"Griffin, J.L., Jaeger, T., Perez, R., Sailer, R., van Doorn, L., C\u00e1ceres, R.: Trusted Virtual Domains: Toward secure distributed services. In: Proceedings of the 1st IEEE Workshop on Hot Topics in System Dependability, HotDep 2005 (2005)"},{"key":"10_CR2","unstructured":"Bussani, A., Griffin, J.L., Jansen, B., Julisch, K., Karjoth, G., Maruyama, H., Nakamura, M., Perez, R., Schunter, M., Tanner, A., Van Doorn, L., Van Herreweghen, E.A., Waidner, M., Yoshihama, S.: Trusted Virtual Domains: Secure foundations for business and IT services. Technical Report RC23792, IBM Research (2005)"},{"key":"10_CR3","unstructured":"Katsuno, Y., Kudo, M., Perez, P., Sailer, R.: Towards Multi-Layer Trusted Virtual Domains. In: The 2nd Workshop on Advances in Trusted Computing (WATC 2006 Fall), Japanese Ministry of Economy, Trade and Industry, METI, Tokyo, Japan (2006)"},{"key":"10_CR4","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1145\/1341312.1341321","volume":"42","author":"S. Berger","year":"2008","unstructured":"Berger, S., C\u00e1ceres, R., Pendarakis, D., Sailer, R., Valdez, E., Perez, R., Schildhauer, W., Srinivasan, D.: TVDc: managing security in the trusted virtual datacenter. SIGOPS Oper. Syst. Rev.\u00a042, 40\u201347 (2008)","journal-title":"SIGOPS Oper. Syst. Rev."},{"key":"10_CR5","doi-asserted-by":"publisher","first-page":"235","DOI":"10.1145\/1315245.1315275","volume-title":"CCS 2007: Proceedings of the 14th ACM Conference on Computer and Communications Security","author":"S. Cabuk","year":"2007","unstructured":"Cabuk, S., Dalton, C.I., Ramasamy, H., Schunter, M.: Towards automated provisioning of secure virtualized networks. In: CCS 2007: Proceedings of the 14th ACM Conference on Computer and Communications Security, pp. 235\u2013245. ACM, New York (2007)"},{"key":"10_CR6","volume-title":"ACSAC 2005: Proceedings of the 21st Annual Computer Security Applications Conference","author":"R. Sailer","year":"2005","unstructured":"Sailer, R., Jaeger, T., Valdez, E., Perez, R., Berger, S., Griffin, J.L., van Doorn, L.: Building a MAC-based security architecture for the Xen open-source hypervisor. In: ACSAC 2005: Proceedings of the 21st Annual Computer Security Applications Conference. IEEE Computer Society, Los Alamitos (2005)"},{"key":"10_CR7","doi-asserted-by":"crossref","unstructured":"Goldman, K., Perez, R., Sailer, R.: Linking remote attestation to secure tunnel endpoints. In: STC 2006: Proceedings of the First ACM Workshop on Scalable Trusted Computing, pp. 21\u201324 (2006)","DOI":"10.1145\/1179474.1179481"},{"key":"10_CR8","series-title":"Lecture Notes in Computer Science","first-page":"53","volume-title":"Information Security","author":"N. Asokan","year":"2007","unstructured":"Asokan, N., Ekberg, J.E., Sadeghi, A.R., St\u00fcble, C., Wolf, M.: Enabling fairer digital rights management with trusted computing. In: Garay, J.A., Lenstra, A.K., Mambo, M., Peralta, R. (eds.) ISC 2007. LNCS, vol.\u00a04779, pp. 53\u201370. Springer, Heidelberg (2007)"},{"key":"10_CR9","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1145\/1456455.1456462","volume-title":"STC 2008: Proceedings of the 3rd ACM Workshop on Scalable Trusted Computing","author":"F. Armknecht","year":"2008","unstructured":"Armknecht, F., Gasmi, Y., Sadeghi, A.R., Stewin, P., Unger, M., Ramunno, G., Vernizzi, D.: An efficient implementation of trusted channels based on OpenSSL. In: STC 2008: Proceedings of the 3rd ACM Workshop on Scalable Trusted Computing, pp. 41\u201350. ACM, New York (2008)"},{"key":"10_CR10","unstructured":"Berger, S., Caceres, R., Goldman, K.A., Perez, R., Sailer, R., van Doorn, L.: vTPM: Virtualizing the Trusted Platform Module. In: Proceedings of the 15th USENIX Security Symposium, USENIX, pp. 305\u2013320 (2006)"},{"key":"10_CR11","doi-asserted-by":"crossref","unstructured":"Scarlata, V., Rozas, C., Wiseman, M., Grawrock, D., Vishik, C.: TPM virtualization: Building a general framework. In: Pohlmann, N., Reimer, H. (eds.) Trusted Computing, pp. 43\u201356. Vieweg-Verlag (2007)","DOI":"10.1007\/978-3-8348-9452-6_4"},{"key":"10_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1007\/978-3-540-68979-9_9","volume-title":"Trusted Computing - Challenges and Applications","author":"P. England","year":"2008","unstructured":"England, P., Loeser, J.: Para-virtualized TPM sharing. In: Lipp, P., Sadeghi, A.-R., Koch, K.-M. (eds.) Trust 2008. LNCS, vol.\u00a04968, pp. 119\u2013132. Springer, Heidelberg (2008)"},{"key":"10_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-540-85886-7_1","volume-title":"Information Security","author":"A.R. Sadeghi","year":"2008","unstructured":"Sadeghi, A.R., St\u00fcble, C., Winandy, M.: Property-based TPM virtualization. In: Wu, T.-C., Lei, C.-L., Rijmen, V., Lee, D.-T. (eds.) ISC 2008. LNCS, vol.\u00a05222, pp. 1\u201316. Springer, Heidelberg (2008)"},{"key":"10_CR14","unstructured":"EMSCB Project Consortium: The European Multilaterally Secure Computing Base (EMSCB) project (2004), http:\/\/www.emscb.org"},{"key":"10_CR15","unstructured":"The OpenTC Project Consortium: The Open Trusted Computing (OpenTC) project (2005), http:\/\/www.opentc.net"},{"key":"10_CR16","unstructured":"Kuhlmann, D., Landfermann, R., Ramasamy, H.V., Schunter, M., Ramunno, G., Vernizzi, D.: An open trusted computing architecture \u2013 secure virtual machines enabling user-defined policy enforcement. Technical Report RZ 3655 (#99675), IBM Research (2006)"},{"key":"10_CR17","unstructured":"Nick, L., Petroni, J., Fraser, T., Molina, J., Arbaugh, W.A.: Copilot - a coprocessor-based kernel runtime integrity monitor. In: Proceedings of the 13th USENIX Security Symposium, pp. 179\u2013194 (2004)"},{"key":"10_CR18","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1145\/1314354.1314362","volume-title":"STC 2007: Proceedings of the 2007 ACM Workshop on Scalable Trusted Computing","author":"P.A. Loscocco","year":"2007","unstructured":"Loscocco, P.A., Wilson, P.W., Pendergrass, J.A., McDonell, C.D.: Linux kernel integrity measurement using contextual inspection. In: STC 2007: Proceedings of the 2007 ACM Workshop on Scalable Trusted Computing, pp. 21\u201329. ACM, New York (2007)"},{"key":"10_CR19","unstructured":"Garfinkel, T., Rosenblum, M.: A virtual machine introspection based architecture for intrusion detection. In: Proceedings of the 2003 Network and Distributed System Symposium (2003)"},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Payne, B.D., Carbone, M.D., Lee, W.: Secure and flexible monitoring of virtual machines. In: Proceedings of the 2007 Annual Computer Security Applications Conference, ACSAC 2007 (2007)","DOI":"10.1109\/ACSAC.2007.10"},{"key":"10_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"396","DOI":"10.1007\/978-3-642-00843-6_34","volume-title":"Information Security Practice and Experience","author":"H. L\u00f6hr","year":"2009","unstructured":"L\u00f6hr, H., Sadeghi, A.R., Vishik, C., Winandy, M.: Trusted privacy domains \u2013 challenges for trusted computing in privacy-protecting information sharing. In: Bao, F., Li, H., Wang, G. (eds.) ISPEC 2009. LNCS, vol.\u00a05451, pp. 396\u2013407. Springer, Heidelberg (2009)"},{"key":"10_CR22","unstructured":"Trusted\u00a0Computing Group: TPM Main Specification, Version 1.2 rev. 103 (2007)"},{"key":"10_CR23","unstructured":"Catuogno, L., Manulis, M., L\u00f6hr, H., Sadeghi, A.R., Winandy, M.: Transparent mobile storage protection in trusted virtual domains. In: 23rd Large Installation System Administration Conference (LISA 2009). USENIX Association (2009)"},{"key":"10_CR24","doi-asserted-by":"crossref","unstructured":"Backes, M., Cachin, C., Oprea, A.: Lazy revocation in cryptographic file systems. In: 3rd International IEEE Security in Storage Workshop (SISW 2005), San Francisco, California, USA, December 13, pp. 1\u201311 (2005)","DOI":"10.1109\/SISW.2005.7"},{"key":"10_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"327","DOI":"10.1007\/11863908_21","volume-title":"Computer Security \u2013 ESORICS 2006","author":"M. Backes","year":"2006","unstructured":"Backes, M., Cachin, C., Oprea, A.: Secure key-updating for lazy revocation. In: Gollmann, D., Meier, J., Sabelfeld, A. (eds.) ESORICS 2006. LNCS, vol.\u00a04189, pp. 327\u2013346. Springer, Heidelberg (2006)"},{"key":"10_CR26","doi-asserted-by":"crossref","unstructured":"Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Pratt, I., Warfield, A., Barham, P., Neugebauer, R.: Xen and the art of virtualization. In: Proceedings of the ACM Symposium on Operating Systems Principles, pp. 164\u2013177 (2003)","DOI":"10.1145\/1165389.945462"},{"key":"10_CR27","unstructured":"Hohmuth, M.: The Fiasco kernel: Requirements definition. Technical report, Dresden University of Technology (1998)"},{"key":"10_CR28","unstructured":"Libvirt project: libvirt virtualization API (2008), http:\/\/libvirt.org"},{"key":"10_CR29","unstructured":"Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Neugebauer, R., Pratt, I., Warfield, A.: Xen and the art of virtualization. In: SOSP (2007)"},{"key":"10_CR30","unstructured":"Qumranet Inc.: Whitepaper: Kernel-based virtualiztion machine (2006), http:\/\/www.qumranet.com\/files\/white_papers\/KVM_Whitepaper.pdf"},{"key":"10_CR31","unstructured":"Bellard, F.: QEMU, open source processor emulator (2008)"},{"key":"10_CR32","unstructured":"Sun Microsystems: Virtualbox (2008)"},{"key":"10_CR33","unstructured":"IEEE Computer Society: 802.11Q: Virtual Bridged Local Area Networks (2003)"},{"key":"10_CR34","doi-asserted-by":"crossref","unstructured":"Jaeger, T., Butler, K., King, D.H., Hallyn, S., Latten, J., Zhang, X.: Leveraging IPsec for mandatory access control across systems. In: Proceedings of the Second International Conference on Security and Privacy in Communication Networks (2006)","DOI":"10.1109\/SECCOMW.2006.359530"},{"key":"10_CR35","unstructured":"Amazon.com, Inc.: Amazon web services: Overview of security processes. Whitepaper (2008), http:\/\/aws.amazon.com"},{"key":"10_CR36","unstructured":"Manulis, M.: Security-Focused Survey on Group Key Exchange Protocols. Technical Report 2006\/03, Horst-G\u00f6rtz Institute, Network and Data Security Group (2006)"},{"key":"10_CR37","unstructured":"Distributed Management Task Force: Common Information Model (CIM) Standards (2009), http:\/\/www.dmtf.org\/standards\/cim\/"},{"key":"10_CR38","unstructured":"Winer, D.: XML-RPC Specification (1999)"},{"key":"10_CR39","unstructured":"Object Management Group: OMG IDL Syntax and Semantics (2002)"},{"key":"10_CR40","unstructured":"Organization for the Advancement of Structured Information Standards (OASIS): eXtensible Access Control Markup Language (XACML) v2.0 (2005), http:\/\/www.oasis-open.org\/specs\/"},{"key":"10_CR41","volume-title":"STC 2008: Proceedings of the 3rd ACM Workshop on Scalable Trusted Computing","author":"Y. Gasmi","year":"2008","unstructured":"Gasmi, Y., Husseiki, R., Sadeghi, A.R., Stewin, P., St\u00fcble, C., Unger, M., Winandy, M.: Flexible and secure enterprise rights management based on trusted virtual domains. In: STC 2008: Proceedings of the 3rd ACM Workshop on Scalable Trusted Computing. ACM, New York (2008)"},{"key":"10_CR42","volume-title":"Journal of Computer Science, Special Issue on EU\u2019s ICT Security Research","author":"S. Cabuk","year":"2009","unstructured":"Cabuk, S., Dalton, C.I., Eriksson, K., Kuhlmann, D., Ramasamy, H.G.V., Ramunno, G., Sadeghi, A.R., Schunter, M., St\u00fcble, C.: Towards automated security policy enforcement in multi-tenant virtual data centers. In: Journal of Computer Science, Special Issue on EU\u2019s ICT Security Research. IOS Press, Amsterdam (2009)"},{"key":"10_CR43","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1147\/JRD.2009.5429060","volume":"53","author":"S. Berger","year":"2009","unstructured":"Berger, S., C\u00e1ceres, R., Goldman, K., Pendarakis, D., Perez, R., Rao, J.R., Rom, E., Sailer, R., Schildhauer, W., Srinivasan, D., Tal, S., Valdez, E.: Security for the cloud infrastructure: Trusted virtual data center implementation. IBM Journal of Research and Development\u00a053, 6:1\u20136:12 (2009)","journal-title":"IBM Journal of Research and Development"},{"key":"10_CR44","unstructured":"Faden, G.: Solaris Trusted Extensions: Architectural Overview (2006), http:\/\/opensolaris.org\/os\/community\/security\/projects\/tx\/TrustedExtensionsArch.pdf"},{"key":"10_CR45","unstructured":"Schuba, C.: Security Advantages of Solaris Zones Software (2008), http:\/\/blogs.sun.com\/schuba\/resource\/papers\/ZonesSecurity-BP-010809.pdf"}],"container-title":["Lecture Notes in Computer Science","Trusted Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-14597-1_10.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,24]],"date-time":"2020-11-24T02:55:17Z","timestamp":1606186517000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-14597-1_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642145964","9783642145971"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-14597-1_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2010]]}}}