P. Surányi, H. Abe, Toshio Hirotsu, Yasushi Shinjo, Kazuhiko Kato
{"title":"General virtual hosting via lightweight user-level visualization","authors":"P. Surányi, H. Abe, Toshio Hirotsu, Yasushi Shinjo, Kazuhiko Kato","doi":"10.1109/SAINT.2005.32","DOIUrl":null,"url":null,"abstract":"The abundance of computing resources in current systems makes it technically feasible to run services for multiple Internet sites on a single machine. However, in the UNIX security model, a vast majority of services must be run with superuser privileges. This increases security risks considerably when numerous services are running in parallel, making the isolation of services a critical issue. Virtual hosting systems have been implemented at the application level and at the operating system (OS) level and by running services in isolated full-scale virtual machines. We present a middleware approach to general virtual hosting that does not require modifications to the OS or the application. While completely implementable in the user-level in UNIX-like OSes, our system allows secure deployment of services, even when they are executed with superuser privileges.","PeriodicalId":169669,"journal":{"name":"The 2005 Symposium on Applications and the Internet","volume":"6 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2005-01-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"3","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"The 2005 Symposium on Applications and the Internet","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/SAINT.2005.32","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 3
Abstract
The abundance of computing resources in current systems makes it technically feasible to run services for multiple Internet sites on a single machine. However, in the UNIX security model, a vast majority of services must be run with superuser privileges. This increases security risks considerably when numerous services are running in parallel, making the isolation of services a critical issue. Virtual hosting systems have been implemented at the application level and at the operating system (OS) level and by running services in isolated full-scale virtual machines. We present a middleware approach to general virtual hosting that does not require modifications to the OS or the application. While completely implementable in the user-level in UNIX-like OSes, our system allows secure deployment of services, even when they are executed with superuser privileges.
京公网安备 11010802042870号
京ICP备2023020795号-1
分享
求助内容：
应助结果提醒方式：
扫码关注我们
