کد مقاله | کد نشریه | سال انتشار | مقاله انگلیسی | نسخه تمام متن |
---|---|---|---|---|
11002562 | 1444208 | 2018 | 16 صفحه PDF | دانلود رایگان |
عنوان انگلیسی مقاله ISI
Gemini: Guest-transparent honey files via hypervisor-level access redirection
دانلود مقاله + سفارش ترجمه
دانلود مقاله ISI انگلیسی
رایگان برای ایرانیان
کلمات کلیدی
موضوعات مرتبط
مهندسی و علوم پایه
مهندسی کامپیوتر
شبکه های کامپیوتری و ارتباطات
پیش نمایش صفحه اول مقاله
![عکس صفحه اول مقاله: Gemini: Guest-transparent honey files via hypervisor-level access redirection Gemini: Guest-transparent honey files via hypervisor-level access redirection](/preview/png/11002562.png)
چکیده انگلیسی
Data safety has become a critical problem in the face of various cyber-attacks aiming at stealing or divulging sensitive information. In the event that adversaries have gained access to a system storing classified data, such crucial systems should actively protect the integrity of this data. To purposely deceive an attacker, we propose that accesses to sensitive data can be dynamically partitioned to prevent malicious tampering. In this paper, we present Gemini, a virtualization-based system to transparently redirect accesses to classified files based on the context of the access (e.g., process, user, time-of-day, etc.). If an access violates preconfigured data-use policies then it will be rerouted to a honey version of the file, specifically crafted to be manipulated by the adversary. Thus, Gemini transforms static, sensitive files into moving targets and provides strong transparency and tamper-resistance as it is located at the hypervisor level. Our evaluation shows that Gemini effectively neutralizes several real-world attacks on various sensitive files and can be integrated seamlessly into current cloud environments.
ناشر
Database: Elsevier - ScienceDirect (ساینس دایرکت)
Journal: Computers & Security - Volume 77, August 2018, Pages 737-744
Journal: Computers & Security - Volume 77, August 2018, Pages 737-744
نویسندگان
Zhongshu Gu, Brendan Saltaformaggio, Xiangyu Zhang, Dongyan Xu,