[Xense-devel] Xen/sHype Access Control

["Myong H. Kang" <mkang@xxxxxxxxxxxxxxxx>]

Xen 3.0/sHype provides a way to control access between domains. Simple types
can be associated with a domain that can be the basis for enforcing an
access control policy.

Controlling access to physical devices is another important area because
many of covert channels stem from sharing resources (physical devices in
this case). Also such mechanism may provide an opportunity to simplify
assurance arguments. For example, if we create a mechanism to associate
simple types to a physical device, sHype ACM can enforce an access control
policy.

I would like to hear your comments on the above idea and the feasibility of
implementing the idea.

Myong  




_______________________________________________
Xense-devel mailing list
Xense-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xense-devel