VSIM: a Provable Secure Virtual Security Isolation Model
Jun Ma, Yuanbo Guo, Hongzhao Kou · 2012
With the continuous development of the network technology and the significant raising of the hardware's performance-price ratio, it is a popular tendency that users access different kinds of network via endpoint computers for obtaining share/free resources.Meanwhile, endpoint computers act as endpoint computing platforms to provide basic serve for different security level networking.In this condition, different security level resources stored in personal endpoint computers incurs security threat which come up with new challenges to the existing security isolation mechanisms.In this paper, a new security isolation model is presented based on hardware level virtualization technology by comparing available isolation execution technologies, and is proved to satisfy the Bell-LaPadula (BLP) confidentiality model.