Persistent Link:
http://hdl.handle.net/10150/195385
Title:
Stork: Secure Package Management for VM Environments
Author:
Cappos, Justin
Issue Date:
2008
Publisher:
The University of Arizona.
Rights:
Copyright © is held by the author. Digital access to this material is made possible by the University Libraries, University of Arizona. Further transmission, reproduction or presentation (such as public display or performance) of protected items is prohibited except with permission of the author.
Abstract:
Package managers are a common tool for installing, removing, and updating software on modern computer systems. Unfortunately existingpackage managers have two major problems. First, inadequate security leads to vulnerability to attack. Thereare nine feasible attacks against modern package managers, many of which are enabled by flaws in the underlying security architecture. Second, in Virtual Machine (VM) environments such as Xen, VMWare, and VServers,different VMs on the same physical machine are treated as separate systemsby package managers leading to redundant package downloads and installations.This dissertation focuses on the design, development, and evaluation ofa package manager called Stork that does not have these problems. Stork provides a security architecture that prevents the attacks other package managers are vulnerable to. Stork also is efficient in VM environments and reduces redundant package management actions. Stork is a real system thathas been in use for four years and has managed half a million VM instantiations.
Type:
text; Electronic Dissertation
Keywords:
Package Management; Sharing; Security
Degree Name:
PhD
Degree Level:
doctoral
Degree Program:
Computer Science; Graduate College
Degree Grantor:
University of Arizona
Advisor:
Hartman, John H.
Committee Chair:
Hartman, John H.

Full metadata record

DC FieldValue Language
dc.language.isoENen_US
dc.titleStork: Secure Package Management for VM Environmentsen_US
dc.creatorCappos, Justinen_US
dc.contributor.authorCappos, Justinen_US
dc.date.issued2008en_US
dc.publisherThe University of Arizona.en_US
dc.rightsCopyright © is held by the author. Digital access to this material is made possible by the University Libraries, University of Arizona. Further transmission, reproduction or presentation (such as public display or performance) of protected items is prohibited except with permission of the author.en_US
dc.description.abstractPackage managers are a common tool for installing, removing, and updating software on modern computer systems. Unfortunately existingpackage managers have two major problems. First, inadequate security leads to vulnerability to attack. Thereare nine feasible attacks against modern package managers, many of which are enabled by flaws in the underlying security architecture. Second, in Virtual Machine (VM) environments such as Xen, VMWare, and VServers,different VMs on the same physical machine are treated as separate systemsby package managers leading to redundant package downloads and installations.This dissertation focuses on the design, development, and evaluation ofa package manager called Stork that does not have these problems. Stork provides a security architecture that prevents the attacks other package managers are vulnerable to. Stork also is efficient in VM environments and reduces redundant package management actions. Stork is a real system thathas been in use for four years and has managed half a million VM instantiations.en_US
dc.typetexten_US
dc.typeElectronic Dissertationen_US
dc.subjectPackage Managementen_US
dc.subjectSharingen_US
dc.subjectSecurityen_US
thesis.degree.namePhDen_US
thesis.degree.leveldoctoralen_US
thesis.degree.disciplineComputer Scienceen_US
thesis.degree.disciplineGraduate Collegeen_US
thesis.degree.grantorUniversity of Arizonaen_US
dc.contributor.advisorHartman, John H.en_US
dc.contributor.chairHartman, John H.en_US
dc.contributor.committeememberGniady, Chrisen_US
dc.contributor.committeememberPeterson, Larry L.en_US
dc.contributor.committeememberZhang, Beichuanen_US
dc.identifier.proquest2655en_US
dc.identifier.oclc659749659en_US
All Items in UA Campus Repository are protected by copyright, with all rights reserved, unless otherwise indicated.