No abstract

The increasing adoption of "client and cloud" computing raises several important concerns about security. This article discusses security issues that are associated with "client and cloud" and their impact on organizations that host applications "in the cloud." It describes how Microsoft minimizes the security vulnerabilities in these, possibly mission-critical, platforms and applications by following two, complementary approaches: developing the policies, practices, and technologies to make their "client and cloud" applications as secure as possible, and managing the security of the platform environment through clearly defined operational security policies.

VAX/SVS was a high assurance virtual machine monitor (VMM) project, documented in several published papers from the 1990's. We take a look back, extracting the most pertinent lessons from that work for today. These lessons cover reference monitor architectural principles, approaches to verifiable and tamperproof access control, the benefits of layering, the impacts of minimization and verification, and the business reasons behind its cancellation as a product.

No abstract

No abstract