Transpro: Mandatory sensitive information protection based on virtualization and encryption

Abstract

With the growing population of networked devices, the potential risk of leaking sensitive data has been seriously increased. This paper proposes a novel approach named TransPro based on virtualization technology, which can provide mandatory protected transmission between different network hosts. Through TransPro, all output sensitive data is encrypted before sent to network, and all input network data is decrypted before handled by the sensitive application. TransPro works in the host OS and VMM, and it does not need to manually modify application code. We have evaluated TransPro using security analysis and attack tests. The results show that TransPro can offer a safe information transmission with a little overhead.