' Deploying Virtual Machines as Sandboxes for the Grid'
http://www.cs.wisc.edu/condor/doc/SandboxingWorlds053.pdf
"...The ability to securely run arbitrary untrusted code on
a wide variety of execution platforms is a challenging
problem in the Grid community. One way to achieve
this is to run the code inside a contained, isolated en-
vironment, namely a sandbox. Virtual machines pro-
vide a natural solution to the security and resource man-
agement issues that arise in sandboxing. We explore dif-
ferent designs for the VM-enabled sandbox and evaluate
them with respect to various factors like structure, secu-
rity guarantees, user convenience, feasibility and over-
heads in one such grid environment. Our experiments
indicate that the use of on-demand VMs imposes a con-
stant startup overhead, with I/O-intensive applications
incurring additional overheads depending on the design
of the sandbox.
"