A New Secure Network Architecture to Increase Security Among Virtual Machines in Cloud Computing

Abstract

Cloud computing is a new model of computing which provides scalability, flexibility and on-demand service. Virtualization is one of the main components of the cloud, but unfortunately this technology suffers from many security vulnerabilities. The main purpose of this paper is to present a new secure architecture of Virtual Network machines in order to increase security among virtual machines in a virtualized environment (Xen as a case study). First, we expose the different network modes based on Xen Hypervisor, and then we analyses vulnerabilities and security issues within these kind of environment. Finally, we present in details new secure architecture and demonstrate how it can face the main security network attacks.

Benefícios da tecnologia CLOUD (nuvem) para virtualização de serviços: um estudo para a ferramenta IDEAWARE

“…Para download de dados pelo usuário, os dados são criptografados de ponta a ponta com base em criptografia de chave pública, além de nós de computação multi-CPU (unidade de processamento central) e multiGPU (unidade de processamento gráfico) [17].…”

An Access Control Model for Preventing Virtual Machine Hopping Attack

“…Ren et al [15] analyzed the security threats and challenges virtual machines faced and presented several typical attacks to virtual machine on the Xen platform. Elmrabet et al [16] proposed a new three-layer security architecture, which is composed of virtual switch, virtual firewall, and VLANs, to prevent attacks to virtual machines, such as sniffing, spoofing, and mac flooding. Sathya et al [17] introduced a trusted model for VM security in cloud computing.…”

Deep Learning-Based Intrusion Detection System for Advanced Metering Infrastructure

“…Despite the wide variety of industrial cyber-attacks, they usually attempt to compromise these three security parameters: confidentiality, availability, and integrity [11]. The first class of attacks which target the confidentiality includes attacks such as Traffic analysis attack [17], Modbus network scanning [2], and DNP3 network scanning [7] which target the two industrial protocol Modbus and DNP3, respectively.…”

“…Finally, we propose a network architecture to deploy the proposed anomalybased intrusion detection system across the Advanced Metering Infrastructure network. In addition, we propose a network security architecture composed of two types of Intrusion detection system types, Host and Network-based, deployed across the Advanced Metering Infrastructure network to inspect the traffic and detect the malicious one at all the levels.Despite the wide variety of industrial cyber-attacks, they usually attempt to compromise these three security parameters: confidentiality, availability, and integrity [11]. The first class of attacks which target the confidentiality includes attacks such as Traffic analysis attack [17], Modbus network scanning [2], and DNP3 network scanning [7] which target the two industrial protocol Modbus and DNP3, respectively.…”