Automated Information Flow Analysis of Virtualized Infrastructures

Bleikertz, Sören; Groß, Thomas; Schunter, Matthias; Eriksson, Konrad

doi:10.1007/978-3-642-23822-2_22

Cited by 17 publications

(23 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Bleikertz et al [7] introduced an analysis system for virtualized infrastructures, called SAVE, which models configurations in a graph representation and runs graph-coloring based information flow analysis on this representation. Bleikertz and Groß introduced a domain-specific language, called VALID, which allows us to specify security goals for virtualized infrastructures in formal terms.…”

Section: Contributionsmentioning

confidence: 99%

“…This work makes distinct new contributions by introducing analysis based on generalpurpose model checking on SAVE's graph representation against VALID specifications. The system presented in this paper goes far beyond information flow analysis of [7] by enabling validation of a wide range of security goals.…”

Section: Contributionsmentioning

confidence: 99%

“…To obtain the actual state of a virtualized infrastructure, we employ a tool for assurance analysis of virtualized infrastructures, called SAVE [7]. It comes with discovery probes for heterogeneous clouds such as VMware, Xen, pHyp, etc.…”

Section: Architecturementioning

confidence: 99%

“…Specialized tools can be applied to a subset of these security goals, as we already demonstrated in previous research (cf. [7]) for security zone isolation. However, a general approach is desired that can cover this broad range of security requirements.…”

Section: Introductionmentioning

confidence: 99%

“…As actual state, we lift the configuration of a heterogeneous virtualized infrastructure to a unified graph model. For this, we employ a security assurance analysis tool called SAVE [7], which also computes graph coloring overlays, that model, e.g., information flow. We develop a translator that connects these descriptions with the various state-of-the art verification tools.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Automated verification of virtualized infrastructures

Bleikertz

Groß

Mödersheim³

2011

Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop

Self Cite

View full text Add to dashboard Cite

Virtualized infrastructures and clouds present new challenges for security analysis and formal verification: they are complex environments that continuously change their shape, and that give rise to non-trivial security goals such as isolation and failure resilience requirements. We present a platform that connects declarative and expressive description languages with state-of-the art verification methods. The languages integrate homogeneously descriptions of virtualized infrastructures, their transformations, their desired goals, and evaluation strategies. The different verification tools range from model checking to theorem proving; this allows us to exploit the complementary strengths of methods, and also to understand how to best represent the analysis problems in different contexts. We consider first the static case where the topology of the virtual infrastructure is fixed and demonstrate that our platform allows for the declarative specification of a large class of properties. Even though tools that are specialized to checking particular properties perform better than our generic approach, we show with a real-world case study that our approach is practically feasible. We finally consider also the dynamic case where the intruder can actively change the topology (by migrating machines). The combination of a complex topology and changes to it by an intruder is a problem that lies beyond the scope of previous analysis tools and to which we can give first positive verification results.

show abstract

Section: Contributionsmentioning

confidence: 99%

Section: Contributionsmentioning

confidence: 99%

Section: Architecturementioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations