Cyber Security Aspects of Virtualization in Cloud Computing Environments

Tank, Darshan; Aggarwal, Akshai; Chaubey, Nirbhay

doi:10.4018/978-1-7998-2253-0.ch013

Cited by 2 publications

(1 citation statement)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This threat occurs when a guest OS takes up more CPU, memory, storage or network other than that allocated to it at the expense of other guest OSs [42]. Patching the guest OS and regular resources monitoring are successful mitigation of VM poaching.…”

Section: Resource Hogging (Vm Poaching)mentioning

confidence: 99%

Extensive Study of Cloud Computing Technologies, Threats and Solutions Prospective

Abu-Alhaija¹,

Turab²,

Hamza³

2022

Computer Systems Science and Engineering

View full text Add to dashboard Cite

Infrastructure as a Service (IaaS) provides logical separation between data, network, applications and machines from the physical constrains of real machines. IaaS is one of the basis of cloud virtualization. Recently, security issues are also gradually emerging with virtualization of cloud computing. Different security aspects of cloud virtualization will be explored in this research paper, security recognizing potential threats or attacks that exploit these vulnerabilities, and what security measures are used to alleviate such threats. In addition, a discussion of general security requirements and the existing security schemes is also provided. As shown in this paper, different components of virtualization environment are targets to various attacks that in turn leads to security issues compromising the whole cloud infrastructure. In this paper an overview of various cloud security aspects is also provided. Different attack scenarios of virtualization environments and security solutions to cater these attacks have been discussed in the paper. We then proceed to discuss API security concerns, data security, hijacking of user account and other security concerns. The aforementioned discussions can be used in the future to propose assessment criteria, which could be useful in analyzing the efficiency of security solutions of virtualization environment in the face of various virtual environment attacks.

show abstract

Section: Resource Hogging (Vm Poaching)mentioning

confidence: 99%

Extensive Study of Cloud Computing Technologies, Threats and Solutions Prospective

Abu-Alhaija¹,

Turab²,

Hamza³

2022

Computer Systems Science and Engineering

View full text Add to dashboard Cite

show abstract

A Method for Malware Detection in Virtualization Environment

Tank

Aggarwal

Chaubey

2020

Communications in Computer and Information Science

Self Cite

View full text Add to dashboard Cite

Security of Virtual Machines (VMs) is a major concern with the virtualization environment. Virtual machines are a primary target for an adversary to acquire unethical access to the organization’s virtual infrastructure. Traditional security measures are not enough for advanced malware detection. Today’s advanced malware can easily avoid detection by using a number of evasion tactics. Process or code injection is one such technique to evade the detection of malware. Various process injection techniques are employed by malware to gain more stealth and to bypass security products. Detection of process injection attack is achieved with little effort on a physical machine as compared to a virtual machine. In this paper, we propose a novel approach to detect malware based on API function calls. API function call information has the ability to trace malware behavior. We found that the presence of certain API function calls may confirm the existence of malware. We implement dynamic malware analysis using the volatility framework.

show abstract

Cyber Security Aspects of Virtualization in Cloud Computing Environments

Cited by 2 publications

References 20 publications

Extensive Study of Cloud Computing Technologies, Threats and Solutions Prospective

Extensive Study of Cloud Computing Technologies, Threats and Solutions Prospective

A Method for Malware Detection in Virtualization Environment

Contact Info

Product

Resources

About