On covert channels between virtual machines

Ranjith, P.G.; Chandran, Priya; Shalini, K. Shantha

doi:10.1007/s11416-012-0168-x

Cited by 23 publications

(15 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Cloud computing relies on a lot of technologies such as virtualization, web browsers and web services in developing cloud environments. Therefore, the presence of any gap in any of these techniques reflected the impact on Ranjith et al (2012); Zhang et al (2012) Digital signatures Somani et al (2010) Encryption Harnik et al (2010) Homomorphic encryption Tebaa et al (2012) Absolute allocation/deallocation of resources with I virtual machines Ranjith et al (2012) Unlimited migration: virtual machines can be emigrated from server to another because of hardware maintenance, fault tolerance or load balance Dawoud et al (2010) Uncontrolled snapshots: flexibility can be provided by I TCCP Santos et al (2009) copying virtual machines which leaks data, VNSS Xiaopeng et al (2010) Garfinkel andRosenblum (2005) PALM Zhang et al (2008) the cloud significantly. Table 3 provides a detailed analysis of vulnerabilities in virtualization.…”

Section: Vulnerabilities Of Virtualizationmentioning

confidence: 99%

Security Issues, Attacks and Vulnerabilities for Virtualization in Cloud Computing and their Solutions

Turki¹,

Zwiad²,

Almuttairi³

2019

J. Eng. Appl. Sci.

View full text Add to dashboard Cite

Cloud computing is a new technology designed to meet business requirements, reduce expenditure and solve IT management problems. Cloud computing relies on many applications such as virtualization but at the same time inherits its security problems. Virtualization architecture provides a powerful and integrated platform for system building. The use of virtualization depends on the layer of encapsulation software (Virtual machine monitor/hypervisor) that provides the operating system inputs and outputs and at the same time surrounds the operating system. The virtual machines does not depend on the state of the actual hardware as several virtual machines are installed on one set of devices. Virtualization inherits security issues inherent in the disconnection between logical and physical situations, causing security issues related to security and attacks on virtual machines. This survey presents and discusses security issues, attacks and vulnerabilities related to virtualization. Finally, range of solutions and appropriate security measures have been offered and applied to have secure virtualization.

show abstract

Section: Vulnerabilities Of Virtualizationmentioning

confidence: 99%

Security Issues, Attacks and Vulnerabilities for Virtualization in Cloud Computing and their Solutions

Turki¹,

Zwiad²,

Almuttairi³

2019

J. Eng. Appl. Sci.

View full text Add to dashboard Cite

show abstract

“…In associate degree organized manner they analyze the prevailing security in vulnerabilities and threats of the cloud computing [34,35]. Within the table three they outline every vulnerability and threat by explaining what cloud service model or model area unit plagued by this security downside [36,37].…”

Section: Analysis Of Security Issues In Cloud Computingmentioning

confidence: 99%

A Survey on Security of Cloud Computing

Dubey¹,

Gaud²

2016

IJCA

View full text Add to dashboard Cite

Cloud computing is a derive technology that is still uncertain to many security troubles. The security problem becomes difficult under the cloud model as new scope enter into the problem extent related to the architecture, multi lease, layer dependency, and flexibility. On the other hand, these new dimensions create new vulnerabilities and possible attacks on a cloud system. This survey paper introduces a detailed analysis about attacks that are exacerbated by exploitation of the cloud system along with possible solutions.

show abstract

“…The inherent vulnerabilities of internal network in host and Local Area Network (LAN) pose threat to the VMs when they are live migrated. These security challenges are presented in (Modi et al 2012;Qina et al 2012;Ranjith et al 2012;. It is believed that the VM migration security is an important research area.…”

Section: List Of Figuresmentioning

confidence: 99%

Virtual firewalling for migrating virtual machines in cloud computing

Anwar

2013

2013 5th International Conference on Information and Communication Technologies

View full text Add to dashboard Cite

Context. Cloud Computing (CC) uses virtualization to provide computing resources on demand viaInternet. Small and large organizations benefit from CC because of reduced operating costs and increase in business agility. The migrating Virtual Machine (VM) is vulnerable from attacks such as fake migration initiations, service interruptions, manipulation of data or other network attacks. During live migration any security lax in VM firewall policy can put the VM data, OS and the applications on it at risk. A malicious VM can pose threat to other VMs in its host and consequently for VMs in LAN. Hardware firewalls only protect VM before and after migration. Plus, they are blind to virtual traffic. Hence, virtual firewalls (VFs) are used to secure VMs. Mostly; they are deployed at Virtual Machine Monitor-level (VMM) under Cloud provider"s control. Source VMM-level VF provides security to VM before the migration incurs and the destination VMM-level VF starts securing VM after migration is completed. It thus, becomes possible for attacker to use the intermediate migrating window to launch attacks on VM. Considering the potential of VFs there should be a great value in using open source VFs at VM-level for protecting VMs during migration, thereby, reducing the attacker"s slot to gain access to VM. It would enable hardened security for overall VM migration.Objectives. The aim is to investigate VM-level firewalling using open source firewall as a complementary security layer to VMM-level firewalling, to secure migrating VM in the CC domain. The first objective is to identify how virtual firewalls secure migrating VM in CC and to propose VMlevel open-source virtual firewalling for protecting VM during migration. Later the VF is implemented to validate and evaluate its intactness or activeness during migration in real Cloud data center.Methods. In the literary review 9 electronic libraries are used, which include IEEE Xplore, ACM Digital Library, SCOPUS, Engineering Village and Web of Knowledge. Studies are selected after querying libraries for 2 key terms "virtual machine" and "migration" (along with other variations/synonyms), in the abstract. Relevant papers on the subject are read and analyzed. Finally, the information gaps are identified. Using a lacuna the experimental solution is designed. To test the potential of VF at VM-level for migrating VM"s security the experimental validation is performed using stratification samples of firewall rules. The VF evaluation is done using continuous ICMP echo packet transmission. The packets are analyzed to determine firewall behavior during migration. To evaluate the validity, the VM migration is performed 8 times in City Network data center.Results. The literary review identified the widespread use of VMM-level firewalling for migrating VM"s security in CC. The VM-level VFs were not researched nor evaluated for intactness during migration. The experiment performed at City Network demonstrated that the VM-level VF secures VM during migration (on average) for 96% of migrati...

show abstract

On covert channels between virtual machines

Cited by 23 publications

References 7 publications

Security Issues, Attacks and Vulnerabilities for Virtualization in Cloud Computing and their Solutions

Security Issues, Attacks and Vulnerabilities for Virtualization in Cloud Computing and their Solutions

A Survey on Security of Cloud Computing

Virtual firewalling for migrating virtual machines in cloud computing

Contact Info

Product

Resources

About