Secure Virtualization for Cloud Environment Using Hypervisor-based Technology

Sabahi, Farzad

doi:10.7763/ijmlc.2012.v2.87

Cited by 59 publications

(30 citation statements)

References 5 publications

(5 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A hypervisor allows multiple operating systems to run concurrently on a cloud. In [81], the hypervisor-based architecture secured the guest OS and the running app from each other.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

FAPA: flooding attack protection architecture in a cloud system

Zunnurhain

Vrbsky

Hasan

2014

IJCC

View full text Add to dashboard Cite

The rate of acceptance of clouds each year is making cloud computing the leading IT computational technology. While cloud computing can be productive and economical, it is still vulnerable to different types of external threats, one of which is a Denial of Service (DoS) attack. DoS attacks have long been an open security problem of the internet. Most proposed solutions to address DoS attacks require upgrades in routers, modification in the BGP (Border Gateway Protocol), usage of additional control bits in the IP packets, or adjustments to legacy routers in the routing path. It is extremely difficult to manipulate all these criteria, considering that the internet, and potentially a cloud, consists of a very large number of autonomous systems with routers from different vendors deployed over decades. Authentication protocols are typically implemented by some of the leading companies manufacturing DoS prevention routers.However, authentication protocols and embedded digital signatures are very expensive and vulnerable. This is contrary to the benefits of renting a cloud system, which is to save capital expenditure as well as operational expenditure.Rather than depending on cloud providers, we proposed a model, called FAPA (Flooding Attack Protection Architecture), to detect and filter packets when DoS attacks occur. FAPA can be deployed at different levels of the system, such as at the user's end. FAPA can run locally on top of the client's terminal and is independent of the provider's cloud machine. There is no need to deploy any expensive packet capturing tools nor does it require any embedded digital signature inside the packets. There is no additional charge from the provider's end since the application runs in the customer's end. Moreover, automatic message propagation invokes the cloud server to trace the source or adversary.iii In FAPA, detection of denial of service is handled by the periodic analysis of the traffic behavior from the raw packets. It generates an alarm if any DoS attack is detected and removes flooding by filtering. Because FAPA is employed on the client's side, customers have control over traffic trends, which is absent in other DoS prevention approaches. FAPA is comprised of five individual modules, where each module has an assigned task in detecting DoS attacks and removing threats by filtering the spoof packets. A module fetches the traffic packets and does the unwrapping. Another module records the pertinent parameters of network packets.Implementation of a FAPA prototype and experimental results has demonstrated the feasibility of FAPA. From our initial experiments we observed that in the event of a DoS attack, some of the network parameters change. Hence, in FAPA a separate module is dedicated for storing information about traffic behavior. If FAPA observes any inconsistent traffic behavior, it invokes the filtering modules to remove the compromised network packets. FAPA filtering detects the threat by using previously recorded information. FAPA filtering was implemented for a...

show abstract

“…A hypervisor allows multiple operating systems to run concurrently on a cloud. In [81], the hypervisor-based architecture secured the guest OS and the running app from each other.…”

Section: Related Workmentioning

confidence: 99%

“…Also, there was no performance evaluation for the proposed architecture [81]. To combat DDoS attacks, an ISP level solution [30] has managed to keep false positive rates as low as 2.8%.…”

Section: Related Workmentioning

confidence: 99%

FAPA: flooding attack protection architecture in a cloud system

Zunnurhain

Vrbsky

Hasan

2014

IJCC

View full text Add to dashboard Cite

show abstract

“…In [16], author has explained a mechanism to provide monitoring and reliability check model. Here author discussed HSEM component for monitoring each VM behavior whereas HAREM checks reliability for a host.…”

Section: Related Workmentioning

confidence: 99%

NDynamic Framework for Secure VM Migration over Cloud Computing

Rathod¹,

Reddy²

2017

J Inf Process Syst

View full text Add to dashboard Cite

In the centralized cloud controlled environment, the decision-making and monitoring play crucial role where in the host controller (HC) manages the resources across hosts in data center (DC). HC does virtual machine (VM) and physical hosts management. The VM management includes VM creation, monitoring, and migration. If HC down,the services hosted by various hosts in DC can't be accessed outside the DC. Decentralized VM management avoids centralized failure by considering one of the hosts from DC as HC that helps in maintaining DC in running state. Each host in DC has many VM's with the threshold limit beyond which it can't provide service.To maintain threshold , the host's in DC does VM migration across various hosts. The data in migration is in the form of plaintext, the intruder can analyze packet movement and can control hosts traffic. The incorporation of security mechanism on hosts in DC helps protecting data in migration. This paper discusses an approach for dynamic HC selection, VM selection and secure VM migration over cloud environment.

show abstract

“…Virtualization is the abstraction of a hardware or software system that lets applications run on top of the virtualized environment without the need of knowing the underlying resources available [5] [6]. The virtualized environment is otherwise known as the virtual machine (VM)[a survey on virtualization] A hypervisor is one of many virtualization techniques which allow multiple operating systems, termed guests, to run concurrently on a host computer, a feature called hardware virtualization [9] [11].…”

Section: A Virtualizationmentioning

confidence: 99%

Digital Forensics Technique for Detection of Attack and Previous Data Restoration in Cloud Environment

2017

View full text Add to dashboard Cite

Abstract-Cloud computing recovery issues requirements have been addressed in publications earlier, but it is still difficult to estimate what kinds of requirements have been researched most, and which are still under research. Backing up our databases to the public cloud is an important strategic focus for us going forward in order to save money, scale our backup and DR operations, and to ensure our applications are always available to customers and business users worldwide. Over the past few years, many organizations have started to deploy public cloud for backup and Disaster Recovery (DR). Data recovery approaches with respect to digital forensics can be introduced for the sake of data management after a system encounters with an attack or any disaster like crash of vital data. These approaches often used by organizations to experience the reactive majors after a crash of data. Cloud-based business flexibility can provide an attractive alternative to traditional disaster recovery, offering rapid recovery time associated with a dedicated infrastructure and the reduced costs that are consistent with a data recovery model. This paper discusses one of the techniques to implement application for DR and describes how organizations can use cloud computing to help plan for both the routine interruptions to service-server hardware failures ,cut power lines, and security breaches-as well as more-infrequent disasters. The paper provides key considerations for the transition of replicas once a peer in the system encounters an attack in the private cloud-based business resilience. That is, a machine, once experiences calamity like instance failure of data and so on, DR can be carried out by an application discussed in this paper to recover the data by extracting a last Restore point (RP).

show abstract

Secure Virtualization for Cloud Environment Using Hypervisor-based Technology

Cited by 59 publications

References 5 publications

FAPA: flooding attack protection architecture in a cloud system

FAPA: flooding attack protection architecture in a cloud system

NDynamic Framework for Secure VM Migration over Cloud Computing

Digital Forensics Technique for Detection of Attack and Previous Data Restoration in Cloud Environment

Contact Info

Product

Resources

About