Analysis of VM communication for VM-based cloud security systems

Mthunzi, Siyakha N.; Benkhelifa, Elhadj; Alsmirat, Mohammad A.; Jararweh, Yaser

doi:10.1109/sds.2018.8370441

Cited by 7 publications

(5 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Those service share core switches, and use network virtualization technology to isolate and ensure service quality. The aggregation switch is responsible for the physical access of the physical server, and the virtual aggregation switch is responsible for the access of the VPC [20]. The computing area is connected to the core switching equipment.…”

Section: ) Computing Areamentioning

confidence: 99%

“…In accordance with the requirements of CPCv2.0 Lv.3, the above mentioned capabilities are deployed in the Virtual Machine (VM) in the computing area. Because it is in the VM, it can be isolated logically but not physically [9], [20]. It is suitable for general The User's Security Service Order System is dedicated to the administrators of general users.…”

Section: General User Security Commercial Plan a Deployment 1) Deploy...mentioning

confidence: 99%

See 1 more Smart Citation

Research on Secure Cloud Networking Plan Based on Industry-Specific Cloud Platform

Wang,

Wang

2023

IEEE Access

View full text Add to dashboard Cite

The current domestic cloud platform, including China Mobile's public cloud and DICT private cloud, cannot satisfy the needs of high-end clients in many industries, such as ''government, public security, education, healthcare, finance, transportation, power, and large enterprises''. Those specifics are: customization, ''data cannot be stored out of the local city'', ''must meet the Chinese safety standard of Classified Protection of Cybersecurity Version 2.0 Third Level (CPCv2.0 Lv.3) '', strong isolation and exclusiveness. Therefore, Industry-specific Cloud Platform built this time can provide the cloud resources and security services, facing to above eight industries. Thus selecting IDC (Integrated Data Center) to build an Industry-specific Cloud Platform, in which network management area, maintenance area and computing & storage area can be deployed locally. The structure adopts SDN architecture and related supporting SDN equipment, which can also meet the platform's CPCv2.0 Lv.3 requirements, while also providing external security services. At its root, it can solve the needs of high-end clients in eight industries for cloud resources and security services.

show abstract

Section: ) Computing Areamentioning

confidence: 99%

Section: General User Security Commercial Plan a Deployment 1) Deploy...mentioning

confidence: 99%

Research on Secure Cloud Networking Plan Based on Industry-Specific Cloud Platform

Wang,

Wang

2023

IEEE Access

View full text Add to dashboard Cite

show abstract

“…For cloud users, poor VM communication extends tenant tasks and VM lease time, eventually increasing their costs. On the other hand, the poor communication between VMs also introduces security vulnerabilities [13]. Al-Said et al [14] outlined security challenges that exist in virtualization techniques and which are used to support several customers on one shared physical infrastructure.…”

Section: Related Workmentioning

confidence: 99%

An Access Control Model for Preventing Virtual Machine Hopping Attack

Dong

Zhou

2019

Future Internet

View full text Add to dashboard Cite

As a new type of service computing model, cloud computing provides various services through the Internet. Virtual machine (VM) hopping is a security issue often encountered in the virtualization layer. Once it occurs, it directly affects the reliability of the entire computing platform. Therefore, we have thoroughly studied the virtual machine hopping attack. In addition, we designed the access control model PVMH (Prevent VM hopping) to prevent VM hopping attacks based on the BLP model and the Biba model. Finally, we implemented the model on the Xen platform. The experiments demonstrate that our PVMH module succeeds in preventing VM hopping attack with acceptable loss to virtual machine performance.

show abstract

“…However, in reality, each colocated VM will depend on the same PM where hardware, like CPUs or memory elements, is shared by all the VMs. Therefore, a VM's private information may be accessed by its neighboring VM by launching side-channel attacks [9][10][11][12], as shown in Figure 2. Here, a hypervisor or virtual machine monitor (VMM) creates and runs VMs on a hosting PM.…”

Section: Introductionmentioning

confidence: 99%

Perspective Chapter: Deep Reinforcement Learning for Co-Resident Attack Mitigation in The Cloud

Cui¹,

Homsi²

2022

Artificial Intelligence

View full text Add to dashboard Cite

Cloud computing brings convenience and cost efficiency to users, but multiplexing virtual machines (VMs) on a single physical machine (PM) results in various cybersecurity risks. For example, a co-resident attack could occur when malicious VMs use shared resources on the hosting PM to control or gain unauthorized access to other benign VMs. Most task schedulers do not contribute to both resource management and risk control. This article studies how to minimize the co-resident risks while optimizing the VM completion time through designing efficient VM allocation policies. A zero-trust threat model is defined with a set of co-resident risk mitigation parameters to support this argument and assume that all VMs are malicious. In order to reduce the chances of co-residency, deep reinforcement learning (DRL) is adopted to decide the VM allocation strategy. An effective cost function is developed to guide the reinforcement learning (RL) policy training. Compared with other traditional scheduling paradigms, the proposed system achieves plausible mitigation of co-resident attacks with a relatively small VM slowdown ratio.

show abstract

Analysis of VM communication for VM-based cloud security systems

Cited by 7 publications

References 15 publications

Research on Secure Cloud Networking Plan Based on Industry-Specific Cloud Platform

Research on Secure Cloud Networking Plan Based on Industry-Specific Cloud Platform

An Access Control Model for Preventing Virtual Machine Hopping Attack

Perspective Chapter: Deep Reinforcement Learning for Co-Resident Attack Mitigation in The Cloud

Contact Info

Product

Resources

About