CBAC4C: conflict‐based VM isolation control for cloud computing

Abstract

For businesses to benefit from the many opportunities of cloud computing, they must first address a number of security challenges, such as the potential leakage of confidential data to unintended third parties. An inter‐VM (where VM is virtual machine) attack, also known as cross‐VM attack, is one threat through which cloud‐hosted confidential data could be leaked to unintended third parties. An inter‐VM attack exploits vulnerabilities between co‐resident guest VMs that share the same cloud infrastructure. In an attempt to stop such an attack, this paper uses the principles of logical analysis to model a solution that provides physical separation of VMs belonging to conflicting tenants based on their levels of conflict. The derived mathematical model is founded on scientific principles and implemented using four conflict‐aware VM placement algorithms. The resultant algorithms consider a tenant's risk appetite and cost implications. The model offers guidance to VM placement and is validated using a proof of concept. A cloud simulation tool was used to test and evaluate the effectiveness and efficiency of the model. The findings reflect that the introduction of the proposed model introduced a time lag in the time it took to place VM instances. On top of this, it was also discovered that the number and size of the VM instances has an effect on the VM placement performance. The findings further illustrate that the conflict tolerance level of a VM has a direct impact on the time it took to place.

A Review on Challenges in Cloud Computing Security and Recent Researchs

“…Bulut ortamında bulunan sanal makinelerin mevcut bir servis sağlayıcıdan başka bir servis sağlayıcıya güvenli bir şekilde taşınmasını amaçlayan çalışmada [56], kullanılan güven jetonu ile sanal makinelerin sadece güvenilir ve/veya düzenlemelerle uyumlu bulut platformlarına taşınabilmesi sağlanır. Çalışmada [57], aynı altyapıyı paylaşan sanal makineler kullanılarak gerçekleştirilen sanal makineler arası saldırıların engellenmesi için, mantıksal analiz ilkeleri kullanılarak çatışan kiracılara ait sanal makinelerin , çatışma düzeylerine göre fiziksel olarak ayrılmasın ı sağlayan bir sanal makine yerleştirme mimarisi (CBA C4C) sunulmuştur. Geleneksel erişim kontrolü ve şifreleme teknolojilerinin, bulut ortamında, kiracıların gizli verilerinin yayılmasını etkin bir şekilde kontrol edemediğ i varsayımı üzerine gerçekleştirilen çalışmada [58], kiracı tarafından yönetilen, verinin tüm yaşan döngüsü boyunca korunmasını amaçlayan bir akış kontrol çerçevesi ve politika kuralları tasarlanmıştır.…”

The Role of Mining and Detection of Big Data Processing Techniques in Cybersecurity

“…Network security has a great impact on society. For example, citizens' personal information, business information generated by enterprises in the process of operation, and confidential information controlled by government agencies are closely related to network security [2][3]. Therefore, the development of big data technology is of key significance in raising social attention to network security issues.…”