Flogger: A File-Centric Logger for Monitoring File Access and Transfers within Cloud Computing Environments

Ko, Ryan K. L.; Jagadpramana, Peter; Lee, Bu-Sung

doi:10.1109/trustcom.2011.100

Cited by 67 publications

(44 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They often hook system calls or backend drivers to get the attributes of the operated target files. Flogger [6] can be implemented in both VM and PM (physical machine) kernels, which captures file operations and then records the events in log files. [7] and [8] intercept file operations in VMM.…”

Section: Related Workmentioning

confidence: 99%

“…Since VMM is more privileged and also transparent to VM, VM-level malwares are difficult to be aware of or even attack VMM-level agents. As far as we know, VMI-based filesystem monitoring tools can be classified as: polling scheme [4], [5] and event-driven scheme [6]- [11]. The former examines file integrity in each interval, but leaves a gap between checkpoints exploited by malwares to modify the files transiently and then roll back without being detected, which undermines its effectiveness.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Protecting Critical Files Using Target-Based Virtual Machine Introspection Approach

Zhan

Fang

et al. 2017

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

SUMMARYProtecting critical files in operating system is very important to system security. With the increasing adoption of Virtual Machine Introspection (VMI), designing VMI-based monitoring tools become a preferential choice with promising features, such as isolation, stealthiness and quick recovery from crash. However, these tools inevitably introduce high overhead due to their operation-based characteristic. Specifically, they need to intercept some file operations to monitor critical files once the operations are executed, regardless of whether the files are critical or not. It is known that file operation is high-frequency, so operation-based methods often result in performance degradation seriously. Thus, in this paper we present CFWatcher, a target-based real-time monitoring solution to protect critical files by leveraging VMI techniques. As a target-based scheme, CFWatcher constraints the monitoring into the operations that are accessing target files defined by users. Consequently, the overhead depends on the frequency of target files being accessed instead of the whole filesystem, which dramatically reduces the overhead. To validate our solution, a prototype system is built on Xen with full virtualization, which not only is able to monitor both Linux and Windows virtual machines, but also can take actions to prevent unauthorized access according to predefined policies. Through extensive evaluations, the experimental results demonstrate that the overhead introduced by CFWatcher is acceptable. Especially, the overhead is very low in the case of a few target files.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Protecting Critical Files Using Target-Based Virtual Machine Introspection Approach

Zhan

Fang

et al. 2017

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

show abstract

“…open, close, write. Flogger [15] File centric logger for monitoring file access and transfers within cloud. Tripwire [16] A Host based IDS that alerts on macro changes to the files and folders.…”

Section: Related Workmentioning

confidence: 99%

Use of Diffie Hellman Key Exchange for Information Transmission and File Integrity Monitoring in Cloud

Sharma¹

2015

IJCA

View full text Add to dashboard Cite

In today's computing era,there has arisen an immense requirement for secure and trusted security frameworks/models in cloud computing.These models allow the cloud service provider to establish a trusted bond among clients,which is the prime requisite for cloud e-businesses nowadays. Keeping this orientation in mind,we have proposed a comprehensive security framework which provides extra layer of security to the information transmitted among client and server ends & also sustains the information integrity at both terminals.It provides the data security during storage at cloud server . This incorporates confidentiality,authentication and integrity of the involved information among client-server terminals.Numerous cryptographic algorithms have been used to apply in the implemented tool. Diffie-Hellman key exchange scheme has been applied in this research work.

show abstract

“…The project also focused on the development of a prototype to verify the results [7]. In December, The TrustCloud Research Project was started at the HP Institute in Singapore [1,2]. The TrustCloud framework, which consisted of five layers with management responsibility and computing transparency, began with a data-centric approach [3].…”

Section: The Concept Of Cloud Computing and Interoperabilitymentioning

confidence: 99%

Development of Service Verification Methodology Based on Cloud Computing Interoperability Standard

Lee

Park

Yang³

2013

IJSH

View full text Add to dashboard Cite

Flogger: A File-Centric Logger for Monitoring File Access and Transfers within Cloud Computing Environments

Cited by 67 publications

References 4 publications

Protecting Critical Files Using Target-Based Virtual Machine Introspection Approach

Protecting Critical Files Using Target-Based Virtual Machine Introspection Approach

Use of Diffie Hellman Key Exchange for Information Transmission and File Integrity Monitoring in Cloud

Development of Service Verification Methodology Based on Cloud Computing Interoperability Standard

Contact Info

Product

Resources

About