Reverse replication of virtual machines (rRVM) for low latency and high availability services

He, Muyang; Pang, Shaoning; Lavrov, Denis; Ding, Lei; Zhang, Yuan; Sarrafzadeh, Abdolhossein

doi:10.1145/2996890.2996894

Cited by 8 publications

(3 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Adaptive Remus [5] modifies Remus to adapt the checkpointing frequency based on network activity. rRVM [12] and Gannet [50] make use of secondary-side I/O buffering to reduce replication overhead. PLOVER [49] uses a paravirtualized approach for applying state machine replication techniques to VM replication.…”

Section: Related Workmentioning

confidence: 99%

Fast VM Replication on Heterogeneous Hypervisors for Robust Fault Tolerance

Decourcelle,

Ngoc,

Teabe

et al. 2023

Proceedings of the 24th International Middleware Conference on ZZZ

View full text Add to dashboard Cite

The reliability of virtualization infrastructures in the face of availability issues is a long-standing problem. Current fault tolerance approaches such as live VM replication are effective at addressing external, accidental issues (e.g. hardware failures, power cuts, environmental disasters); however, against an active attacker exploiting zero-day denial-of-service (DoS) vulnerabilities in the hypervisor itself, these approaches do not address the root cause of said vulnerabilities, and therefore cannot protect against these issues. This is made more relevant by the prevalence of DoS vulnerabilities among many widely used hypervisors.We introduce heterogeneous replication, a new solution that enhances live VM replication so that VMs can be replicated across different hypervisors. We show that heterogeneous replication not only mitigates accidental failures from the external operational environment, but also mitigates DoS attacks arising from hypervisor vulnerabilities. We further show that heterogeneous replication can be used to increase the security of virtualized infrastructures without sacrificing availability.We build HERE, our implementation of the heterogeneous replication concept for replicating a protected VM across hypervisor boundaries. We describe the implementation of HERE, including details on the necessary VM state replications, as well as a dynamic checkpoint interval adjustment scheme that maximizes VM protection based on load levels. We evaluate HERE using various benchmarks to show that HERE meets the goal of protecting VMs from availability issues while adapting to the VM's computing load. CCS CONCEPTS• Security and privacy → Virtualization and security; • Computer systems organization → Cloud computing.

show abstract

Section: Related Workmentioning

confidence: 99%

Fast VM Replication on Heterogeneous Hypervisors for Robust Fault Tolerance

Decourcelle,

Ngoc,

Teabe

et al. 2023

Proceedings of the 24th International Middleware Conference on ZZZ

View full text Add to dashboard Cite

show abstract

“…We first define a running example as the main scenario for the migration of enterprises to the cloud. Then, we deploy the proposed approach on a real cloud environment [12], [13].…”

Section: Proposed Approach a Preliminariesmentioning

confidence: 99%

Cyber Situation Awareness Monitoring and Proactive Response for Enterprises on the Cloud

Alavizadeh

Jang-Jaccard

2020

2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)

View full text Add to dashboard Cite

The cloud model allows many enterprises able to outsource computing resources at an affordable price without having to commit the expense upfront. Although the cloud providers are responsible for the security of the cloud, there are still many security concerns due to inherently complex model the cloud providers operate on (e.g.,multi-tenancy). In addition, the enterprises whose services have migrated into the cloud have a preference for their own cybersecurity situation awareness capability on top of the security mechanisms provided by the cloud providers. In this way, the enterprises can monitor the performance of the security offerings of the cloud and have a choice to decide and select potential response strategies more appropriate to the enterprise in the presence of the attack where the defense provided by the cloud doesn't work for them. However, some response strategies, such as Moving Target Defense (MTD) techniques shown to be effective to secure cloud, cannot be deployed by the enterprise themselves. In this paper, we propose a framework that enables better collaboration between enterprises and cloud providers. Our proposed framework, which offers more in-depth security analysis based on the set of most advanced security metrics, allows the security experts of the enterprise to obtain better situational awareness in the cloud. With better and more effective situation awareness of cloud security, our framework can support better decision making and further allows to deploy more appropriate threat responses to protect the outsourced resources. We also propose a secure protocol which can facilitate more secure communication between the enterprises and cloud provider. Using our proposed secure protocol, which is based on authentication and key exchange mechanism, the enterprises can send a secure request to the cloud provider to perform a selected defensive strategy.

show abstract

“…In this paper, we focus on the practical side rather theoretical appraisal. We demonstrate the practicality of implementation, feasibility of automation, usability of the project using a real cloud platform named UniteCloud [13], [14].…”

Section: Introductionmentioning

confidence: 99%

An Automated Security Analysis Framework and Implementation for MTD Techniques on Cloud

Alavizadeh

Kim

et al. 2020

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Cloud service providers offer their customers with on-demand and cost-effective services, scalable computing, and network infrastructures. Enterprises migrate their services to the cloud to utilize the benefit of cloud computing such as eliminating the capital expense of their computing need. There are security vulnerabilities and threats in the cloud. Many researches have been proposed to analyze the cloud security using Graphical Security Models (GSMs) and security metrics. In addition, it has been widely researched in finding appropriate defensive strategies for the security of the cloud. Moving Target Defense (MTD) techniques can utilize the cloud elasticity features to change the attack surface and confuse attackers. Most of the previous work incorporating MTDs into the GSMs are theoretical and the performance was evaluated based on the simulation. In this paper, we realized the previous framework and designed, implemented and tested a cloud security assessment tool in a real cloud platform named UniteCloud. Our security solution can (1) monitor cloud computing in real-time, (2) automate the security modeling and analysis and visualize the GSMs using a Graphical User Interface via a web application, and (3) deploy three MTD techniques including Diversity, Redundancy, and Shuffle on the real cloud infrastructure. We analyzed the automation process using the APIs and showed the practicality and feasibility of automation of deploying all the three MTD techniques on the UniteCloud.

show abstract

Reverse replication of virtual machines (rRVM) for low latency and high availability services

Cited by 8 publications

References 16 publications

Fast VM Replication on Heterogeneous Hypervisors for Robust Fault Tolerance

Fast VM Replication on Heterogeneous Hypervisors for Robust Fault Tolerance

Cyber Situation Awareness Monitoring and Proactive Response for Enterprises on the Cloud

An Automated Security Analysis Framework and Implementation for MTD Techniques on Cloud

Contact Info

Product

Resources

About