Secure Outsourcing of Virtual Appliance

Abstract

Computation outsourcing using virtual appliance is getting prevalent in cloud computing. However, with both hardware and software being controlled by potentially curious or even malicious cloud operators, it is no surprise to see frequent reports of security accidents, like data leakages or abuses. This paper proposes Kite, a hardware-software framework that guards the security of tenant's virtual machine (VM), in which the outsourced computation is encapsulated. Kite only trusts the processor and makes no security assumption on external memory, devices, or hypervisor. Unlike prior hardware-based approaches, Kite retains transparency with existing VM and requires few changes to the (untrusted) hypervisor by introducing VM-Shim mechanism. Each VM-Shim instance runs in between its VM and the hypervisor, which only transfers necessary information designated by the VM to the hypervisor and external environments. Kite also considers the high-level semantic of interaction between VM and hypervisor to defend against attacks through legitimate operations or interfaces. We have implemented a prototype of Kite's secure processor in a QEMU-based full-system emulator and its software components on real machine. Evaluation shows that the performance overhead of Kite ranges from 0.5%-14.0% on simulated platform and 0.4%-7.3% on real hardware.

Cloud Computing: Review on Recent Research Progress and Issues

“…The analysis and result show that the performance overhead is small [33]. malicious insiders in a computing environment [33].…”

“…The Proposed method addressed the data protection in public clouds,the work can be extended with other deployment models [31]. The analysis and result show that the performance overhead is small [33]. malicious insiders in a computing environment [33].…”

Implementation levels of virtualization and security issues in cloud computing

“…Data encryption is the main solution to guarantee the privacy of data against malicious attacks in the databases. Therefore, encryption methods have momentous routine inferences in cloud [2].…”

Cloud Security Engineering: Theory, Practice and Future Research

“…They then demonstrate how the architecture can be used to secure the life cycle of virtual machines and migration of virtual machines across different physical servers. Similarly, Xia et al (2016) present an integrated hardware and software approach to ensure the security of a cloud user's virtual machine when the computations are outsourced to the cloud. Paladi, Gehrmann, and Michalas (2016) describe a framework for data and operation security in the Infrastructure as a Service (IaaS) model.…”