Towards integrity measurement in virtualized environments &amp;#x2014; A hypervisor based sensory integrity measurement architecture (SIMA)

Stelte, Björn; Koch, Robert; Ullmann, Markus

doi:10.1109/ths.2010.5655084

Cited by 7 publications

(8 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This method has been employed by commodity hypervisors such as Xen. Sensory integrity measurement architecture is a hypervisor‐based approach that measures integrity in a virtual environment. In this model, the hypervisor directly manages the operations of VMs that are deployed on the host hardware.…”

Section: Security Issues and Major Concerns With Iaas Cloudmentioning

confidence: 99%

See 1 more Smart Citation

Service delivery models of cloud computing: security issues and open challenges

Iqbal

Kiah

Anuar

et al. 2016

Security Comm Networks

View full text Add to dashboard Cite

Cloud computing represents the most recent enterprise trend in information technology and refers to the virtualization of computing resources that are available on demand. Cloud computing saves cost and time for businesses. Moreover, this computing process reflects a radical technological revolution in how companies develop, deploy, and manage enterprise applications over the Internet. Virtualized cloud computing mainly offers cloud‐computing delivery models such as software as a service, platform as a service, and infrastructure as a service. Security and privacy are presently considered critical factors in the adaptation of any cloud‐service delivery model. Cloud computing leverages several technologies; in the process, this model can inherit potential security threats. Thus far, security issues in cloud computing have rarely been addressed at the service delivery level. Key security concerns include Web application security, network security, data security, integration, vulnerabilities in the virtualized environment, and physical security. The aim of this research is to comprehensively present the security threats with respect to their cloud service deliver models. This study also determines how service delivery models differ from existing enterprise applications, classify these models, and investigate the inherent security challenges. This study primarily focuses on the security concerns of each layer of the cloud‐service delivery model, as well as on existing solutions and approaches. In addition, countermeasures to potential security threats are also presented for each cloud model. Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

Section: Security Issues and Major Concerns With Iaas Cloudmentioning

confidence: 99%

“…The approach by Stelte, Koch, and Ullmann is scaled well and enhances performance. However, the major drawback of these methods is that the hardware must be restarted when switching VMs.…”

Section: Security Issues and Major Concerns With Iaas Cloudmentioning

confidence: 99%

Service delivery models of cloud computing: security issues and open challenges

Iqbal

Kiah

Anuar

et al. 2016

Security Comm Networks

View full text Add to dashboard Cite

show abstract

“…Some other works attempt to protect the monitored code with a monitoring code executed with the same privilege level as the monitored code. SIMA [22] is an hypervisor extension which aims to protect the hypervisor against malware installed inside virtual machines. HyperSafe [26] offers an extension of this solution by adding self monitoring through execution flow control of the hypervisor.…”

Section: Related Workmentioning

confidence: 99%

Design and Implementation of a Hardware Assisted Security Architecture for Software Integrity Monitoring

Morgan

Alata

Nicomette

et al. 2015

2015 IEEE 21st Pacific Rim International Symposium on Dependable Computing (PRDC)

View full text Add to dashboard Cite

The increasing complexity of software and hardware layers makes them likely to include vulnerabilities. Recent research has shown that subtle attacks are able to successfully exploit (through compromised peripherals performing DMA attacks for instance) vulnerabilities in low-level software, even running in the most privileged mode of the processors. Therefore, the security of such systems should not be solely based on components running on the processor. This paper describes the design and the implementation of a security architecture that is designed to securely execute integrity checks of any software running on top of this architecture. It is composed of a security hypervisor, running in the most privileged level of the processor, assisted by a trusted hardware component, autonomous and independent of the processor, regularly checking the integrity of the security hypervisor itself. The design, the implementation of this security architecture, as well as experiments showing the relevance of our approach, are detailed in this paper.

show abstract

“…In a bare-metal environment, a hypervisor manages the operations of the virtual machines and interfaces directly with the host hardware [51]. Bare metal virtualization is based upon insertion of a hypervisor directly between the hardware resources and the OS.…”

Section: Dynamics In Virtualizationmentioning

confidence: 99%

“…This method of virtualization has the lowest amount of management overhead and has the flexibility of being able to run multiple OSs on a single machine. Bare metal virtualization can be implemented with virtualization logic dependent upon the kernel of the operating system, independent of kernel and processor, or dependent upon the processor instruction set [51].…”

Section: Dynamics In Virtualizationmentioning

confidence: 99%