NDLI: Virtualization: Issues, security threats, and solutions

Content Provider	ACM Digital Library
Author	Pearce, Michael Zeadally, Sherali Hunt, Ray
Copyright Year	2013
Abstract	Although system virtualization is not a new paradigm, the way in which it is used in modern system architectures provides a powerful platform for system building, the advantages of which have only been realized in recent years, as a result of the rapid deployment of commodity hardware and software systems. In principle, virtualization involves the use of an encapsulating software layer (Hypervisor or Virtual Machine Monitor) which surrounds or underlies an operating system and provides the same inputs, outputs, and behavior that would be expected from an actual physical device. This abstraction means that an ideal Virtual Machine Monitor provides an environment to the software equivalent to the host system, but which is decoupled from the hardware state. Because a virtual machine is not dependent on the state of the physical hardware, multiple virtual machines may be installed on a single set of hardware. The decoupling of physical and logical states gives virtualization inherent security benefits. However, the design, implementation, and deployment of virtualization technology have also opened up novel threats and security issues which, while not particular to system virtualization, take on new forms in relation to it. Reverse engineering becomes easier due to introspection capabilities, as encryption keys, security algorithms, low-level protection, intrusion detection, or antidebugging measures can become more easily compromised. Furthermore, associated technologies such as virtual routing and networking can create challenging issues for security, intrusion control, and associated forensic processes. We explain the security considerations and some associated methodologies by which security breaches can occur, and offer recommendations for how virtualized environments can best be protected. Finally, we offer a set of generalized recommendations that can be applied to achieve secure virtualized implementations.
Starting Page	1
Ending Page	39
Page Count	39
File Format	PDF
ISSN	03600300
e-ISSN	15577341
DOI	10.1145/2431211.2431216
Journal	ACM Computing Surveys (CSUR)
Volume Number	45
Issue Number	2
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-03-12
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Encryption Threat Virtual machine Virtual machine monitor Virtualization
Content Type	Text
Resource Type	Article
Subject	Theoretical Computer Science Computer Science

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Bare-Metal and Asymmetric Partitioning Approach to Client Virtualization

A survey of security issues in hardware virtualization

Security Challenges of Virtualization Hypervisors in Virtualized Hardware Environment

Virtualization Sparks Security Concerns

Evolution of Attacks, Threat Models, and Solutions for Virtualized Systems

Virtual machine monitor-based lightweight intrusion detection

Dynamic cache partitioning based on hot page migration

Virtualization Security, Strategy and Management

Virtualization: A Survey on Concepts, Taxonomy and Associated Security Issues

Virtualization: Issues, security threats, and solutions

Similar Documents

A Bare-Metal and Asymmetric Partitioning Approach to Client Virtualization

A survey of security issues in hardware virtualization

Security Challenges of Virtualization Hypervisors in Virtualized Hardware Environment

Virtualization Sparks Security Concerns

Evolution of Attacks, Threat Models, and Solutions for Virtualized Systems

Virtual machine monitor-based lightweight intrusion detection

Dynamic cache partitioning based on hot page migration

Virtualization Security, Strategy and Management

Virtualization: A Survey on Concepts, Taxonomy and Associated Security Issues

Virtualization: Issues, security threats, and solutions