NDLI: Arav: monitoring a cloud's virtual routers

Please wait, while we are loading the content...

Alleviating eavesdropping attacks in software-defined networking data plane

Using sequential pattern mining for common event format (CEF) cyber data

Arav: monitoring a cloud's virtual routers

Parallel methods for evidence and trust based selection and recommendation of software apps from online marketplaces

Selecting the minimal set of preferred responses to counter detected intrusions

Applications of elliptic curve cryptography: a light introduction to elliptic curves and a survey of their applications

Simulation and analysis framework for cyber-physical systems

Situational awareness of network system roles (SANSR)

Multi-asymmetric cryptographic RSA scheme

MARCS: mobile augmented reality for cybersecurity

Modeling inter-signal arrival times for accurate detection of CAN bus signal injection attacks: a data-driven approach to in-vehicle intrusion detection

Introducing priority into hybrid attack graphs

Predicting cyber attacks with bayesian networks using unconventional signals

Private matching and set intersection computation in multi-agent and industrial control systems

Automatic generation of network element software (AGNES): short paper

UTB-SOI based adiabatic computing for low-power and secure IoT devices

Feedback control for resiliency in face of an attack

Time series forecasting of cyber attack intensity

Arav: monitoring a cloud's virtual routers

Content Provider	ACM Digital Library
Author	Bushouse, Micah Ahn, Sanghyun Reeves, Douglas
Abstract	Virtual Routers (VRs) are increasingly common in cloud environments. VRs route traffic between network segments and support network services. Routers, including VRs, have been the target of several recent high-profile attacks, emphasizing the need for more security measures, including security monitoring. However, existing agent-based monitoring systems are incompatible with a VR's temporary nature, stripped-down operating system, and placement in the cloud. As a result, VRs are often not monitored, leading to undetected security incidents. This paper proposes a new security monitoring design that leverages virtualization instead of in-guest agents. Its hypervisor-based system, Arav, scrutinizes VRs by novel application of Virtual Machine Introspection (VMI) breakpoint injection. Arav monitored and addressed security-related events in two common VRs, pfSense and VyOS, and detected four attacks against two popular VR services, Quagga and OpenVPN. Arav's performance overhead is negligible, less than 0.63%, demonstrating VMI's utility in monitoring virtual machines unsuitable for traditional security monitoring.
Starting Page	1
Ending Page	8
Page Count	8
File Format	PDF
ISBN	9781450348553
DOI	10.1145/3064814.3064829
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-04-04
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Cloud security Virtual machine introspection Virtual routers
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in