NDLI: Cloud security is not (just) virtualization security: a short paper

Please wait, while we are loading the content...

TrackBack spam: abuse and prevention

Proofs of retrievability: theory and implementation

Resource management for isolation enhanced cloud services

Patient controlled encryption: ensuring privacy of electronic medical records

Secure file system services for web 2.0 applications

Secure and efficient access to outsourced data

Controlling data in the cloud: outsourcing computation without outsourcing control

Secure anonymous database search

Browser interfaces and extended validation SSL certificates: an empirical study

On protecting integrity and confidentiality of cryptographic file system for outsourced storage

Managing security of virtual machine images in a cloud environment

Securing elastic applications on mobile devices for cloud computing

Website fingerprinting: attacking popular privacy enhancing technologies with the multinomial naïve-bayes classifier

Cloud security is not (just) virtualization security: a short paper

Cloud security is not (just) virtualization security: a short paper

Content Provider	ACM Digital Library
Author	Christodorescu, Mihai Schales, Douglas Lee Sailer, Reiner Zamboni, Diego Sgandurra, Daniele
Abstract	Cloud infrastructure commonly relies on virtualization. Customers provide their own VMs, and the cloud provider runs them often without knowledge of the guest OSes or their configurations. However, cloud customers also want effective and efficient security for their VMs. Cloud providers offering security-as-a-service based on VM introspection promise the best of both worlds: efficient centralization and effective protection. Since customers can move images from one cloud to another, an effective solution requires learning what guest OS runs in each VM and securing the guest OS without relying on the guest OS functionality or an initially secure guest VM state. We present a solution that is highly scalable in that it (i) centralizes guest protection into a security VM, (ii) supports Linux and Windows operating systems and can be easily extended to support new operating systems, (iii) does not assume any a-priori semantic knowledge of the guest, (iv) does not require any a-priori trust assumptions into any state of the guest VM. While other introspection monitoring solutions exist, to our knowledge none of them monitor guests on the semantic level required to effectively support both white- and black-listing of kernel functions, or allows to start monitoring VMs at any state during run-time, resumed from saved state, and cold-boot without the assumptions of a secure start state for monitoring.
Starting Page	97
Ending Page	102
Page Count	6
File Format	PDF
ISBN	9781605587844
DOI	10.1145/1655008.1655022
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-11-13
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Cloud computing Outsourcing Virtualization Integrity
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in