NDLI: Secure Reincarnation of Compromised Servers Using Xen Based Time-Forking Virtual Machines

Content Provider	IEEE Xplore Digital Library
Author	Anwar, Z. Campbell, R.H.
Copyright Year	2007
Description	Author affiliation: Dept. of Comput. Sci., Illinois Univ., Champaign, IL (Anwar, Z.; Campbell, R.H.)
Abstract	Mission-critical telecom servers are being ported from their safe PSTN haven to the Internet to cator to the VoIP user base increasing failures due to greater susceptibility to attacks. Virtual machines are becoming increasing popular for deploying servers because they allow checkpointing and live migration facilities. The challenges are dealing with non-virtual state elements, like ongoing network communications that can't be check-pointed, and recovering state changed between failure and the last check-point. Other complications include dependence on human intervention and precise timing so as not to revert to an un-healthy VM already in the state of compromise. This paper describes a Xen based middleware that pervasively detects terminated VM servers and reincarnates them in a safe state such that they don't lose connectivity to their network clients. It also attempts to isolate messages that caused the failure and generates rules to disallow them from effecting the newly reincarnated VM in the future. Since it essentially allows a VM to start a new life from a point in time before it got compromised, we dubbed it: a time-forking virtual machine (TFVM) following the Copenhagen school's "many worlds theory" that postulates that every historical event forks a new universe for every possible outcome. Currently TFVM works in the context of our particular application but we discuss how to extend our model to allow reincarnation of generalized services
Starting Page	477
Ending Page	482
File Size	174424
Page Count	6
File Format	PDF
ISBN	0769527884
DOI	10.1109/PERCOMW.2007.103
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2007-03-19
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Virtual machining Virtual manufacturing Web server Network servers Mission critical systems Telecommunications Internet Checkpointing Humans Timing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Network bandwidth configuration tool for Xen virtual machines

Network performance testing on VM based autonomous web server

Public Key-Based Rendezvous Infrastructure for Secure and Flexible Private Networking

A Dynamic Protection System of Web Server in Virtual Cluster Using Live Migration

Evaluating the impact of data center network architectures on application performance in virtualized environments

Time-Sensitive Virtual Machines Provisioning and Resource Allocation in Clouds

Policy-based network management

Dynamic scaling of web services for xen based virtual cloud environment

An approach for secure-communication between XEN virtual machines

Secure Reincarnation of Compromised Servers Using Xen Based Time-Forking Virtual Machines

Similar Documents

Network bandwidth configuration tool for Xen virtual machines

Network performance testing on VM based autonomous web server

Public Key-Based Rendezvous Infrastructure for Secure and Flexible Private Networking

A Dynamic Protection System of Web Server in Virtual Cluster Using Live Migration

Evaluating the impact of data center network architectures on application performance in virtualized environments

Time-Sensitive Virtual Machines Provisioning and Resource Allocation in Clouds

Policy-based network management

Dynamic scaling of web services for xen based virtual cloud environment

An approach for secure-communication between XEN virtual machines

Secure Reincarnation of Compromised Servers Using Xen Based Time-Forking Virtual Machines