Korora over bar : A secure live virtual machine job migration framework for cloud systems integrity

被引:1
|
作者
Deylami, Hanif [1 ]
Gutierrez, Jairo [1 ]
Sinha, Roopak [1 ]
机构
[1] Auckland Univ Technol, Dept Comp Sci & Software Engn, Auckland, New Zealand
关键词
Cloud computing; Computational modelling; Virtualisation; Live migration; Cloud system integrity; Essential system characteristics; STORAGE MIGRATION;
D O I
10.1016/j.array.2023.100312
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
The article introduces an innovative framework called Korora over bar , which aims to enhance the security and integrity of live virtual machine migration in a public cloud computing environment. The framework incorporates a trusted platform module to ensure the integrity of the migration process. It offers a new approach for virtual machine migration and has been specifically designed and implemented on a public infrastructure-as-a-service cloud platform. The primary research problem identified is the vulnerability of virtual machine instances to attacks during the live migration procedure. The evaluation used involves running the framework simultaneously on the same hardware components (such as I/O, CPU, and memory) and utilizing the same hypervisor's platform (Xen's open -source hypervisor). In addition, the security aspect of live migration is a crucial consideration due to the pos-sibility of security threats across different area: data plane, control plane, and migration plane. Potential at-tackers may employ both passive and active attack techniques, putting the live migration at risk and resulting in a decline in performance. This poses a significant and alarming risk to the overall platform.To address the research gap, the Korora over bar framework emerged as a successful approach for achieving control-flow integrity by incorporating the Clark-Wilson security model proved effective in bridging the research gaps while maintaining system integrity. The primary achievement of this research is the introduction of the Korora over bar framework, which consists of seven agents operating within the Xen-privileged dom0 and establishing communication with the hypervisor. Overall, the finding indicate that the suggested framework offers an effective defence mechanism for moving a virtual machine from one host to another host with minimal disruption to normal operation with enhanced integrity.
引用
收藏
页数:19
相关论文
共 50 条
  • [31] A Taxonomy of Live Virtual Machine (VM) Migration Mechanisms in Cloud Computing Environment
    Acharya, Shreenath
    D'Mello, Demian Antony
    2013 INTERNATIONAL CONFERENCE ON GREEN COMPUTING, COMMUNICATION AND CONSERVATION OF ENERGY (ICGCE), 2013, : 809 - 815
  • [32] Multipath Transmission Control Protocol for Live Virtual Machine Migration in the Cloud Environment
    Ramana, Kadiyala
    Aluvalu, Rajanikanth
    Gunjan, Vinit Kumar
    Singh, Ninni
    Prasadhu, M. Nageswara
    WIRELESS COMMUNICATIONS & MOBILE COMPUTING, 2022, 2022
  • [33] On the Integrated Control of Virtual Machine Live Migration and Traffic Engineering for Cloud Computing
    Ichihara, Hirofumi
    Koizumi, Yuki
    Ohsaki, Hiroyuki
    Hato, Kunio
    Murayama, Junichi
    Imase, Makoto
    2012 IEEE GLOBAL COMMUNICATIONS CONFERENCE (GLOBECOM), 2012, : 1629 - 1634
  • [34] Pacer: A Progress Management System for Live Virtual Machine Migration in Cloud Computing
    Zheng, Jie
    Ng, T. S. Eugene
    Sripanidkulchai, Kunwadee
    Liu, Zhaolei
    IEEE TRANSACTIONS ON NETWORK AND SERVICE MANAGEMENT, 2013, 10 (04): : 369 - 382
  • [35] Migration-based Virtual Machine Placement in Cloud Systems
    Li, Kangkang
    Zheng, Huanyang
    Wu, Jie
    PROCEEDINGS OF THE 2013 IEEE 2ND INTERNATIONAL CONFERENCE ON CLOUD NETWORKING (CLOUDNET), 2013, : 83 - 90
  • [36] Secure mitigation and migration of virtual machines over hybrid cloud hypervisors infrastructure
    Almutairi, Badr
    INTERNATIONAL JOURNAL OF ADVANCED AND APPLIED SCIENCES, 2021, 8 (07): : 7 - 13
  • [37] Virtual machine placement in cloud systems through migration process
    Li, Kangkang
    Zheng, Huanyang
    Wu, Jie
    Du, Xiaojiang
    INTERNATIONAL JOURNAL OF PARALLEL EMERGENT AND DISTRIBUTED SYSTEMS, 2015, 30 (05) : 393 - 410
  • [38] Machine learning based optimized live virtual machine migration over WAN links
    Arif, Moiz
    Kiani, Adnan K.
    Qadir, Junaid
    TELECOMMUNICATION SYSTEMS, 2017, 64 (02) : 245 - 257
  • [39] Machine learning based optimized live virtual machine migration over WAN links
    Moiz Arif
    Adnan K. Kiani
    Junaid Qadir
    Telecommunication Systems, 2017, 64 : 245 - 257
  • [40] A SECURE VIRTUAL MACHINE MIGRATION USING PROCESSOR WORKLOAD PREDICTION METHOD FOR CLOUD ENVIRONMENT
    Reeba, P. Jabalin
    Shaji, R. S.
    Jayan, J. P.
    PROCEEDINGS OF IEEE INTERNATIONAL CONFERENCE ON CIRCUIT, POWER AND COMPUTING TECHNOLOGIES (ICCPCT 2016), 2016,