An In-VM Measuring Framework for Increasing Virtual Machine Security in Clouds
Authors:
- 2 September 2010
- journal article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Security & Privacy
- Vol. 8 (6) , 56-62
Abstract
Cloud computing relies heavily on virtualization. Virtualization technology has developed rapidly because of the rapid decrease in hardware cost and concurrent increase in hardware computing power. A virtual machine monitor (VMM, also called a hγpervisor) between the hardware and the OS enables multiple virtual machines (VMs) to run on top of a single physical machine. The VMM manages scheduling and dispatching the physical resources to the individual VMs as needed, and the VMs appear to users as separate computers. Widely used virtualization technologies include VMWare, Xen, Denali, and the Kernel-Based Virtual Machine (KVM). In this framework, a module measures executables running in virtual machines (VMs) and transfers the values to a trusted VM. Comparing those values to a reference table containing the trusted measurement values of running executables verifies the executable/s status.Keywords
This publication has 6 references indexed in Scilit:
- Countering kernel rootkits with lightweight hook protection2009
- Lares: An Architecture for Secure Active Monitoring Using Virtualization2008 IEEE Symposium on Security and Privacy (SP 2008), 2008
- SecVisorACM SIGOPS Operating Systems Review, 2007
- Detecting and categorizing kernel-level rootkits to aid future detectionIEEE Security & Privacy, 2006
- Xen and the art of virtualization2003
- SPLASHACM SIGARCH Computer Architecture News, 1992