Security implications of virtualization: A literature study

Proceedings - 12th IEEE International Conference on Computational Science and Engineering, CSE 2009

Volumn 3, Issue , 2009, Pages 353-358

  Cleeff, Andrévan ^a   Pieters, Wolter ^a   Wieringa, Roel ^a  

^a UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

BOUNDEDNESS; DATA CENTERS; DEDICATED HARDWARE; KEY TECHNOLOGIES; MONOTONICITY; ON-DEMAND; POSITIVE EFFECTS; PRIVATE DATA; SECURITY IMPLICATIONS; SYSTEMATIC LITERATURE REVIEW; VIRTUALIZATIONS;

NETWORK SECURITY;

EID: 70849097492     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSE.2009.267     Document Type: Conference Paper

References (31)

1. J. Smith and R. Nair, "The architecture of virtual machines, " Computer, vol. 38, no. 5, pp. 32-38, 2005.
2. J. Webster and R. T. Watson, "Analyzing the past to prepare for the future: Writing a literature review, " MIS Quarterly, vol. 26, pp. 13-23, 2002.
3. S. Vaarala, "Security considerations of commodity x86 virtualization, " May 2006, Helsinki University of Technology, Licentiate Thesis.
4. Corsec Security, "VMware Inc ESX Server 3.0.2 and VirtualCenter 2.0.2, " www.commoncriteriaportal.org/files/epfiles/vmware-sec-e.pdf, 2008, common Criteria Security Target, EAL4+, Retrieved 2009-04-20.
5. R. Perez, L. van Doorn, and R. Sailer, "Virtualization and Hardware-Based Security, " IEEE Security & Privacy, vol. 6, no. 5, pp. 24-31, 2008.
6. B. Jansen, H. Ramasamy, M. Schunter, and A. Tanner, "Architecting Dependable and Secure Systems Using Virtualization, " Lecture Notes In Computer Science, pp. 124-149, 2008.
7. R. Uhlig, G. Neiger, D. Rodgers, A. Santoni, F. Martins, A. Anderson, S. Bennett, A. Kagi, F. Leung, and L. Smith, "Intel virtualization technology, " Computer, vol. 38, no. 5, pp. 48-56, 2005.
8. L. van Doorn, "Hardware virtualization trends, " in Proceedings of the 2nd international conference on Virtual execution environments. ACM New York, NY, USA, 2006, pp. 45-45.
9. S. Bratus, M. Locasto, A. Ramaswamy, and S. Smith, "Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security, " in VMSec '08: Proceedings of the 1st ACM workshop on Virtual machine security. New York, NY, USA: ACM, 2008, pp. 49-58.
10. Distributed Management Task Force, Inc., "Open virtualization format specification, " www.dmtf.org/standards/publisheddocuments/DSP02431.0.0. pdf, February 2009, version 1.0.0, Retrieved 2009-04-20.
11. S. Crosby and D. Brown, "The virtualization reality, " Queue, vol. 4, no. 10, pp. 34-41, 2007.
12. B. D. Payne, M. Carbone, M. Sharif, and W. Lee, "Lares: An architecture for secure active monitoring using virtualization, " Security and Privacy, IEEE Symposium on, pp. 233-247, 2008.
13. P. Karger and D. Safford, "I/O for Virtual Machine Monitors: Security and Performance Issues, " IEEE Security & Privacy, vol. 6, no. 5, pp. 16-23, 2008.
14. VMware, "VMware ESXi 3.5 datasheet, " www.vmware.com/files/pdf/ vmware-esxi-datasheet.pdf, 2008, retrieved 2009-03-18.
15. T. Ormandy, "An empirical study into the security exposure to host of hostile virtualized environments, " in CanSecWest 2007, Vancouver BC, April 2007.
16. NIST, "CVE-2009-1244, " http://web.nvd.nist.gov/view/vuln/ detail?vulnId=CVE-2009-1244, April 2009, retrieved 2009-04-20.
17. T. Garfinkel and A. Warfield, "What virtualization can do for security, ";LOGIN:, vol. 32, no. 6, pp. 28-34, December 2007.
18. G. Dunlap, S. T. King, S. Cinar, M. Basrai, and P. Chen, "Revirt: Enabling intrusion analysis through virtual-machine logging and replay, " in In Proceedings of the 2002 Symposium on Operating Systems Design and Implementation (OSDI). New York, NY, USA: ACM, 2002, pp. 211-224.
19. K. Nance, M. Bishop, and B. Hay, "Virtual Machine Introspection: Observation or Interference?" IEEE Security & Privacy, vol. 6, no. 5, pp. 32-37, 2008.
20. T. Garfinkel and M. Rosenblum, "A virtual machine introspection based architecture for intrusion detection, " in Proceedings of Network and Distributed Systems Security Symposium, 2003, pp. 191-206.
21. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh, "Terra: a virtual machine-based platform for trusted computing, " SIGOPS Oper. Syst. Rev., vol. 37, no. 5, pp. 193-206, 2003.
22. T. Garfinkel and M. Rosenblum, "When virtual is harder than real: Security challenges in virtual machine based computing environments, " in 10th Workshop on Hot Topics in Operating Systems, 2005.
23. Microsoft Corporation, "Windows Server 2008 Hyper-V Technical Overview, " http://www.microsoft.com/windowsserver2008/en/us/hyperv- overview.aspx, 2008, retrieved 2009-04-20.
24. VMware, "VMware VMotion datasheet, " www.vmware.com/pdf/ vmotion-datasheet.pdf, 2007, retrieved 2009-03-18.
25. Citrix, "Xenserver administrator's guide, " support.citrix.com/servlet/KbServlet/download/18051-102-19048/reference.pdf, September 2008, retrieved 2009-03-18.
26. J. Oberheide, E. Cooke, and F. Jahanian, "Empirical exploitation of live virtual machine migration, " in Proceedings of BlackHat DC convention, 2008.
27. M. Rosenblum and T. Garfinkel, "Virtual machine monitors: Current technology and future trends, " Computer, vol. 38, no. 5, pp. 39-47, 2005.
28. VMware, "VMware vCenter Update Manager, " www.vmware.com/files/ pdf/update-manager-datasheet.pdf, 2008, product datasheet, Retrieved 2009-04-20.
29. C. Gebhardt and A. Tomlinson, "Security consideration for virtualization, " Royal Holloway, University of London, Egham, Surrey TW20 0EX, England, Tech. Rep. RHUL-MA-2008-16, 2008.
30. S. Vaughan-Nichols, "Virtualization Sparks Security Concerns, " Computer, vol. 41, no. 8, pp. 13-15, 2008.
31. The Register, "Webhost hack wipes out data for 100, 000 sites, " http://www.theregister.co.uk/2009/06/08/webhostattack/, 2009, retrieved 2009-06-25.