Managing security of virtual machine images in a cloud environment

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 91-96

  Wei, Jinpeng ^a   Zhang, Xiaolan ^b   Ammons, Glenn ^b   Bala, Vasanth ^b   Ning, Peng ^c  

^a FLORIDA INTERNATIONAL UNIVERSITY   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

^c NORTH CAROLINA STATE UNIVERSITY   (United States)

Author keywords

Cloud computing; Image repository; Virtual machine image

Indexed keywords

CLOUD COMPUTING; IMAGE FILTERS; IMAGE MANAGEMENT SYSTEM; IMAGE REPOSITORY; INITIAL STATE; SECURITY PROBLEMS; SECURITY VIOLATIONS; THIRD PARTIES; VIRTUAL MACHINES;

SCANNING;

NETWORK SECURITY;

EID: 74049145625     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655008.1655021     Document Type: Conference Paper

References (24)

1. Clam AntiVirus. http://www.clamav.net/.
2. Privacy protector. http://www.NetDuster.com/Privacy/.
3. Secureclean. http://www.secureclean.com/.
4. Cloud security stokes concerns at RSA, April 2009. Available at http://www.networkworld.com/news/2009/042309-rsa-cloud-security.html.
5. Security Guidance for Critical Areas of Focus in Cloud Computing, April 2009. Available at http://www.cloudsecurityalliance.org/guidance/csaguide.pdf.
6. Amazon. Amazon EC2, Developer Guide. http://docs.amazonwebservices.com/ AWSEC2/latest/DeveloperGuide/.
7. Amazon. Amazon Elastic Compute Cloud (Amazon EC2). http://aws.amazon.com/ ec2.
8. Amazon. Amazon Simple Storage Service (Amazon S3). http://aws.amazon.com/ s3.
9. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, and et al. Above the clouds: A berkeley view of cloud computing. Technical Report UCB/EECS-2009-28, 2009. Available at http://www.eecs.berkeley.edu/Pubs/TechRpts/2009/EECS-2009-28. html.
10. K. Eshghi, M. Lillibridge, and et al. Jumbo store: providing efficient incremental upload and versioning for a utility rendering service. In FAST'07, 2007.
11. T. Garfinkel and M. Rosenblum. When virtual is harder than real: Security challenges in virtual machine based computing environments. In Tenth Workshop on Hot Topics in Operating Systems (HotOS'05).
12. Google. Google App Engine. http://code.google.com/appengine/.
13. B. Hayes. Cloud Computing. Commun. ACM, 51(7):9-11, 2008. Available at http://doi.acm.org/10.1145/1364782.1364786.
14. J. Heiser and M. Nicolett. Assessing the Security Risks of Cloud Computing, June 2008.
15. IBM. IBM AMIs on Amazon's EC2. http://developer.amazonwebservices.com/ connect/kbcategory.jspa?categoryID=229.
16. IBM. IBM Cloud Computing. http://www.ibm.com/ibm/cloud.
17. IBM. IBM Tivoli License Compliance Manager. http://www.ibm.com/software/ tivoli/products/license-mgr/.
18. Microsoft. Azure Services Platform. http://www.microsoft.com/azure/ default.mspx.
19. Oracle. Oracle AMIs on Amazon's EC2. http://developer.amazonwebservices. com/connect/kbcategory.jspa?categoryID=205.
20. B. Pfaff, T. Garfinkel, and M. Rosenblum. Virtualization aware file systems: getting beyond the limitations of virtual disks. In Proceedings of the Third Symposium on Networked Systems Design and Implementation (NSDI '06), May 2006.
21. S. Quinlan and S. Dorward. Venti: a new approach to archival storage. In Proceedings of the 1th Usenix Conference on File and Storage Technologies, 2002.
22. D. Reimer, A. Thomas, G. Ammons, T. Mummert, B. Alpern, and V. Bala. Opening black boxes: Using semantic information to combat virtual machine image sprawl. In The 2008 ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, March 5-7, 2008.
23. VMware. Virtual Applicance Marketplace. http://www.vmware.com/appliances/ .
24. Eric Goldman. A Fresh Look at Web Development and Hosting Agreements. http://www.ericgoldman.org/Articles/freshlookarticle.htm.