Infrastructure as a service security: Challenges and solutions

INFOS2010 - 2010 7th International Conference on Informatics and Systems

Volumn , Issue , 2010, Pages

  Dawoud, Wesam ^a   Takouna, Ibrahim ^b   Meinel, Christoph ^a  

^a UNIVERSITY OF POTSDAM   (Germany)

^b Ministry of Education and Higher Education   (Palestine)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; COMPUTING MODEL; DATA LEVEL; SECURITY ASSESSMENT; SECURITY CHALLENGES; SECURITY ISSUES; SECURITY MODEL; SERVICE SECURITY;

DISTRIBUTED COMPUTER SYSTEMS; INFORMATION SCIENCE; QUALITY OF SERVICE;

SECURITY OF DATA;

EID: 77953172125     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (46)

1. R. Buyya, C. S. Yeo, and S. Venugopal, "Market-Oriented Cloud Computing: Vision, Hype, and Reality for Delivering IT Services as Computing Utilities," Proceedings of the 10th IEEE International Conference on High Performance Computing and Communications, p. 9, August 2008. [Online]. Available: http://arxiv.org/abs/0808.3558
2. SLA Management Team, SLA Management Handbook, 4th ed. Enterprise Perspective, 2004.
3. G. Frankova, Service Level Agreements: Web Services and Security, ser. Lecture Notes in Computer Science. Berlin, Heidelberg: Springer Berlin Heidelberg, 2007, vol. 4607.
4. P. Patel, A. Ranabahu, and A. Sheth, "Service Level Agreement in Cloud Computing," Cloud Workshops at OOPSLA09, 2009. [Online]. Available: http://knoesis.wright.edu/aboutus/visitors/summer2009/PatelReport.pdf
5. D. Nurmi, R. Wolski, C. Grzegorczyk, G. Obertelli, S. Soman, L. Youseff, and D. Zagorodnov, "The Eucalyptus Open-Source Cloud-Computing System," Cluster Computing and the Grid, IEEE International Symposium on, vol. 0, pp. 124-131, 2009.
6. T. Mather, S. Kumaraswamy, and S. Latif, Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance, 1st ed., 2009. [Online]. Available: http://books.google.com/books?id=BHazecOuDLYC&pgis=1
7. R. Kanneganti and P. Chodavarapu, SOA Security. Manning Publications, 2008. [Online]. Available: http://www.amazon.com/SOASecurity-Ramarao-Kanneganti/ dp/1932394680
8. M. McIntosh and P. Austel, "XML signature element wrapping attacks and countermeasures," Workshop On Secure Web Services, 2005.
9. M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, On Technical Security Issues in Cloud Computing. IEEE, 2009.
10. B. D. Payne, "Xenaccess." [Online]. Available: http://doc.xenaccess.org/
11. J. Kirch, "Virtual machine security guidelines," 2007. [Online]. Available: http://www.cisecurity.org/tools2/vm/CIS\ VM\ Benchmark\ v1.0.pdf
12. T. G. Ben, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh, "Terra: A Virtual Machine-Based Platform for Trusted Computing." ACM Press, 2003, pp. 193-206.
13. S. Berger, R. Cáceres, D. Pendarakis, R. Sailer, E. Valdez, R. Perez, W. Schildhauer, and D. Srinivasan, "TVDc: Managing security in the trusted virtual datacenter," ACM SIGOPS Operating Systems Review, vol. 42, no. 1, p. 7, 2008.
14. S. Berger, R. Caceres, D. Pendarakis, R. Sailer, E. Valdez, R. Perez, W. Schildhauer, and D. Srinivasan, "Security for the cloud infrastrcture: trusted virtual data center (TVDc)." [Online]. Available: www.kiskeya.net/ramon/work/pubs/ibmjrd09.pdf
15. N. Santos, G. P. Krishna, and R. Rodrigues, "Towards Trusted Cloud Computing," HotCloud'09, 2009. [Online]. Available: http://www.usenix.org/ event/hotcloud09/tech/full papers/santos.pdf
16. V. Rajaravivarma, "Virtual local area network technology and applications," Proceedings The Twenty-Ninth Southeastern Symposium on System Theory, pp. 49-52, 1997.
17. W. Mao, A. Martin, H. Jin, and H. Zhang, Security Protocols, ser. Lecture Notes in Computer Science. Berlin, Heidelberg: Springer Berlin Heidelberg, 2009, vol. 5087.
18. "Property-Based TPM Virtualization," Lecture Notes In Computer Science; Vol. 5222, 2008.
19. V. Scarlata, C. Rozas, M. Wiseman, D. Grawrock, and C. Vishik, "TPM Virtualization: Building a General Framework," pp. 43 - 56, 2007.
20. S. Berger, R. Cáceres, K. A. Goldman, R. Perez, R. Sailer, and L. van Doorn, "vTPM:virtualizing the trusted platform module," USENIX Security Symposium, 2006.
21. D. G. Murray, G. Milos, and S. Hand, "Improving Xen security through disaggregation," ACM/Usenix International Conference On Virtual Execution Environments, p. 9, 2008.
22. J. Schiffman, T. Moyer, C. Shal, J. Trent, and P. McDaniel, "Justifying Integrity Using a Virtual Machine," 25th Annual Computer Security Applications Conference (ACSAC), 2009. [Online]. Available: http://www.patrickmcdaniel.org/pubs/acsac09c.pdf
23. R. Sailer, E. Valdez, T. Jaeger, R. Perez, L. van Doorn, J. L. Griffin, and S. Berger, "sHype: Secure hypervisor approach to trusted virtualized systems," NewYork, p. 12, 2005.
24. C. Rozas, "Intels security vision for Xen," 2005. [Online]. Available: www.xen.org/files/XenSecurity Intel CRozas.pdf
25. J. Matthews, E. M. Dow, T. Deshane, W. Hu, J. Bongio, P. F. Wilbur, and B. Johnson, Running Xen: A Hands-on Guide to the Art of Virtualization, 2008. [Online]. Available: http://books.google.com/books?id=XS-Jj7s2nhYC&pgis=1
26. E. Rescorla, "The Transport Layer Security (TLS) Protocol Version 1.1." 2006. [Online]. Available: http://www.ietf.org/rfc/rfc4346.txt
27. S. Kent and K. Seo, "Security Architecture for the Internet Protocol." 2005. [Online]. Available: http://www.ietf.org/rfc/rfc4301.txt
28. E. Rosen and Y. Rekhter, "BGP/MPLS IP Virtual Private Networks (VPNs)," 2006. [Online]. Available: http://www.ietf.org/rfc/rfc4364.txt
29. S. Axelsson, "Intrusion Detection Systems: A Survey and Taxonomy," 2000.
30. K. A. Jackson, "Intrusion Detection Systems (IDS): Product Survey," Los Alamos National Laboratory, 1999.
31. K. Vieira, A. Schulter, C. Westphall, and C. Westphall, "Intrusion Detection Techniques in Grid and Cloud Computing Environment," IT Professional, vol. 99, no. PrePrints, 2009.
32. X. Zhang, C. Li, and W. Zheng, "Intrusion Prevention System Design," CIT, 2004.
33. S. King and P. Chen, SubVirt: Implementing malware with virtual machines. IEEE, 2006.
34. A. Baliga, L. Iftode, and X. Chen, "Automated containment of rootkits attacks," Computers & Security, vol. 27, no. 7-8, pp. 323-334, 2008. [Online]. Available: http://linkinghub.elsevier.com/retrieve/pii/ S0167404808000382
35. S. Garg and H. Saran, "Anti-DDoS Virtualized Operating System," ARES, p. 7, 2008.
36. T. Garfinkel and M. Rosenblum, "When virtual is harder than real:security challenges in virtual machine based computing environments," Proceedings of the 10th conference on Hot Topics in Operating Systems - Volume 10, 2005.
37. C. Clark, K. Fraser, S. Hand, J. G. Hansen, E. Jul, C. Limpach, I. Pratt, and A. Warfield, "Live migration of virtual machines," Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation - Volume 2, 2005.
38. J. G. Hansen and E. Jul, "Self-migration of operating systems," ACM SIGOPS European Workshop, 2004.
39. J. Oberheide, E. Cooke, and F. Jahanian, "Empirical exploitation of live virtual machine migration," In Proc. of BlackHat DC convention, 2008.
40. F. J. Krautheim and D. S. Phatak, "LoBot: Locator Bot for Securing Cloud Compupting Environments," ACM Cloud Computing Security Workshop, 2009.
41. S. Lin and T. Chiueh, "A Survey on Solutions to Distributed Denialof Service Attacks." [Online]. Available: http://www.ecsl.cs.sunysb.edu/tr/ TR201.pdf
42. F. Bonnassieux, R. Harakaly, and P. Primet, "MapCenter: An Open Grid Status Visualization Tool," in proceedings of ISCA 15th International Conference on parallel and distributed computing systems, 2002, pp. 2-3. [Online]. Available: http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.11. 7294
43. R. Barbera, P. L. Re, G. Sava, and G. Tortone, "Grid monitoring with NetSaint," Bologna-Datagrid WP7 meeting, 2002. [Online]. Available: http://www.cnaf.infn.it/~ferrari/infn-grid-wp5/taskdg/task3/datagridwp7- netsaint.pdf
44. E. Markatos, "Large Scale Attacks on the Internet Lessons learned from the LOBSTER project," Crete, Greece. [Online]. Available: http://www.ist-lobster.org/publications/presentations/markatosattacks.pdf
45. L. Seitz, J.-M. Pierson, and L. Brunie, "Key Management for Encrypted Data Storage in Distributed Systems," SISW, 2003.
46. H. Jianzhong, X. Changsheng, and C. Bin, "Research and Implement of an Encrypted File System Used to NAS," SISW, 2003.