CyberGuarder: A virtualization security assurance architecture for green cloud computing

Future Generation Computer Systems

Volumn 28, Issue 2, 2012, Pages 379-390

  Li, Jianxin ^a   Li, Bo ^a   Wo, Tianyu ^a   Hu, Chunming ^a   Huai, Jinpeng ^a   Liu, Lu ^b   Lam, K P ^c  

^a BEIHANG UNIVERSITY   (China)

^b UNIVERSITY OF DERBY   (United Kingdom)

^c KEELE UNIVERSITY   (United Kingdom)

Author keywords

Cloud computing; Green computing; Security isolation; Virtual security appliance; Virtualization

Indexed keywords

COMPUTING ENVIRONMENTS; COMPUTING PARADIGM; CONNECTED SYSTEMS; COST REQUIREMENTS; ENERGY EFFICIENT; EXECUTION ENVIRONMENTS; GREEN COMPUTING; GREEN IT; INTEGRITY MEASUREMENT; IT INFRASTRUCTURES; MULTI TENANTS; MULTI-GRANULARITY; MULTIPLE RESOURCES; NATURAL EXTENSION; NETWORK ISOLATION; SECURITY ASSURANCE; SECURITY CHALLENGES; SECURITY ISOLATION; SECURITY PROBLEMS; SECURITY REQUIREMENTS; SECURITY SERVICES; SOFTWARE APPLICATIONS; TRUST MANAGEMENT; VIRTUAL INFRASTRUCTURES; VIRTUAL LABORATORIES; VIRTUAL MACHINES; VIRTUAL NETWORKS; VIRTUAL SECURITY; VIRTUALISATION; VIRTUALIZATIONS;

ACCESS CONTROL; CLOUD COMPUTING; COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; CRITICAL INFRASTRUCTURES; CURRICULA; ENERGY EFFICIENCY; INFORMATION MANAGEMENT; LAKES; NETWORK ARCHITECTURE; VIRTUAL REALITY;

NETWORK SECURITY;

EID: 80053654165     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2011.04.012     Document Type: Article

References (26)

1. Natural Resources Defense Council "Recommendations for Tier I ENERGY STAR Computer Specification", http://www.energystar.gov/ia/partners/ proddevelopment/revisions/downloads/computer/RecommendationsTierICompSpecs.pdf.
2. Rajkumar Buyya, Chee Shin Yeo, Srikumar Venugopal, James Broberg, and Ivona Brandic Cloud computing and emerging IT platforms: vision, hype, and reality for delivering computing as the 5th utility Future Generation Computer Systems 25 6 2009 599 616 10.1016/j.future.2008.12.001
3. Gabriel Mateescu, Wolfgang Gentzsch, and Calvin J. Ribbens Hybrid computing-where HPC meets grid and cloud computing Future Generation Computer Systems 27 5 2011 440 453 10.1016/j.future.2010.11.003
4. Yang Chen, Tianyu Wo, Jianxin Li, An efficient resource management system for on-line virtual cluster provision, cloud, 2009, in: IEEE International Conference on Cloud Computing, 2009, pp. 7279.
5. Dimitrios Zissis, Dimitrios Lekkas, Addressing cloud computing security issues, Future Generation Computer Systems (2011) in press (doi:10.1016/j. future.2010.12.006).
6. R. Sailer, X. Zhang, T. Jaeger, L. van Doorn, Design and implementation of a tcg-based integrity measurement architecture, in: Proceedings of the 13th USENIX Security Symposium, August 2004.
7. T. Jaeger, R. Sailer, U. Shankar, Prima: policy-reduced integrity measurement architecture, in: Proceedings of the 2007 ACM Workshop on Scalable Trusted Computing, SACMAT'06, June 2006.
8. Google Chrome OS. www.chromium.org/chromium-os.
9. N.L. Petroni Jr., T. Fraser, J. Molina, W.A. Arbaugh, Copilot a coprocessor-based Kernel runtime integrity monitor, in: Proceedings of the 13th USENIX Security Symposium, 2004.
10. Jianxin Li, Jinpeng Huai, Chunming Hu, and Yanming Zhu A Secure Collaboration Service for Dynamic Virtual Organizations Information Sciences vol. 180 2010 Elsevier 3086 3107
11. E.M. Stuart, and J.D. John Application and analysis of the virtual machine approach to information system security and isolation Proceedings of the Workshop on Virtual Computer Systems 1973 ACM Cambridge, Massachusetts, United States
12. X. Zhao, K. Borders, and A. Prakash Virtual machine security systems, book chapter Advances in Computer Science and Engineering 2009 339 365 http://www.eecs.umich.edu/~aprakash/eecs588/handouts/virtualmachinesecurity.pdf
13. M. Armbrust, A. Fox, R. Griffith, A.D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, M. Zaharia, Above clouds: A Berkeley view cloud computing, Technical Report No. UCB/EECS- 2009-28, University California, Berkeley, 2009. http://www.eecs.berkeley.edu/Pubs/TechRpts/2009/ EECS-2009-28.pdf.
14. M. IKrohn, A. Yip, M. Brodsky, N. Cliffer, M.F. Kaashoek, E. Kohler, and R. Morris Information flow control for standard OS abstractions Proceedings of Twenty-First ACM SIGOPS Symposium on Operating Systems Principles Stevenson, Washington, USA, October 1417, 2007, SOSP'07 2007 ACM New York, NY 321 334 10.1145/1294261.1294293
15. Ahmed M. Azab, Peng Ning, Emre C. Sezer, Xiaolan Zhang, HIMA: a hypervisor-based integrity measurement agent, in: Proceedings of the 25th Annual Computer Security Applications Conference, ACSAC'09, December 2009, Honolulu, Hawaii, USA.
16. B.D. Payne, W. Lee, Secure and flexible monitoring of virtual machines, Presented at 23rd Annual Computer Security Applications Conference, ACSAC, Miami Beach, Florida, USA, 2007.
17. B.D. Payne, M. Carbone, M.I.S.W. Lee, Lares: an architecture for secure active monitoring using virtualization, Presented at IEEE Symposium on Security and Privacy, S&P 2008, Oakland, California, USA, 2008.
18. T. Garfinkel, M. Rosenblum, When virtual is harder than real: security challenges in virtual machine based computing environments, Presented at Proceedings of the 10th Conference on Hot Topics in Operating Systems, HOTOS 2005, Berkeley, CA, USA, 2005.
19. L. Flavio, and P. Roberto Di KvmSec: a security extension for Linux kernel virtual machines Proceedings of the 2009 ACM Symposium on Applied Computing 2009 ACM Honolulu, Hawaii
20. J. Ashlesha, T.K. Samuel, W.D. George, and M.C. Peter Detecting past and present intrusions through vulnerability-specific predicates Proceedings of the Twentieth ACM Symposium on Operating Systems Principles 2005 ACM Brighton, United Kingdom
21. David Meisner, Brian T. Gold, and Thomas F. Wenisch PowerNap: eliminating server idle power Proceeding of the 14th International Conference on Architectural Support for Programming Languages and Operating Systems ASPLOS'09 2009 ACM New York, NY, USA 205 216 10.1145/1508244.1508269
22. Kephart, J. Chan, H. Levine, D. Tesauro, G. Rawson, F. Lefurgy, C, Coordinating multiple autonomic managers to achieve specified power-performance tradeoffs, in: Proc. IEEE Intl. Conf. on Autonomic Computing, ICAC, Jun. 2007, pp. 145154.
23. Kevin Francis, and Peter Richardson Green Maturity Model for Virtualization http://msdn.microsoft.com/en-us/library/dd393310.aspx
24. Akshat Verma, Gargi Dasgupta, Tapan Kumar Nayak, Pradipta De, Ravi Kothari, Server workload analysis for power minimization using consolidation. in: Proceedings of the 2009 Conference on USENIX Annual Technical Conference, USENIX'09, USENIX Association, Berkeley, CA, USA, 2009, pp. 2828.
25. Jan Stoess, Christian Lang, Frank Bellosa, Energy management for hypervisor-based virtual machines. in: Jeff Chase, Srinivasan Seshan, (Eds.), 2007 USENIX Annual Technical Conference on Proceedings of the USENIX Annual Technical Conference ATC'07, USENIX Association, Berkeley, CA, USA, Article 1, 2007, pages. 14.
26. í.S. Cunha, I. Viana, J. Palotti, J.M. Almeida, V. Almeida, Analyzing security and energy tradeoffs in autonomic capacity management, in: Proc. NOMS, 2008, pp. 302309.