Security and trust preserving VM migrations in public clouds

Proc. of the 11th IEEE Int. Conference on Trust, Security and Privacy in Computing and Communications, TrustCom-2012 - 11th IEEE Int. Conference on Ubiquitous Computing and Communications, IUCC-2012

Volumn , Issue , 2012, Pages 869-876

  Aslam, Mudassar ^a   Gehrmann, Christian ^b   Björkman, Mats ^a  

^a MÄLARDALEN UNIVERSITY   (Sweden)

^b SWEDISH INSTITUTE OF COMPUTER SCIENCE   (Sweden)

Author keywords

cloud security; IaaS; TPM; trusted platforms; VM migration

Indexed keywords

CLOUD SERVICES; IAAS; MIGRATION PROTOCOLS; TPM; TRUSTED COMPUTING; TRUSTED PLATFORMS; TRUSTED THIRD PARTIES; VIRTUAL MACHINES; VM MIGRATION;

UBIQUITOUS COMPUTING;

COMPUTER PRIVACY;

EID: 84868116561     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TrustCom.2012.256     Document Type: Conference Paper

References (22)

1. N. Santos, K. P. Gummadi, and R. Rodrigues, "Towards trusted cloud computing," in Proceedings of the 2009 conference on Hot topics in cloud computing, ser. HotCloud'09. Berkeley, CA, USA: USENIX Association, 2009. [Online]. Available: http://dl.acm.org/citation.cfm?id=1855533.1855536
2. M. Aslam, C. Gehrmann, L. Rasmusson, and M. Björkman, "Securely launching virtual machines on trustworthy plat-forms in a public cloud," in CLOSER 2012 - Proceedings of the 2nd International Conference on Cloud Computing and Services Science, Porto, Portugal, 18-21 April, 2012. SciTePress, 2012.
3. J. Schiffman, T. Moyer, H. Vijayakumar, T. Jaeger, and P. McDaniel, "Seeding clouds with trust anchors," in Proceedings of the 2010 ACM workshop on Cloud computing security workshop, ser. CCSW '10. New York, NY, USA: ACM, 2010, pp. 43-46. [Online]. Available: http://doi.acm.org/10.1145/1866835. 1866843
4. P. Mell and T. Grance, "The nist definition of cloud computing (draft)," http://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf, September 2011.
5. D. Chisnall, The Definitive Guide to the Xen Hypervisor (Prentice Hall Open Source Software Development Series). Upper Saddle River, NJ, USA: Prentice Hall PTR, 2007.
6. "Kernel Based Virtual Machine," http://www.linuxkvm.org/page/ Main-Page, 2011.
7. "VMware Inc., Virtualization Solutions," http://www.vmware.com/ virtualization/, 2011.
8. A. Celesti, A. Salici, M. Villari, and A. Puliafito, "A remote attestation approach for a secure virtual machine migration in federated cloud environments," in 2011 First International Symposium on Network Cloud Computing and Applications. IEEE, 2011, pp. 99-106.
9. M. Kozuch and M. Satyanarayanan, "Internet suspend/resume," in Proceedings of the Fourth IEEE Workshop on Mobile Computing Systems and Applications, ser. WMCSA '02. Washington, DC, USA: IEEE Computer Society, 2002, pp. 40-. [Online]. Available: http://dl.acm.org/citation.cfm?id=832315.837557
10. C. Clark, K. Fraser, S. Hand, J. G. Hansen, E. Jul, C. Limpach, I. Pratt, and A. Warfield, "Live migration of virtual machines," in Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation - Volume 2, ser. NSDI'05. Berkeley, CA, USA: USENIX Association, 2005, pp. 273-286. [Online]. Available: http://dl.acm.org/citation.cfm?id= 1251203.1251223
11. M. Aslam and C. Gehrmann, "Security Considerations for Virtual Platform Provisioning," in ECIW '11: Proceedings of the 10th European Conference on Information Warfare and Security, The Institute of Cybernetics at the Tallinn University of Technology. UK: Academic Publishing Limited, July 2011, pp. 283-290.
12. Q. Zhang, L. Cheng, and R. Boutaba, "Cloud computing: state-of-the-art and research challenges," Journal of Internet Services and Applications, vol. 1, no. 1, pp. 7-18, 2010. [Online]. Available: http://www.springerlink.com/index/10.1007/s13174-010-0007-6
13. W. Wang, Y. Zhang, B. Lin, X. Wu, and K. Miao, "Secured and reliable vm migration in personal cloud," in Computer Engineering and Technology (ICCET), 2010 2nd International Conference on, vol. 1, april 2010, pp. V1-705-V1-709.
14. F. Zhang, Y. Huang, H. Wang, H. Chen, and B. Zang, "Palm: Security preserving vm live migration for systems with vmm-enforced protection," in Trusted Infrastructure Technologies Conference, 2008. APTC '08. Third Asia-Pacific, oct. 2008, pp. 9-18.
15. H. Chen, J. Chen, W. Mao, and F. Yan, "Daonity - grid security from two levels of virtualization," Inf. Secur. Tech. Rep., vol. 12, pp. 123-138, June 2007. [Online]. Available: http://dl.acm.org/citation.cfm?id= 1298760.1298887
16. H. Chen, F. Zhang, C. Chen, Z. Yang, R. Chen, B. Zang, W. Mao, H. Chen, F. Zhang, C. Chen, Z. Yang, R. Chen, B. Zang, and W. Mao, "Tamper-resistant execution in an untrusted operating system using a virtual machine monitor," 2007.
17. B. Danev, R. J. Masti, G. O. Karame, and S. Capkun, "Enabling secure vm-vtpm migration in private clouds," in Proceedings of the 27th Annual Computer Security Applications Conference, ser. ACSAC '11. New York, NY, USA: ACM, 2011, pp. 187-196. [Online]. Available: http://doi.acm.org/10.1145/2076732. 2076759
18. S. Berger, R. Cáceres, K. A. Goldman, R. Perez, R. Sailer, and L. van Doorn, "vTPM: Virtualizing the Trusted Platform Module," in USENIX-SS'06: Proceedings of the 15th Conference on USENIX Security Symposium. Berkeley, CA, USA: USENIX Association, 2006.
19. "TCG credential profiles," http://www.trustedcomputinggroup. org/, May 2007.
20. "A CMC Profile for AIK Certificate Enrollment," http://www.trustedcomputinggroup.org/, March 2011.
21. "TPM Specification, TPM Main Part-III Design Principles," http://www.trustedcomputinggroup.org/, July 2007.
22. "Integrity Report Schema Specification," http://www. trustedcomputinggroup.org/, May 2011.