Design and implementation of a trusted monitoring framework for cloud platforms

Future Generation Computer Systems

Volumn 29, Issue 8, 2013, Pages 2092-2102

  Zou, Deqing ^a   Zhang, Wenrong ^a   Qiang, Weizhong ^a   Xiang, Guofu ^a   Yang, Laurence Tianruo ^a,b   Jin, Hai ^a   Hu, Kan ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

^b ST FRANCIS XAVIER UNIVERSITY   (Canada)

Author keywords

Cloud computing; Cloud monitoring; Trusted computing; Virtualization

Indexed keywords

CLOUD MONITORING; DESIGN AND IMPLEMENTATIONS; MONITORING ENVIRONMENT; MONITORING FRAMEWORKS; MONITORING MECHANISMS; TRUSTED COMPUTING; TRUSTED COMPUTING TECHNOLOGY; VIRTUALIZATIONS;

CLOUD COMPUTING; VIRTUAL REALITY;

MONITORING;

EID: 84885955735     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2012.12.020     Document Type: Article

References (33)

1. M. Armbrust, A. Fox, R. Griffith, A. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, M. Zaharia, Above the clouds: a berkeley view of cloud computing, Technical Report, EECS Department, University of California, Berkeley, 2009.
2. R. Buyya, C.S. Yeo, S. Venugopal, J. Broberg, and I. Brandic Cloud computing and emerging IT platforms: vision, hype, and reality for delivering computing as the 5th utility Future Generation Computer Systems 25 6 2009 599 616
3. S. Nanda, T. Chiueh, A survey on virtualization technologies, Technical Report, ECSL-TR-129, SUNY at Stony Brook, 2005.
4. J.E. Smith, and R. Nair The architecture of virtual machines IEEE Computer 38 5 2005 32 38 (Pubitemid 40784340)
5. M. Rosenblum, and T. Garfinkel Virtual machine monitors: current technology and future trends IEEE Computer 38 5 2005 39 47 (Pubitemid 40784341)
6. Cloudwatch: http://aws.amazon.com/cloudwatch/.
7. Logicmonitor: http://www.logicmonitor.com/.
8. R.L. Krutz, and R.D. Vines Cloud Security: A Comprehensive Guide to Secure Cloud Computing 2010 Wiley Publishing pp. 1-32
9. D. Zissis, and D. Lekkas Addressing cloud computing security issues Future Generation Computer Systems 28 3 2012 583 592
10. J. Li, B. Li, T. Wo, C. Hu, J. Huai, L. Liu, and K.P. Lam CyberGuarder: a virtualization security assurance architecture for green cloud computing Future Generation Computer Systems 28 2 2012 379 390
11. L.M. Vaquero, L. Rodero-Merino, and D. Morn Locking the sky: a survey on IaaS cloud security Computing 91 1 2011 93 118
12. M.I. Sharif, W. Lee, W. Cui, A. Lanzi, Secure in-VM monitoring using hardware virtualization, in: Proc. of the 16th ACM Conference on Computer and Communications Security, 2009, pp. 477-487.
13. Opennebula: http://www.opennebula.org/.
14. G. Xiang, H. Jin, D. Zou, X. Zhang, S. Wen, F. Zhao, VMDriver: a driver-based monitoring mechanism for virtualization, in: Proc. of the 29th International Symposium on Reliable Distributed Systems, 2010, pp. 72-81.
15. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, A. Warfield, Xen and the art of virtualization, in: Proc. of the 19th ACM Symposium on Operating Systems Principles, 2003, pp. 164-177. (Pubitemid 40929695)
16. B. Clark, T. Deshane, E. Dow, S. Evanchik, M. Finlayson, J. Herne, J.N. Matthews, Xen and the art of repeated research, in: Proc. of the 2004 USENIX Annual Technical Conference, 2004, pp. 135-144.
17. I. Pratt, K. Fraser, S. Hand, C. Limpach, A. Warfield, D. Magenheimer, J. Nakajima, A. Mallick, Xen 3.0 and the art of virtualization, in: Proc. of the 2005 Linux Symposium, 2005, pp. 65-77.
18. VMware incorporation, introduction to VMware infrastructure. Available: http://www.vmware.com/pdf/vi3-35/esx-3/r35/vi3-35-25-intro-vi.pdf.
19. Virtual PC: http://www.microsoft.com/windows/virtual-pc/.
20. T. Garfinkel, M. Rosenblum, A virtual machine introspection based architecture for intrusion detection, in: Proc. of the 10th Network and Distributed System Symposium, 2003, pp. 191-206.
21. B.D. Payne, M.D.P.A. Carbone, W. Lee, Secure and flexible monitoring of virtual machines, in: Proc. of the 23rd Annual Computer Security Applications Conference, 2007, pp. 385-397.
22. VMsafe: http://www.vmware.com/technical-resourcces/security/vmsafe.html.
23. B.D. Payne, M. Carbone, M. Sharif, W. Lee, Lares: an architecture for secure active monitoring using virtualization, in: Proc. of the 2008 IEEE Symposium on Security and Privacy, 2008, pp. 233-247.
24. X. Jiang, X. Wang, Out-of-the-box monitoring of vm-based high-interaction honeypots, in: Proc. of the 10th International Symposium on Recent Advances in Intrusion Detection, 2007, pp. 198-218.
25. S.T. Jones, A.C. Arpaci-Dusseau, R.H. Arpaci-Dusseau, VMM-based hidden process detection and identification using Lycosid, in: Proc. of the 4th ACM/USENIX International Conference on Virtual Execution Environments, 2008, pp. 91-100.
26. X. Jiang, X. Wang, D. Xu, Stealthy malware detection through VMM-based out-of-the-box semantic view reconstruction, in: Proc. of the 14th ACM Conference on Computer and Communications Security, 2007, pp. 128-138.
27. A. Dinaburg, P. Royal, M. Sharif, W. Lee, Ether: malware analysis via hardware virtualization extensions, in: Proc. of the 15th ACM Conference on Computer and Communications Security, 2008, pp. 51-62.
28. A. Lanzi, M. Sharif, W. Lee, K-Tracer: a system for extracting kernel malware behavior, in: Proc. of the 16th Annual Network and Distributed System Security Symposium, 2009.
29. C. Xuan, J. Copeland, R. Beyah, Toward revealing kernel malware behavior in virtual execution environments, in: Proc. of the 12th International Symposium on Recent Advances in Intrusion Detection, 2009, pp. 304-325.
30. S.A. Hofmeyr, S. Forrest, and A. Somayaji Intrusion detection using sequences of system calls Journal of Computer Security 6 3 1998 151 180
31. D.P. Bovet, and M. Cesati Understanding the Linux Kernel third ed. 2005 O'Reilly pp. 75-114
32. S. Berger, R. Caceres, K.A. Goldman, R. Perez, R. Sailer, L.V. Doorn, vTPM: virtualizing the trusted platform module, in: Proc. of the 15th conference on USENIX Security Symposium, 2006, pp. 305-320.
33. B. Cully, G. Lefebvre, D.T. Meyer, M. Feeley, N.C. Hutchinson, A. Warfield, Remus: high availability via asynchronous virtual machine replication, in: Proc. of USENIX Symposium on Networked Systems Design and Implementation, 2008, pp. 161-174.