Security assessment of virtual machines in open source clouds

2013 36th International Convention on Information and Communication Technology, Electronics and Microelectronics, MIPRO 2013 - Proceedings

Volumn , Issue , 2013, Pages 1094-1099

  Donevski, Aleksandar ^a   Ristov, Sasko ^a   Gusev, Marjan ^a  

^a SS CYRIL AND METHODIUS UNIVERSITY   (Macedonia)

Author keywords

Cloud Computing; OpenStack Cloud; Security Assessment; Virtualization

Indexed keywords

CLOUD SERVICE PROVIDERS; MULTI TENANCIES; SECURITY ASSESSMENT; SECURITY CHALLENGES; SECURITY LEVEL; SECURITY THREATS; VIRTUAL MACHINES; VIRTUALIZATIONS;

CLOUD COMPUTING; COMMUNICATION SYSTEMS; INFORMATION TECHNOLOGY; MICROELECTRONICS;

COMPUTER SIMULATION;

EID: 84886902973     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (27)

1. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, "A view of cloud computing, " Commun. ACM, vol. 53, no. 4, pp. 50-58, Apr. 2010.
2. Y. Tang, P. P. Lee, J. C. Lui, and R. Perlman, "Secure overlay cloud storage with access control and assured deletion, " IEEE Transactions on Dependable and Secure Computing, vol. 9, no. 6, pp. 903-916, 2012.
3. L. M. Kaufman, "Can a trusted environment provide security?" IEEE Security and Privacy, vol. 8, no. 1, pp. 50-52, Jan. 2010. [Online]. Available: http://dx.doi.org/10.1109/MSP.2010.33
4. T. Jaeger and J. Schiffman, "Outlook: Cloudy with a chance of security challenges and improvements, " IEEE Security and Privacy, vol. 8, no. 1, pp. 77-80, Jan. 2010.
5. R. Jhawar, V. Piuri, and P. Samarati, "Supporting security requirements for resource management in cloud computing, " in Computational Science and Engineering (CSE), 2012 IEEE 15th International Conference on, dec. 2012, pp. 170-177.
6. M. Shtern, B. Simmons, M. Smit, and M. Litoiu, "An architecture for overlaying private clouds on public providers, " in 8th Int. Conf. on Network and Service Management, CNSM 2012, Las Vegas, USA, 2012.
7. OpenStack. (2013, Jan.) Openstack cloud software. [Online]. Available: http://openstack.org
8. B. Grobauer, T. Walloschek, and E. Stocker, "Understanding cloud computing vulnerabilities, " Security Privacy, IEEE, vol. 9, no. 2, pp. 50-57, march-april 2011.
9. R. Shaikh and M. Sasikumar, "Article: Security issues in cloud computing: A survey, " International Journal of Computer Applications, vol. 44, no. 19, pp. 4-10, April 2012, foundation of Computer Science, USA.
10. L. M. Kaufman, "Can public-cloud security meet its unique challenges?" IEEE Security and Privacy, vol. 8, no. 4, pp. 55-57, Jul. 2010.
11. W. Brown, V. Anderson, and Q. Tan, "Multitenancy-security risks and countermeasures, " in Network-Based Information Systems (NBiS), 2012 15th International Conference on, sept. 2012, pp. 7-13.
12. X. Zhang, N. Wuwong, H. Li, and X. Zhang, "Information security risk management framework for the cloud computing environments, " in Proceedings of the 2010 10th IEEE International Conference on Computer and Information Technology, ser. CIT '10. Washington, DC, USA: IEEE Computer Society, 2010, pp. 1328-1334.
13. S. Ristov, M. Gusev, and M. Kostoska, "A new methodology for security evaluation in cloud computing, " in MIPRO, 2012 Proc. of the 35th Int. Convention, IEEE Conference Publications, Opatija, Croatia, 2012, pp. 1808-1813.
14. Z. Chen and J. Yoon, "It auditing to assure a secure cloud computing, " in Proceedings of the 2010 6th World Congress on Services, ser. SERVICES '10. Washington, DC, USA: IEEE Computer Society, 2010, pp. 253-259.
15. C. Wang, S. Chow, Q. Wang, K. Ren, and W. Lou, "Privacy-preserving public auditing for secure cloud storage, " Computers, IEEE Transactions on, vol. 62, no. 2, pp. 362-375, feb. 2013.
16. S. Ristov, M. Gusev, and M. Kostoska, "Cloud computing security in business information systems, " International Journal of Network Security & Its Applications (IJNSA), vol. 4, no. 2, pp. 75-93, 2012.
17. ISO/IEC, "ISO/IEC 27001:2005, Information Security Management Systems-Requirements, " 2012. [Online]. Available: http://www.iso.org/ iso/iso catalogue/catalogue tc/catalogue detail.htm?csnumber=42103
18. CloudStack. (2013, Jan.) Cloudstack opens source cloud computing. [Online]. Available: http://cloudstack.org
19. S. Ristov, M. Gusev, and M. Kostoska, "Security assessment of openstack open source cloud solution, " in Proceedings of the 7th South East European Doctoral Student Conference (DSC2012), Thessaloniki, Greece, 2012, pp. 577-587.
20. M. Gusev, S. Ristov, and A. Donevski, "Security vulnerabilities from inside and outside the cloud, " University Ss Cyril and Methodius, Skopje, Macedonia, FCSE, Tech. Rep. IIT:01-13, Jan. 2013.
21. S. Ristov, M. Gusev, and A. Donevski, "Openstack cloud security vulnerabilities from inside and outside, " in to be published in Proceedings of The 4th International Conference on Cloud Computing, GRIDs, and Virtualization (CLOUD COMPUTING 2013), Valencia, Spain, May 2013.
22. KVM, "Kernel based virtual machine, " Jan. 2013. [Online]. Available: http://www.linux-kvm.org/page/Main Page
23. C. Systems, "Xen hypervisor, " Jan. 2013. [Online]. Available: http://www.xen.org/
24. UML, "User-mode linux kernel, " Jan. 2013. [Online]. Available: http://user-mode-linux.sourceforge.net/
25. Microsoft, "Microsoft hyper-v server 2012, " Jan. 2013. [Online]. Available: www.microsoft.com/hyper-v-server/
26. Tenable, "Nessus 5, " Jan. 2013. [Online]. Available: http://www.tenable. com/products/nessus
27. N. V. Database, "Common vulnerability scoring system, " Jan. 2013. [Online]. Available: http://nvd.nist.gov/cvss.cfm