A VMM-based intrusion prevention system in cloud computing environment

Journal of Supercomputing

Volumn 66, Issue 3, 2013, Pages 1133-1151

  Jin, Hai ^a   Xiang, Guofu ^a   Zou, Deqing ^a   Wu, Song ^a   Zhao, Feng ^a   Li, Min ^a   Zheng, Weide ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Cloud computing; File integrity; Grid computing; Intrusion prevention; Virtualization

Indexed keywords

FINITE AUTOMATA; GRID COMPUTING; NETWORK SECURITY; VIRTUAL MACHINE; VIRTUALIZATION;

CLOUD COMPUTING ENVIRONMENTS; DETECTION PROCESS; FILE INTEGRITIES; INTRUSION PREVENTION; INTRUSION PREVENTION SYSTEMS; SECURITY PROBLEMS; STATE TRANSITIONS; VIRTUAL MACHINE MONITORS;

CLOUD COMPUTING;

EID: 84887991186     PISSN: 09208542     EISSN: 15730484     Source Type: Journal    
DOI: 10.1007/s11227-011-0608-2     Document Type: Article

References (29)

1. Foster I, Kesselman C, Tuecke S (2001) The anatomy of the grid: enabling scalable virtual organizations. Int J High Perform Comput Appl 15:200-222
2. Armbrust M, Fox A, Griffith R, Joseph AD, Katz RH, Konwinski A, Lee G (2009) Above the clouds: a Berkeley view of cloud computing. Technical report, Electrical Engineering and Computer Sciences, University of California at Berkeley
3. Buyya R, Yeo CS, Venugopal S (2008) Market-oriented cloud computing: vision, hype, and reality for delivering IT services as computing utilities. In: 10th IEEE international conference on high performance computing and communications. IEEE, Washington, pp 5-13
4. Rosenblum M, Garfinkel T (2005) Virtual machine monitors: current technology and future trends. IEEE Comput 38:39-47
5. Smith JE, Nair R (2005) The architecture of virtual machines. IEEE Comput 38:32-38
6. Adams K, Agesen O (2006) A comparison of software and hardware techniques for x86 virtualization. In: 12th international conference on architectural support for programming languages and operating systems. ACM, California, pp 2-13
7. Garfinkel T, Rosenblum M (2005) When virtual is harder than real: security challenges in virtual machine based computing environments. In: 10th workshop on hot topics in operating systems. IEEE, Santa Fe, pp 20-25
8. Machado RB, Boukerche A, Sobral JBM, Juca KRL, Notare MSMA (2005) A hybrid artificial immune and mobile agent intrusion detection based model for computer network operations. In: 19th IEEE international parallel and distributed processing symposium. IEEE, Denver, pp 191-198
9. Kim GH, Spafford EH (1994) The design and implementation of tripwire: a file system integrity checker. In: 2nd ACM conference on computer and communications security. ACM, Fairfax, pp 18-29
10. Chrun D, Cukier M, Sneeringer G (2008) Finding corrupted computers using imperfect intrusion prevention system event data. In: Computer safety reliability, and security, vol 5219, pp 221-234
11. Jin H, Xiang G, Zhao F, Zou D, Li M, Shi L (2009) VMFence: a customized intrusion prevention system in distributed virtual computing environment. In: 3rd international conference on ubiquitous information management and communication. ACM, Suwon
12. Barham P, Dragovic B, Fraser K, Harris SHT, Ho A, Neugebauer R, Pratt I, Warfield A (2003) Xen and the art of virtualization. In: 19th ACM symposium on operating systems principles. ACM, New York, pp 164-177
13. Pratt I, Fraser K, Hand S, Limpach C, Warfield A, Magenheimer D, Nakajima J, Mallick A (2005) Xen 3.0 and the art of virtualization. In: 2005 Linux symposium. USENIX, Ottawa, pp 65-77
14. Chisnall D (2007) The definite guide to the Xen hypervisor. Prentice Hall, New York
15. Gelsinger PP (2001) Microprocessors for the new millennium: challenges, opportunities, and new frontiers. In: 45th international solid state circuits conference. ACM, San Francisco, pp 22-35
16. Intel Staff. Intel 64 and IA-32 architectures software developer's manuals. Intel Corporation, November 2008
17. AMD Staff. AMD64 architecture programmer's manual. AMD Corporation, September 2007
18. Dunlap GW, King ST, Cinar S, Basrai M, Chen PM (2002) Revirt: enabling intrusion analysis through virtual machine logging and replay. In: 5th symposium on operating systems design and implementation. USENIX, Boston, pp 211-224
19. Garfinkel T, Rosenblum M (2003) A virtual machine introspection based architecture for intrusion detection. In: 10th network and distributed system symposium. IEEE, San Diego, pp 191-206
20. Joshi A, King ST, Dunlap GW, Chen PM (2005) Detecting past and present intrusions through vulnerability-specific predicates. In: 20th ACM symposium on operating systems principles. ACM, Brighton, pp 1-15
21. Kourai K, Chiba S (2005) HyperSpector: virtual distributed monitoring environments for secure intrusion detection. In: 1st ACM/USENIX international conference on virtual execution environments. ACM, Chicago, pp 197-207
22. Pennington AG, Strunk JD, Griffin JL, Soules CAN, Goodson GR, Ganger GR (2003) Storage-based intrusion detection: watching storage activity for suspicious behavior. In: 12th USENIX security symposium. USENIX, Washington, pp 1-15
23. 3FS: an in-kernel integrity checker and intrusion detection file system. In: 18th USENIX large installation system administration conference. USENIX, Atlanta, pp 67-78
24. Quynh NA, Takefuji Y (2007) A novel approach for a file-system integrity monitor tool of Xen virtual machine. In: 2nd ACM symposium on information, computer and communications security. ACM, Singapore, pp 194-203
25. Bovet DP, Cesati M (2005) Understanding the Linux kernel, 3rd edn. O'Reilly, Sebastopol
26. VMware Home Page. http://www.vmware.com
27. Virtual PC Home Page. http://www.microsoft.com/windows/virtual-pc
28. OSSEC Home Page. http://www.ossec.net
29. Snort Home Page. http://www.snort.org