An In-VM Measuring Framework for Increasing Virtual Machine Security in Clouds

Qian Liu, Chuliang Weng, Minglu Li, Yuan Luo

IEEE Security & Privacy · 2010 · 69 citations · 13 references

Concepts

TL;DR

Cloud computing depends on virtualization, where a virtual machine monitor allocates physical resources to multiple VMs, enabling widely used platforms such as VMWare, Xen, Denali, and KVM. The framework includes a module that measures executables inside VMs, sends the measurements to a trusted VM, and verifies them against a reference table of trusted values.

Abstract

Cloud computing relies heavily on virtualization. Virtualization technology has developed rapidly because of the rapid decrease in hardware cost and concurrent increase in hardware computing power. A virtual machine monitor (VMM, also called a hγpervisor) between the hardware and the OS enables multiple virtual machines (VMs) to run on top of a single physical machine. The VMM manages scheduling and dispatching the physical resources to the individual VMs as needed, and the VMs appear to users as separate computers. Widely used virtualization technologies include VMWare, Xen, Denali, and the Kernel-Based Virtual Machine (KVM). In this framework, a module measures executables running in virtual machines (VMs) and transfers the values to a trusted VM. Comparing those values to a reference table containing the trusted measurement values of running executables verifies the executable/s status.

References

13