Multilateral Security Architecture for Virtualization platform in multi-tenancy cloud environment

ISCAS OpenIR

	Multilateral Security Architecture for Virtualization platform in multi-tenancy cloud environment
	Sun, Pengfei (1); Shen, Qingni (1); Gu, Liang (2); Li, Yangwei (1); Qing, Sihan (1); Chen, Zhong (1); Shen, Q.(shenqn@infosec.pku.edu.cn)
	2014
会议名称	2013 IEEE Conference Anthology, ANTHOLOGY 2013
会议日期	January 1, 2013 - January 8, 2013
会议地点	China
收录类别	EI
出版地	IEEE Computer Society, 2001 L Street N.W., Suite 700, Washington, DC 20036-4928, United States
ISBN	9781479916603
部门归属	(1) School of Software and Microelectronics, Peking University, Beijing, China; (2) MoE Key Lab of Network and Software Assurance, Peking University, Beijing, China; (3) Network and Information Security Lab., Institute of Software, Peking University, Beijing, China; (4) Institute of Software, Chinese Academy of Sciences, Beijing, China
摘要	Virtualization technologies enable multi-tenancy cloud business models by providing a scalable, shared resource platform for all tenants. Computing capacity, storage, and network are shared between multi-tenants. However, placing different customers' workloads on the same virtualization platform may lead to security vulnerabilities, which include the failure of mechanisms separating storage, memory, routing, and even reputation between different tenants of the shared infrastructure. The co-location of many customers inevitably causes conflict for the cloud provider as customers' communication security requirements are likely to be divergent from each other. In this paper, we introduce Multi-lateral Security concept to multi-tenancy cloud platform. It is difficult to analyze policies defined by consumers in the same virtualization platform in order to guarantee configuration stability given that policies may have conflicts leading to unpredictable effects. We present the Multilateral Security Architecture for Virtualization platform (VPMS) which enables the multilateral security for consumers. © 2013 IEEE.; Virtualization technologies enable multi-tenancy cloud business models by providing a scalable, shared resource platform for all tenants. Computing capacity, storage, and network are shared between multi-tenants. However, placing different customers' workloads on the same virtualization platform may lead to security vulnerabilities, which include the failure of mechanisms separating storage, memory, routing, and even reputation between different tenants of the shared infrastructure. The co-location of many customers inevitably causes conflict for the cloud provider as customers' communication security requirements are likely to be divergent from each other. In this paper, we introduce Multi-lateral Security concept to multi-tenancy cloud platform. It is difficult to analyze policies defined by consumers in the same virtualization platform in order to guarantee configuration stability given that policies may have conflicts leading to unpredictable effects. We present the Multilateral Security Architecture for Virtualization platform (VPMS) which enables the multilateral security for consumers. © 2013 IEEE.
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16575
专题	中国科学院软件研究所
通讯作者	Shen, Q.(shenqn@infosec.pku.edu.cn)
推荐引用方式 GB/T 7714	Sun, Pengfei ,Shen, Qingni ,Gu, Liang ,et al. Multilateral Security Architecture for Virtualization platform in multi-tenancy cloud environment[C]. IEEE Computer Society, 2001 L Street N.W., Suite 700, Washington, DC 20036-4928, United States,2014.