Providing secure services for a virtual infrastructure

Authors:
Adrian Baldwin;Chris Dalton;Simon Shiu;Krzysztof Kostienko;Qasim Rajpoot
Affiliations:
HP Labs, Bristol, UK;HP Labs, Bristol, UK;HP Labs, Bristol, UK;Birmingham University;Birmingham University
Venue:
ACM SIGOPS Operating Systems Review
Year:
2009

Citing 9
Cited 2

Encryption and Key management in a SAN

SISW '02 Proceedings of the First International IEEE Security in Storage Workshop
Xen and the art of virtualization

SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
Terra: a virtual machine-based platform for trusted computing

SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
SoftUDC: A Software-Based Data Center for Utility Computing

Computer
Enabling shared audit data

International Journal of Information Security - Special issue on SC 2003
Trusted Computing (Professional Applications of Computing) (Professional Applications of Computing)

Trusted Computing (Professional Applications of Computing) (Professional Applications of Computing)
Towards automated provisioning of secure virtualized networks

Proceedings of the 14th ACM conference on Computer and communications security
Improving Xen security through disaggregation

Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Secure Virtual Disk Images for Grid Computing

APTC '08 Proceedings of the 2008 Third Asia-Pacific Trusted Infrastructure Technologies Conference

Specification and Standardization of a Java Trusted Computing API

Software—Practice & Experience
Virtualization: Issues, security threats, and solutions

ACM Computing Surveys (CSUR)

Quantified Score

Hi-index	0.00

Visualization

Abstract

Virtualization brings exibility to the data center and enables separations allowing for better security properties. For these security properties to be fully utilized, virtual machines need to be able to connect to secure services such as networking and storage. This paper addresses the problems associated with managing the cryptographic keys upon which such services rely by ensuring that keys remain within the trusted computing base. Here we describe a general architecture for managing keys tied to the underlying virtualized systems, with a specific example given for secure storage.