Security for the cloud infrastructure: trusted virtual data center implementation

  • Authors:
  • S. Berger;R. Cáceres;K. Goldman;D. Pendarakis;R. Perez;J. R. Rao;E. Rom;R. Sailer;W. Schildhauer;D. Srinivasan;S. Tal;E. Valdez

  • Affiliations:
  • IBM Research Division, Thomas J. Watson Research Center, Hawthorne, New York;AT&T Labs, Park, New Jersey;IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, New York;IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, New York;IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, New York;IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, New York;IBM Research Division, Haifa Research Labs, Haifa, Israel;IBM Research Division, Thomas J. Watson Research Center, Hawthorne, New York;IBM Systems and Technology Group, North Carolina;IBM Systems and Technology Group, North Carolina;IBM Research Division, Haifa Research Labs, Haifa, Israel;IBM Research Division, Thomas J. Watson Research Center, Hawthorne, New York

  • Venue:
  • IBM Journal of Research and Development
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

The trusted virtual data center (TVDc) is a technology developed to address the need for strong isolation and integrity guarantees in virtualized environments. In this paper, we extend previous work on the TVDc by implementing controlled access to networked storage based on security labels and by implementing management prototypes that demonstrate the enforcement of isolation constraints and integrity checking. In addition, we extend the management paradigm for the TVDc with a hierarchical administration model based on trusted virtual domains and describe the challenges for future research.