Security architecture for virtual machines

Authors:
Udaya Tupakula;Vijay Varadharajan;Abhishek Bichhawat
Affiliations:
Information & Networked Systems Security Research, Department of Computing, Macquarie University, Sydney, Ausralia;Information & Networked Systems Security Research, Department of Computing, Macquarie University, Sydney, Ausralia;Department of Electronics and Computer Engineering, IIT Roorkee, India
Venue:
ICA3PP'11 Proceedings of the 11th international conference on Algorithms and architectures for parallel processing - Volume Part I
Year:
2011

Citing 5
Cited 0

Inside the Slammer Worm

IEEE Security and Privacy
The Architecture of Virtual Machines

Computer
Vigilante: end-to-end containment of internet worms

Proceedings of the twentieth ACM symposium on Operating systems principles
VMM-based hidden process detection and identification using Lycosid

Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Conficker and beyond: a large-scale empirical study

Proceedings of the 26th Annual Computer Security Applications Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose security architecture based on virtual machine monitor to efficiently deal with attacks on virtual machines. We will show that our model is capable of detecting suspicious processes running in the virtual machine, can detect and prevent different types of attacks including zero day attacks by monitoring the virtual machine traffic and the processes that are generating or receiving the traffic. The architecture also makes use of sharing information about the suspicious behaviour among multiple Intrusion detection systems deployed in different virtual machine monitors. We describe the implementation of the proposed architecture and present a detailed analysis of how our architecture can be used to detect zero day attacks.