Trusted Launch of Virtual Machine Instances in Public IaaS Environments [chapter]

Nicolae Paladi, Christian Gehrmann, Mudassar Aslam, Fredric Morenius
2013 Lecture Notes in Computer Science  
Cloud computing and Infrastructure-as-a-Service (IaaS) are emerging and promising technologies, however their adoption is hampered by data security concerns. At the same time, Trusted Computing (TC) is experiencing an increasing interest as a security mechanism for IaaS. In this paper we present a protocol to ensure the launch of a virtual machine (VM) instance on a trusted remote compute host. Relying on Trusted Platform Module operations such as binding and sealing to provide integrity
more » ... ees for clients that require a trusted VM launch, we have designed a trusted launch protocol for VM instances in public IaaS environments. We also present a proof-of-concept implementation of the protocol based on OpenStack, an open-source IaaS platform. The results provide a basis for the use of TC mechanisms within IaaS platforms and pave the way for a wider applicability of TC to IaaS security.
doi:10.1007/978-3-642-37682-5_22 fatcat:caz3fb3ldbcoxbja3aagtnqrvu