VMGuard: An Integrity Monitoring System for Management Virtual Machines

Haifeng Fang, Yiqiang Zhao, Hongyong Zang, H. Howie Huang, Ying Song, Yuzhong Sun, Zhiyong Liu
2010 2010 IEEE 16th International Conference on Parallel and Distributed Systems  
A cloud computing provider can dynamically allocate virtual machines (VM) based on the needs of the customers, while maintaining the privileged access to the Management Virtual Machine that directly manages the hardware and supports the guest VMs. The customers must trust the cloud providers to protect the confidentiality and integrity of their applications and data. However, as the VMs from different customers are running on the same host, an attack to the management virtual machine will
more » ... lead to the compromise of the guest VMs. Therefore, it is critical for a cloud computing system to ensure the trustworthiness of management VMs. To this end, we propose VMGuard, an integrity monitoring and detecting system for management virtual machines in a distributed environment. VMGuard utilizes a special VM, GuardDomain, which runs on each physical node to monitor the co-resident management VMs. The integrity measurements collected by the GuardDomains are sent to the VMGuard server for safe store and independent analysis. The experimental evaluation of a Xen-based prototype shows that VMGuard can quickly detect the rootkit attacks while the performance overhead is low.
doi:10.1109/icpads.2010.44 dblp:conf/icpads/FangZZHSSL10 fatcat:5lihqkj4ubhwfbygnptrvutbeq