Update Checker: Increasing Virtual Machine Security in Cloud Environments

Abstract:

A common approach in Infrastructure-as-a-Service Clouds or virtualized Grid computing is to provide virtual machines to customers to execute their software on remote resources. Giving full superuser permissions to customers eases the installation and use of user software, but it may lead to security issues. The providers usually delegate the task of keeping virtual machines up to date to the customers, while the customers expect the providers to perform this task. Consequently, a large number of virtual machines (either running or dormant) are not patched against the latest software vulnerabilities. The approach presented in this article deals with these problems by helping users as well as providers to keep virtual machines up to date. Prior to the update step, it is crucial to know which software is actually outdated or affected by remote security vulnerabilities. While these tasks seem to be straight forward, developing a solution that handles multiple software repositories from different vendors and identifies the correct packages is a challenging task. The Update Checker presented in this article identifies outdated software packages in virtual machines, regardless if the virtual machine is running or dormant on disk. The proposed Online Penetration Suite performs pre-rollout scans of virtual machines for security vulnerabilities using established techniques and prevents execution of flawed virtual machines.

• Periodical: Applied Mechanics and Materials (Volumes 513-517)
• Pages: 1268-1273
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.513-517.1268
• Online since: February 2014
• Authors: R. Raghavendran*, B. Ragupathi
• Keywords: Cloud Environments, Update Checker, Virtual Machine Security

References

[1] Armbrust M, Fox A, Griffith R, Joseph A (2009) Above the Clouds: A Berkeley View of Cloud Computing, Technical Report UCBEECS200928 53(UCB/EECS-2009-28).

[2] EECS Department University of California Berkeley.

[3] Smith M, Schmidt M, Fallenbeck N, Dörnemann T, Schridde C, Freisleben B (2009) Secure On-demand Grid Computing. J Future Generation Comput Syst 25(3): 315-325 Publisher Full Text.

DOI: 10.1016/j.future.2008.03.002

[4] Garfinkel T, Rosenblum M (2005) When Virtual is Harder than Real: Security Challenges in Virtual Machine Based Computing. 10th Workshop on Hot Topics in Operating Systems. 121-126.

[5] Reimer D, Thomas A, Ammons G, Mummert T, Alpern B, Bala V (2008).

[6] Schwarzkopf R, Schmidt M, Fallenbeck N, Freisleben B (2009).

[7] Canonical Inc (2011) Ubuntu Advantage Landscape.

[8] http: /www. canonical. com/enterprise-services/ubuntu-advantage/landscape webcite.

[9] Schwarzkopf R, Schmidt M, Strack C, Freisleben B (2011).

[10] ENISA European Network and Information Security Agency (2009) Cloud Computing Risk Assessment.

[11] http: / / www. enisa. europa. eu/ act/ rm/ files/ deliverables/ cloud-computing-risk-assessment webcite.

[12] Potter S, Nieh J (2005) AutoPod: Unscheduled System Updates with Zero Data Loss. Autonomic Computing, International Conference on. 367-368.

DOI: 10.1109/icac.2005.16

[13] Sapuntzakis C, Brumley D, Chandra R, Zeldovich N, Chow J, Lam MS, Rosenblum M (2003) Virtual.