Outlier: Enabling Effective Measurement of Hypervisor Code Integrity With Group Detection

Autor:	Chuliang Weng, Jianan Gu, Yukun Ma, Beilei Zheng
Rok vydání:	2022
Předmět:	Computer science business.industry Hypervisor Cloud computing Attack surface computer.software_genre Virtualization Outlier Scalability Operating system Overhead (computing) Anomaly detection Electrical and Electronic Engineering business computer
Zdroj:	IEEE Transactions on Dependable and Secure Computing. 19:3686-3698
ISSN:	2160-9209 1545-5971
Popis:	Virtualization brings the benefits of promoted utilization and scalability to the multi-tenant cloud platforms. However, the hypervisor, as one of the foundations in virtualization, is challenging to survive under various malicious attacks due to its large attack surface. This paper presents a novel group detection framework for the hypervisor code integrity, called Outlier. A large-scale cloud is split into individual Outlier detection groups. In an Outlier group, each host contains two parts. One is a distributed detection protocol, called Co-protocol, and the other is a detection interface, called Checker. The Co-protocol constructs trust for the integrity detection within an Outlier group. With the Co-protocol, each Checker conducts reliable integrity detection on the hypervisor code, and then the potential outlier host is perceived. We implement our Outlier prototype on the Xen hypervisor and evaluate its overhead. Experiments show that the introduction of the Outlier has few impacts on the performance of the virtualized systems.
Databáze:	OpenAIRE
Externí odkaz:	https://explore.openaire.eu/search/publication?articleId=doi_________::219b9454d4b25aa56e81f57a2f10ea55 https://doi.org/10.1109/tdsc.2021.3104900 Zobrazit plný text záznamu