DMCA
Enabling secure vm-vtpm migration in private clouds
Cached
| Venue: | in ACSAC 2011 |
| Citations: | 7 - 0 self |
BibTeX
@INPROCEEDINGS{Danev_enablingsecure,
author = {Boris Danev and Ramya Jayaram Masti and Ghassan O. Karame and Srdjan Capkun},
title = {Enabling secure vm-vtpm migration in private clouds},
booktitle = {in ACSAC 2011},
year = {},
pages = {187--196}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
The integration of Trusted Computing technologies into vir-tualized computing environments enables the hardware-ba-sed protection of private information and the detection of malicious software. Their use in virtual platforms, however, requires appropriate virtualization of their main component, the Trusted Platform Module (TPM) by means of virtual TPMs (vTPM). The challenge here is that the use of TPM virtualization should not impede classical platform processes such as virtual machine (VM) migration. In this work, we consider the problem of enabling se-cure migration of vTPM-based virtual machines in private clouds. We detail the requirements that a secure VM-vTPM migration solution should satisfy in private virtualized en-vironments and propose a vTPM key structure suitable for VM-vTPM migration. We then leverage on this structure to construct a secure VM-vTPM migration protocol. We show that our protocol provides stronger security guarantees when compared to existing solutions for VM-vTPM migra-tion. We evaluate the feasibility of our scheme via an imple-mentation on the Xen hypervisor and we show that it can be directly integrated within existing hypervisors. Our Xen-based implementation can be downloaded as open-source software. Finally, we discuss how our scheme can be ex-tended to support live-migration of vTPM-based VMs. 1.
Keyphrases
private cloud secure vm-vtpm migration virtual machine private information xen-based implementation security guarantee hardware-ba-sed protection trusted computing technology trusted platform module vtpm-based virtual machine appropriate virtualization secure vm-vtpm migration protocol virtual tpms tpm virtualization open-source software secure vm-vtpm migration solution vm-vtpm migra-tion virtual platform xen hypervisor se-cure migration vtpm key structure classical platform vm-vtpm migration private virtualized en-vironments vtpm-based vms malicious software main component
