Secure Live Virtual Machines Migration: Issues and Solutions
Secure Live Virtual Machines Migration: Issues and Solutions
复制标题
DOI：
10.1109/waina.2014.35
复制
发表时间：
2014-05
期刊：
影响因子：
--
通讯作者：
Mahdi Aiash;G. Mapp;O. Gemikonakli
中科院分区：
文献类型：
--
作者：
Mahdi Aiash;G. Mapp;O. Gemikonakli
近年来，在虚拟环境中运行网络密集型应用，如Internet服务器和基于云的服务，在同一机器上运行的多个虚拟机(VM)共享机器的物理和网络资源，这是一个巨大的趋势。在这样的环境中，虚拟机监控器(VMM)根据CPU、内存、存储、网络和I/O设备来虚拟化机器的资源，以允许运行在不同VM上的多个操作系统并发地操作和访问网络。虚拟化的一个关键功能是实时迁移(LM)，它允许在不中断虚拟机中运行的服务的情况下将虚拟机从一台物理服务器转移到另一台物理服务器。实时迁移促进了工作负载平衡、容错、在线系统维护、虚拟机整合等。然而，实时迁移仍处于实施的早期阶段，其安全性还有待评估。实时迁移的安全问题是IT行业采用它的一个主要因素。因此，本文使用X.805安全标准来研究针对实时虚拟机迁移的攻击。该分析强调了威胁的主要来源，并提出了应对这些威胁的方法。本文还对文献中保障活体迁徙的不同方案进行了调查和比较。
In recent years, there has been a huge trend towards running network intensive applications, such as Internet servers and Cloud-based service in virtual environment, where multiple virtual machines (VMs) running on the same machine share the machine's physical and network resources. In such environment, the virtual machine monitor (VMM) virtualizes the machine's resources in terms of CPU, memory, storage, network and I/O devices to allow multiple operating systems running in different VMs to operate and access the network concurrently. A key feature of virtualization is live migration (LM) that allows transfer of virtual machine from one physical server to another without interrupting the services running in virtual machine. Live migration facilitates workload balancing, fault tolerance, online system maintenance, consolidation of virtual machines etc. However, live migration is still in an early stage of implementation and its security is yet to be evaluated. The security concern of live migration is a major factor for its adoption by the IT industry. Therefore, this paper uses the X.805 security standard to investigate attacks on live virtual machine migration. The analysis highlights the main source of threats and suggests approaches to tackle them. The paper also surveys and compares different proposals in the literature to secure the live migration.