A Security-Awareness Virtual Machine Management Scheme Based on Chinese Wall Policy in Cloud Computing

Abstract EN

Cloud computing gets increasing attention for its capacity to leverage developers from infrastructure management tasks.

However, recent works reveal that side channel attacks can lead to privacy leakage in the cloud.

Enhancing isolation between users is an effective solution to eliminate the attack.

In this paper, to eliminate side channel attacks, we investigate the isolation enhancement scheme from the aspect of virtual machine (VM) management.

The security-awareness VMs management scheme (SVMS), a VMs isolation enhancement scheme to defend against side channel attacks, is proposed.

First, we use the aggressive conflict of interest relation (ACIR) and aggressive in ally with relation (AIAR) to describe user constraint relations.

Second, based on the Chinese wall policy, we put forward four isolation rules.

Third, the VMs placement and migration algorithms are designed to enforce VMs isolation between the conflict users.

Finally, based on the normal distribution, we conduct a series of experiments to evaluate SVMS.

The experimental results show that SVMS is efficient in guaranteeing isolation between VMs owned by conflict users, while the resource utilization rate decreases but not by much.