Abstract:Cloud computing has completely changed IT (information technology) by providing IT resources as services on the internet. However, certain types of attacks, such as interdependency attacks, impede its wide adoption. With the latter, an attacker who succeeds in compromising the VM of a user can traverse the hypervisor to launch an attack on the VM(s) of other users on the same hypervisor. Unfortunately, we note a lack of secure and performant allocation policies against this problem. Existing policies focus on security but ignore other factors, including workload balance and energy consumption, which are vital for commercial cloud platforms. In this context, we propose different allocation policies for choosing the datacenter server to which we allocate a new virtual machine. These policies aim to minimize the interdependence of different users' VMs while keeping the system performant regarding workload balance and/or power consumption. By default, our allocation policies treat all legitimate users as attackers and host their virtual machines according to their efficiency and coverage. We first design a secure and balanced solution that increases workload balance to prevent the servers from being overused. Afterward, we propose an algorithm that addresses security, power consumption, and workload balance objectives simultaneously. Based on our simulation results, our solutions perform better than existing algorithms regarding security, workload balance, and power consumption. The balanced solution reduces the chance of an attacker to zero and increases workload balance linearly. In other words, the workload balance is between , and it utilizes slightly more hosts than existing proposals, with gains between . Although our final proposal is less secure than previous algorithms, it performs better, so it has a good workload balance ( ) and consumes less energy.

Secure Virtual Machine Placement and Load Balancing Algorithms with High Efficiency.

A Virtual Machine Migration Strategy Based on the Relevance of Services Against Side-Channel Attacks

A Service Relevance Based Virtual Machine Migration Strategy in Cloud.

Defending against Co-residence Attack in Energy-Efficient Cloud: An Optimization based Real-time Secure VM Allocation Strategy

A Survey on Load Balancing Algorithms for VM Placement in Cloud Computing.

A Survey on Load Balancing Algorithms for Virtual Machines Placement in Cloud Computing

DFA-VMP: an Efficient and Secure Virtual Machine Placement Strategy under Cloud Environment.

Mitigating Cloud Co-Resident Attacks Via Grouping-Based Virtual Machine Placement Strategy.

SeLance: Secure Load Balancing of Virtual Machines in Cloud

Affinity and Conflict-Aware Placement of Virtual Machines in Heterogeneous Data Centers.

A Secure Virtual Machine Deployment Strategy to Reduce Co-residency in Cloud

Alleviating the Impact of Abnormal Events Through Multi-Constrained VM Placement.

Agent-Based Virtual Machine Migration for Load Balancing and Co-Resident Attack in Cloud Computing

Interdependency Attack-Aware Secure and Performant Virtual Machine Allocation Policies With Low Attack Efficiency and Coverage

A Security-Awareness Virtual Machine Placement Scheme in the Cloud

Poster: Lbms: Load Balancing Based On Multilateral Security In Cloud

AAGA: Affinity-Aware Grouping for Allocation of Virtual Machines

Co-residence Based Data Vulnerability Vs. Security in Cloud Computing System with Random Server Assignment

A Reliability and Robustness-driven Approach for Optimizing VM Placement in Clouds

A Security-Awareness Virtual Machine Management Scheme Based on Chinese Wall Policy in Cloud Computing.

Smart VM Co-Scheduling with the Precise Prediction of Performance Characteristics