Abstract:Cloud computing provides users with cost-effective on-demand resource sharing, but the shared resources also creates additional security risks due to co-location with malicious tenants. In addition to static defensive technologies, Virtual Machine (VM) migration, a type of Moving Target Defense (MTD) technique, provides an alternative solution to mitigate co-resident attacks by dynamically migrating services/tasks among various servers. Although significant progress has been made in this area, critical gaps remain regarding the quantification of these techniques' synergistic effectiveness in cloud computing, as previous research focused on either evaluating the defensive capability of MTD or on examining the characteristics of static strategies. In this paper, we aim to use analytical modeling techniques to quantitatively evaluate the synergistic effectiveness of integrating MTD with VM allocation policies. We designed a synergistically defensive architecture and proposed a Stochastic Reward Net (SRN) model to describe the execution and attacking processes of tasks migrating among multiple servers under three commonly used allocation policies. Moreover, experiments were implemented using SimPy to verify the analytical results obtained from the SRN model and to broaden the evaluation scope. Our comprehensive assessment, using both SRN and experiments, evaluates the defensive capacity and corresponding features for different scenarios. The obtained simulation results were approximate, with an error rate of less than 3.40 %, reflecting the reliability of our methods. Several defensive suggestions were further summarized based on the evaluation.

Review on Co-residency Security Issues of Virtual Machines in Cloud Computing

A Secure Virtual Machine Deployment Strategy to Reduce Co-residency in Cloud

A Virtual Machine Migration Strategy Based on the Relevance of Services Against Side-Channel Attacks

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Analysis of Key Technologies on Cloud Computing Security

A Service Relevance Based Virtual Machine Migration Strategy in Cloud.

Secure Virtual Machine Placement and Load Balancing Algorithms with High Efficiency.

Review of Cloud Computing Security

Multilateral Security Architecture for Virtualization Platform in Multi-Tenancy Cloud Environment

Defending against Co-residence Attack in Energy-Efficient Cloud: An Optimization based Real-time Secure VM Allocation Strategy

Analysing Virtual Machine Security in Cloud Systems

On Data and Virtualization Security Risks and Solutions of Cloud Computing.

An SRN-Based Model for Assessing Co-Resident Attack Mitigation in Cloud with VM Migration and Allocation Policies*

A Novel Agent-Based Framework in Bridge-Mode Hypervisors of Cloud Security.

A Survey on Security Challenges of Virtualization Technology in Cloud Computing

A Placement Vulnerability Study in Multi-tenant Public Clouds

High Performance and Security in Cloud Computing

Live Migration of Multiple Virtual Machines with Resource Reservation in Cloud Computing Environments

Probing the Scheduling Algorithms in the Cloud Based on OpenStack.

SeLance: Secure Load Balancing of Virtual Machines in Cloud

VIRTUALIZATION SECURITY: A GATEWAY TO SECURE CLOUD COMPUTING