Enhancing Security of IaaS Cloud with Fraternal Security Cooperation Between Cloud Platform and Virtual Platform

摘要

IaaS cloud provides customers on-demand computational resources such as mass storage, virtual machine and network. However, it also raises some security problems that may hold back its widespread adoption. Since IaaS leverages many technologies, it inherits their security issues. For example, to provision and manage these computing resources, cloud platform and virtual platform are indispensable, but their security issues don't disappear, and even bring in some new security issues. What's more, their protection mechanisms are mutually independent and don't exploit each other's security advantages. That leaves security blind spots between them and can't guarantee the security of whole IaaS cloud. In this paper, we introduce security cooperation between cloud platform and virtual platform to address privacy and security issues of IaaS, and build secure IaaS cloud based on OpenNebula and Xen. Our approach leverages each component's security advantages and unites them into secure IaaS cloud, and experiments show it just incurs little performance overhead.