Extension of Research on Security as a Service for VMs in IaaS Platform. (22nd April 2020)

• Record Type: Journal Article
• Authors: Yin, Xueyuan; Chen, Xingshu; Chen, Lin; Li, Hui
• Other Names: Milutinovic Veljko Guest Editor.
• Is Part Of: Security and communication networks. Volume 2020(2020)
• Publication Date: 2020-04-22
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1155/2020/8538519
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract : To satisfy security concerns including infrastructure as a service (IaaS) security framework, security service access, network anomaly detection, and virtual machine (VM) monitoring, a layered security framework is built which composes of a physical layer, a virtualization layer, and a security management layer. Then, two security service access methods are realized for various security tools from the perspective of whether security tools generate communication traffic. One without generating traffic employs the VM traffic redirection technology and the other leveraged the mechanism of multitasking process access. Moreover, a stacked LSTM-based network anomaly detection agentless method is proposed, which has advantages of a higher ratio of precision and recall. Finally, a Hypervisor-based agentless monitoring method for VMs based on dynamic code injection is proposed, which has benefits of high security of the external monitoring method and good context analysis of the internal monitoring mechanism. The experimental results demonstrate the effectiveness of the proposed protection framework and the corresponding security mechanisms, respectively.