Security and trust preserving inter‐ and intra‐cloud VM migrations. Issue 2 (17th February 2020)

• Record Type: Journal Article
• Authors: Aslam, Mudassar; Bouget, Simon; Raza, Shahid
• Other Names: Meng Weizhi guestEditor.; Cofta Piotr guestEditor.; Grandison Tyrone W.A. guestEditor.
• Is Part Of: International journal of network management. Volume 31:Issue 2(2021)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2020-02-17
• Subjects: Computer networks -- Management -- Periodicals; 004.6
• DOI: 10.1002/nem.2103
• Languages: English
• ISSNs: 1055-7148

Abstract

Summary: This paper focus on providing a secure and trustworthy solution for virtual machine (VM) migration within an existing cloud provider domain, and/or to the other federating cloud providers. The infrastructure‐as‐a‐service (IaaS) cloud service model is mainly addressed to extend and complement the previous Trusted Computing techniques for secure VM launch and VM migration case. The VM migration solution proposed in this paper uses a Trust_Token based to guarantee that the user VMs can only be migrated and hosted on a trustworthy and/or compliant cloud platforms. The possibility to also check the compliance of the cloud platforms with the pre‐defined baseline configurations makes our solution compatible with an existing widely accepted standards‐based, security‐focused cloud frameworks like FedRAMP. Our proposed solution can be used for both inter‐ and intra‐cloud VM migrations. Different from previous schemes, our solution is not dependent on an active (on‐line) trusted third party; that is, the trusted third party only performs the platform certification and is not involved in the actual VM migration process. We use the Tamarin solver to realize a formal security analysis of the proposed migration protocol and show that our protocol is safe under the Dolev‐Yao intruder model. Finally, we show how our proposed mechanisms fulfill major security and trust requirements for secure VM migration in cloud environments. Abstract : This paper presents a trustworthy inter‐ and intra‐cloud virtual machine (VM) migration mechanism for a single or federating cloud provider domains. The solution introduces a Trust_Token to guarantee that the user VMs can only be migrated and hosted on a trustworthy and/or compliant cloud platforms.