A VMM-based intrusion prevention system in cloud computing environment

摘要: With the development of information technology, cloud computing becomes a new direction grid computing. Cloud is user-centric, and provides end users with leasing service. Guaranteeing security user data needs careful consideration before widely applied in business. Virtualization approach to solve traditional problems can be taken as underlying infrastructure In this paper, we propose an intrusion prevention system, VMFence, virtualization-based environment, which used monitor network flow file integrity real time, provide defense protection well. Due dynamicity virtual machine, detection process varies state machine. The transition machine described via Definite Finite Automata (DFA). We have implemented VMFence on open-source platform--Xen. experimental results show our proposed method effective it brings acceptable overhead.