End-to-end security architecture for cloud computing environments

摘要: Since several years the virtualization of infrastructures became one major research challenges, consuming less energy while delivering new services. However, many attacks hinder global adoption Cloud computing. Self-protection has recently raised growing interest as possible element answer to cloud computing infrastructure protection challenge. Yet, previous solutions fall at last hurdle they overlook key features cloud, by lack flexible security policies, cross-layered defense, multiple control granularities, and open architectures. This thesis presents VESPA, a self-protection architecture for infrastructures. Flexible coordination between loops allows enforcing rich spectrum strategies. A multi-plane extensible also enables simple integration commodity components.Recently, some most powerful against target Virtual Machine Monitor (VMM). In case, main attack vector is poorly confined device driver. Current architectures offer no such attacks. proposes an altogether different approach presenting KungFuVisor, derived from framework build self-defending hypervisors. The result very architecture, enabling enforce dynamically remediation actions over parts VMM, facilitating defense strategy administration. We showed application three scheme: virus infection, mobile clouds hypervisor drivers. Indeed VESPA can enhance