作者: Roland Schwarzkopf , Matthias Schmidt , Christian Strack , Bernd Freisleben
关键词:
摘要: A common approach in Infrastructure-as-a-Service Clouds or virtualized Grid computing is to provide virtual machines customers execute their software remotely. While giving full super user permissions eases the installation and use of a customer's software, it may lead security issues. Providers usually delegate task keeping up date customer, while customer expects provider perform this task. Consequently, large number (either running dormant) are not patched against latest vulnerabilities. The presented paper deals with problem by helping users as well providers keep date. Prior update step, crucial know which actually outdated. seems trivial, developing solution that takes care multiple, different repositories identifies correct packages challenging Update Checker outdated machines, even if installed repositories. presents design, implementation an experimental evaluation approach.