An Access Control Model for Preventing Virtual Machine Hopping Attack

• Main Authors: Ying Dong, Zhou Lei
• Format: Article
• Language: English
• Published: MDPI AG 2019-03-01
• Series: Future Internet
• Subjects: cloud security; virtual machine hopping; BLP model; Biba model; PVMH model
• Online Access: https://www.mdpi.com/1999-5903/11/3/82

As a new type of service computing model, cloud computing provides various services through the Internet. Virtual machine (VM) hopping is a security issue often encountered in the virtualization layer. Once it occurs, it directly affects the reliability of the entire computing platform. Therefore, we have thoroughly studied the virtual machine hopping attack. In addition, we designed the access control model PVMH (Prevent VM hopping) to prevent VM hopping attacks based on the BLP model and the Biba model. Finally, we implemented the model on the Xen platform. The experiments demonstrate that our PVMH module succeeds in preventing VM hopping attack with acceptable loss to virtual machine performance.