Visible to the public Hypervisor-Based Attestation of Virtual Environments

TitleHypervisor-Based Attestation of Virtual Environments
Publication TypeConference Paper
Year of Publication2016
AuthorsLauer, H., Kuntze, N.
Conference Name2016 Intl IEEE Conferences on Ubiquitous Intelligence Computing, Advanced and Trusted Computing, Scalable Computing and Communications, Cloud and Big Data Computing, Internet of People, and Smart World Congress (UIC/ATC/ScalCom/CBDCom/IoP/SmartWorld)
Keywordsattestation, cloud computing, Computer architecture, data privacy, Hardware, hypervisor-based attestation, Metrics, network function virtualization, NFV, private cloud, pubcrawl, Resiliency, scalable remote attestation scheme, Software, TPM device, Trusted Computing, virtual environments, Virtual machine monitors, virtual machines, Virtual machining, virtualisation, virtualization
AbstractSeveral years ago, virtualization technologies, hypervisors were rediscovered, today virtualization is used in a variety of applications. Network operators have discovered the cost-effectiveness, flexibility,, scalability of virtualizing network functions (NFV). However, in light of current events, security breaches related to platform software manipulation the use of Trusted Computing technologies has become not only more popular but increasingly viewed as mandatory for adequate system protection. While Trusted Computing hardware for physical platforms is currently available, widely used, analogous support for virtualized environments, virtualized platforms is rare, not suitable for larger scale virtualization scenarios. Current remote, deep attestation protocols for virtual machines can support a limited amount of virtual machines before the inefficient use of the TPM device becomes a crucial bottle neck. We propose a scalable remote attestation scheme suitable for private cloud, NFV use cases supporting large amounts of VM attestations by efficient use of the physical TPM device.
DOI10.1109/UIC-ATC-ScalCom-CBDCom-IoP-SmartWorld.2016.0067
Citation Keylauer_hypervisor-based_2016