title: A security-awareness virtual machine management scheme based on Chinese wall policy in cloud computing.
abstract: Cloud computing gets increasing attention for its capacity to leverage developers from infrastructure management tasks. However, recent works reveal that side channel attacks can lead to privacy leakage in the cloud. Enhancing isolation between users is an effective solution to eliminate the attack. In this paper, to eliminate side channel attacks, we investigate the isolation enhancement scheme from the aspect of virtual machine (VM) management. The security-awareness VMs management scheme (SVMS), a VMs isolation enhancement scheme to defend against side channel attacks, is proposed. First, we use the aggressive conflict of interest relation (ACIR) and aggressive in ally with relation (AIAR) to describe user constraint relations. Second, based on the Chinese wall policy, we put forward four isolation rules. Third, the VMs placement and migration algorithms are designed to enforce VMs isolation between the conflict users. Finally, based on the normal distribution, we conduct a series of experiments to evaluate SVMS. The experimental results show that SVMS is efficient in guaranteeing isolation between VMs owned by conflict users, while the resource utilization rate decreases but not by much.
authors.affiliation: School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China ; Shaanxi Province Key Laboratory of Computer Network, Xi'an Jiaotong University, Xi'an 710049, China.
authors.forename: Si
authors.identifier: 0000-0002-5566-7756
authors.initials: S
authors.lastname: Yu
authors.affiliation: School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China ; Shaanxi Province Key Laboratory of Computer Network, Xi'an Jiaotong University, Xi'an 710049, China.
authors.forename: Xiaolin
authors.initials: X
authors.lastname: Gui
authors.affiliation: School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China ; Shaanxi Province Key Laboratory of Computer Network, Xi'an Jiaotong University, Xi'an 710049, China.
authors.forename: Jiancai
authors.initials: J
authors.lastname: Lin
authors.affiliation: School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China ; Shaanxi Province Key Laboratory of Computer Network, Xi'an Jiaotong University, Xi'an 710049, China.
authors.forename: Feng
authors.initials: F
authors.lastname: Tian
authors.affiliation: School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China ; Shaanxi Province Key Laboratory of Computer Network, Xi'an Jiaotong University, Xi'an 710049, China ; Xi'an Politics Institute, Xi'an 710049, China.
authors.forename: Jianqiang
authors.initials: J
authors.lastname: Zhao
authors.affiliation: School of Electronics and Information Engineering, Xi'an Jiaotong University, Xi'an 710049, China ; Shaanxi Province Key Laboratory of Computer Network, Xi'an Jiaotong University, Xi'an 710049, China.
authors.forename: Min
authors.initials: M
authors.lastname: Dai
mesh_terms: D016494:Computer Security; D016247:Information Storage and Retrieval / Q000379:methods*