공격정보 수집을 이용한 클라우드 서비스의 안전성 향상에 관한 연구
A Study on Improvement Stability of Cloud Service using Attack Information Collection
1
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
Cloud computing is a form which provides IT resources through network and pays the cost as much as you used. And it has advantages that it doesn’t need to construct infrastructure and can be offered a variety of environments. The main core of these computing is virtualization technology. Security mechanism about attacks using vulnerabilities of virtualization technology isn’t provided right and existing security tools can’t be applied as it is. In this paper, we proposed honeyVM structure that can cope actively by collecting the information about attacks using virtualization vulnerability. Mamdani fuzzy inference is used to adjust dynamically the number of formed honeyVM depending on the load of system. Security structure to protect actual virtual machine from attacks and threats is proposed. The performance of the proposed structure in this paper measured occurred attack detection rate and resource utilization rate.
Abstract
Cloud computing is a form which provides IT resources through network and pays the cost as much as you used. And it has advantages that it doesn’t need to construct infrastructure and can be offered a variety of environments. The main core of these computing is virtualization technology. Security mechanism about attacks using vulnerabilities of virtualization technology isn’t provided right and existing security tools can’t be applied as it is. In this paper, we proposed honeyVM structure that can cope actively by collecting the information about attacks using virtualization vulnerability. Mamdani fuzzy inference is used to adjust dynamically the number of formed honeyVM depending on the load of system. Security structure to protect actual virtual machine from attacks and threats is proposed. The performance of the proposed structure in this paper measured occurred attack detection rate and resource utilization rate.
참고문헌 (10)
- K. Dahbur, "A survey of risks, threats and vulnerabilities in cloud computing", Preceedings of the 2011 International Conference on Intelligent Semantic Web-Services and Applications, pp.1~6 (2011)
- W. Cin, "Research on the Intrusion Detection Mechanism based on Cloud Computing", Computing, pp.125~128 (2010)
- 정성민, "효율적인 클라우드 컴퓨팅을 위한 가상장비 할당 방법", (사)디지털산업정보학회 논문지, 8(1), pp.73~79 (2012), (사)디지털산업정보학회
- 주승환, "한국형 네트워크 보안 시스템 성능 평가 방법론 설계", (사)디지털산업정보학회 논문지, 7(3), pp.97~105 (2011), (사)디지털산업정보학회
- S. Subashini, "A survey on security issues in service delivery models of cloud computing", Journal of Network and Computer Applications, 43(1), pp.1~11 (2011)
- U. Tupakula, "Intrusion Detection Techniques for Infrastructure as a Service Cloud", 2011 IEEE 9th International Conference on Depedable, Autonomic and Secure Computing, 2011, pp.744~751 (2011)
- 엄정호, "네트워크 취약성 분석을 위한 확장된 사이버 공격 트리에 관한 연구", (사)디지털산업정보학회 논문지, 6(3), pp.49~57 (2010), (사)디지털산업정보학회
- F. Sabahi, "Secure Virtualization for Cloud Environment using Hypervisor-based Technology", Int. Journal of Machine Learning and Computing, 2(1) (2012)
- S. Bahram, "DKSM: Subverting Virtual Machine Introspection for Fun and Profilt", Reliable Distributed Systems, 2010 29th IEEE Symposium on, pp.82~91 (2010)
- T. Mather, "“Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance" (2009), O’reilly media