Efficient Methodologies For Virtualization Security In Cloud Computing

Abstract

newline Cloud computing is a computing paradigm where services (e.g., networks, servers, storage, applications, and services) are delivered and accessed over a network in a distributed environment. It enables ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider s interaction. Cloud users host the applications and store data in cloud provider s domain. Cloud has been essential technology for millions of users to provide and utilize the services through virtual machines. Virtual Machine provide the facilities of actual machine such as computation power and storage. Storage and processing of sensitive information using Virtual Machines need to be secured to overcome the threats. Hence the proposed research work explores and implements efficient methodologies for providing security to virtual machines in the cloud. Security is the major concern in the cloud environment to take care of security parameters Integrity, Confidentiality, Reliability and Availability. In this thesis, we propose various techniques to achieve Security for Virtual Machines. These techniques include Trust based Methods, Software Defined Network Framework and cryptographic algorithms. We show through simulations that our approach is able to mitigate to the various threats. The efficiency of the various methods is demonstrated and compared with the existing methodologies. iii Building trust between Cloud service provider and Cloud user is an essential factor for receiving the secured services during the Virtual machine deployment. Hybrid trust model is proposed, to find the trusted Cloud service providers, so that the users are deployed in secured environment. Virtual machine once registered they need to be authenticated before authorizing the service. Virtual machine access is granted after verification of user s credentials using multistage authentication approach.