Securing Cloud Hypervisors: A Survey of the Threats, Vulnerabilities, and Countermeasures

Barrowclough, John Patrick; Asif, Rameez

Abstract

The exponential rise of the cloud computing paradigm has led to the cybersecurity concerns, taking into account the fact that the resources are shared and mediated by a ‘hypervisor’ that may be attacked and user data can be compromised or hacked. In order to better define these threats to which a cloud hypervisor is exposed, we conducted an in-depth analysis and highlighted the security concerns of the cloud. We basically focused on the two particular issues, i.e., (a) data breaches and (b) weak authentication. For in-depth analysis, we have successfully demonstrated a fully functional private cloud infrastructure running on CloudStack for the software management and orchestrated a valid hack. We analyzed the popular open-source hypervisors, followed by an extensive study of the vulnerability reports associated with them. Based on our findings, we propose the characterization and countermeasures of hypervisor’s vulnerabilities. These investigations can be used to understand the potential attack paths on cloud computing and Cloud-of-Things (CoT) applications and identify the vulnerabilities that enabled them.

Citation

Barrowclough, J. P., & Asif, R. (2018). Securing Cloud Hypervisors: A Survey of the Threats, Vulnerabilities, and Countermeasures. Security and Communication Networks, 2018, 1-20. https://doi.org/10.1155/2018/1681908

• Journal Article Type: Article
• Acceptance Date: May 10, 2018
• Online Publication Date: Jun 11, 2018
• Publication Date: Jun 11, 2018
• Deposit Date: Jul 12, 2018
• Publicly Available Date: Jul 13, 2018
• Journal: Security and Communication Networks
• Print ISSN: 1939-0114
• Electronic ISSN: 1939-0122
• Publisher: Wiley
• Peer Reviewed: Peer Reviewed
• Volume: 2018
• Pages: 1-20
• DOI: https://doi.org/10.1155/2018/1681908
• Keywords: Cloud Computing, Hypervisor, Encryption, Network Security, Data Networks.
• Public URL: http://researchrepository.napier.ac.uk/Output/1202786
• Contract Date: Jul 12, 2018