Reading Assignment – 4. Hey, You, Get Off Of My Cloud:

Virtual Machine Security - Full Virtualization and Para Virtualization are two kinds of virtualization in a cloud computing paradigm. In full virtualization, entire hardware architecture is replicated virtually. However, in para virtualization, an operating system is modified so that it can be run concurrently with other operating systems. VMM Instance Isolation ensures that different instances running on the same physical machine are isolated from each other. However, current VMMs do not offer perfect isolation. Many bugs have been found in all popular VMMs that allow escaping from VM (Virtual machine). Vulnerabilities have been found in all virtualization software, which can be exploited by malicious users to bypass certain security restrictions or/and gain escalated privileges. ation software running on or being developed for cloud computing platforms presents different security challenges. It is depending on the delivery model of that particular platform. Flexibility, openness and public availability of cloud infrastructure are threats for application security. The existing vulnerabilities like Presence of trap doors, overflow problems, poor quality code etc. are threats for various attacks. Multi-tenant environment of cloud platforms, the lack of direct control over the environment, and access to data by the cloud platform vendor; are the key issues for using a cloud application. Preserving integrity of applications being executed in remote machines is an open

Technology changes in 2010 made way for new opportunities and competition for eLoanDocs. Technology vendors like Amazon began to offer cloud computing. Cloud computing is a non-platform dependency network of virtualization, service-oriented architecture, grid computing, and utility computing that allows manipulating, configuring, and accessing applications online (Cain et al., p. 765). There is no evidence of trail to the host server.

The extensive use of virtualization in implementing cloud infrastructure brings unique security concerns for customers or tenants of a public cloud service. Virtualization alters the relationship between the OS and underlying hardware - be it computing, storage or even networking. This introduces an additional layer -

Network address assignment – Each machine in the network based virtualization must be assigned a unique identifier. This is usually done via IP addresses assigned to the host machines and the main server. This could be manually configured or automatically. If automatically, the DHCP server a range of trusted IP’s could be provided for assignment when the machine is connecting to the network. Vendors that provide this are like

Customers can use cloud services through Internet. There can be various interaction between customers and cloud provider and the interactions can also be happening within the cloud providers which results in raising various security issues. The communication can be classified as (a)internal which happen between customer and cloud and (b)external which includes within cloud infrastructure.

Mobility – Like normal files, VMs can be copied over a network or carried on portable drive – posing a security risk. Unlike a conventional platform, where the trusted computing base (TCB) consists of the hardware and software stack, in a virtual environment, the TCB consists of all hosts a VM has run on. This, with a lack of history, can make it difficult to know which VMs have been exposed, copied etc. Worm and virus infections can also access every part of the VM irrespective of the protection in the guest OS.

Cloud technologies revolve heavily around virtual machines that reside on physical servers (Talbot, 2009). One physical server could be the home of a slew of virtual machines; should an attacker interrupt the normal operations of a physical server it could result in the inoperability of the virtual machines also. One of the techniques can be used is an attacker implanting a virtual machine on a physical server (Talbot, 2009). Once the

Abstract—Cloud Computing is a shared Information Technology infrastructure in which computing resources are shared among several systems that are connected together, using a network of servers. This type of resource sharing is facilitated by the Virtualization technology that enables multiple operating systems to run simultaneously on a single server (Multi-tenancy). Although this method provides optimization in hardware utilization, it may also result in unauthorized interactions which could lead to a number of risks such as jeopardizing the resource access control, denial of service attacks, Inter-VM (Virtual Machine) attacks and so on. In this paper, such possible challenges and risks and their corresponding effects will be studied, after which, several techniques and strategies will also be examined in order to tackle the Virtualization vulnerabilities. Possible architectural changes that can be made at the application and infrastructural levels will also be taken into consideration to enhance security in Cloud Computing.

A standout amongst the most essential issues identified with cloud security dangers is information trustworthiness. The information put away in the cloud may experience the ill effects of harm amid move operations from or to the distributed storage supplier. Cachinet al. give illustrations of the danger of assaults from both inside and outside the cloud supplier, for example, the as of late assaulted Red Hat Linux 's conveyance servers. Another case of ruptured information happened in 2009 in Google Docs, which set off the Electronic Privacy Information Center for the Federal Trade Commission to open an examination concerning Google 's Cloud Computing Services. Another case of a danger to information trustworthiness as of late happened in Amazon S3 where clients experienced information defilement.

The VMM and hypervisor software layer provides security challenges that should be addressed in order to protect resources and data within virtualization. For example, this additional layer of technology opens up new paths which an attacker can use to break into and interrupt a system or network. The VMM can also be a single point of failure in a virtualized environment [1, pp. 33]. If the VMM is compromised, then the virtual environment managed by the VMM could be compromised as well.

One of the contemplations when moving to cloud is the security issues. One thought is that the novel issues connected with distributed computing security have not been perceived. A few specialists feel that distributed computing security won 't be vastly different from existing security practices and that the security viewpoints can be very much overseen utilizing existing methods, for example, computerized marks, encryption, firewalls, and/or the disconnection of virtual situations, etc.

Large providers which have a vast number of resources are able to utilize their resources in a very efficient way. Furthermore public IaaS resources are utilized more efficient than private computer resources in average. Useful management approach for elastic virtual clusters, provide the capacity and environment according to specific requirements without the need to buy or use own hardware and software.

A long time after birth of web there is the buzz crosswise over globe with reference to cloud computing. The most sizzling wave in the realm of innovation is the potential development of cloud computing. Much prominence of cloud computing is owed to an innovation known as virtualization. Virtualizations imply that email or whatever else can be evoked when they're required. At the point when the need is gone, they can be wiped from presence, liberating the host PC to run an alternate virtual machine for another client. Combined with administration programming and tremendous server farms, this innovation permits cloud gives to procure gigantic financial matters to deal. It likewise gives cloud clients access to as much

Round Robin: This allocation policy for each new virtual machine, it process with available hosts until it finds free resources to host the virtual machine. The next virtual machine, the hosts are selected sequentially, and again selecting the first host that can allocate the virtual machine. This process is continued until all the vms

The deployment models of the cloud computing environment are private cloud, public cloud, hybrid and other models like community cloud, distributed cloud.