MAC protection of the OpenNebula Cloud environment

Abstract : Mandatory Access Control is really poorly supported by Cloud environments. Our paper proposes extensions of the OpenNebula Cloud in order to provide an advanced MAC protection of the virtual machines hosted by the different nodes of the Cloud. Thus, unique SELinx security labels are associated with the virtual machines and their ressources. The instanciations and migrations of the virtual machines maintain those unique security labels. Moreover, PIGA-Virt provides a unified way to control the information flows within a virtual machine but also between multiple virtual machines. SELinux controls the direct flows. PIGA-Virt adds advanced controls. Thus, a PIGA protection rule can control several direct and indirect flows. The benchmarks of PIGA-Virt show that our Trusted OpenNebula Cloud is efficient regarding the quality of the protection.
Type de document :
Communication dans un congrès
High Performance Computing and Simulation (HPCS), 2012 International Conference on, Jul 2012, Madrid, Spain. pp.85 -90, 2012, 〈10.1109/HPCSim.2012.6266895〉
Liste complète des métadonnées

https://hal.inria.fr/hal-00766727
Contributeur : Jonathan Rouzaud-Cornabas <>
Soumis le : mardi 18 décembre 2012 - 17:28:38
Dernière modification le : vendredi 20 avril 2018 - 15:44:26

Identifiants

Citation

Z. Afoulki, A. Bousquet, J. Briffaut, J. Rouzaud-Cornabas, C. Toinard. MAC protection of the OpenNebula Cloud environment. High Performance Computing and Simulation (HPCS), 2012 International Conference on, Jul 2012, Madrid, Spain. pp.85 -90, 2012, 〈10.1109/HPCSim.2012.6266895〉. 〈hal-00766727〉

Partager

Métriques

Consultations de la notice

254