文章基本信息

标题：Hypervisor Security Analyses Based on Ishikawa Methodology
本地全文：下载
作者：Svetlana Kolesnikova ; Danil Melnik ; Roman Kulikov 等
期刊名称：Journal of Computers
印刷版ISSN：1796-203X
出版年度：2018
卷号：13
期号：5
页码：511-518
DOI：10.17706/jcp.13.5.511-518
语种：English
出版社：Academy Publisher
摘要：Nowadays Virtualization is an underlying technology in cloud computing that simplifies data centermanagement improves corporate resource utilization, minimizes IT hardware costs. However, cloudenvironment faces new security challenges as the architecture of virtualized environments differsdramatically from non-virtualized. The traditional security methods cannot be applied any more to securesystem in effective way as it used to be in the past. New approaches should be applied in order to be able tomeet new security challenges of technology. In this research, we apply Ishikawa approach, method fromQuality Management System in order to identify many possible causes and factors for hypervisor securityrisks. In addition to that, to better structure the risks we based Ishikawa method on traditional securitymodel, STRIDE Model, proposed by Microsoft. Hence, this paper firstly analyses malicious environment ofvirtualization technology. Secondly, it applies quality-based methodology for security analyses. As a result, wesee that such approach helps to identify preventive security countermeasures that have to be considered atthe earlier stage before real attacks occur.
关键词：Secure cloud computing; hypervisor security; virtualization; threat modeling; Ishikawa; fishbonediagram; cause and effect analysis.