Title :
A Novel Model for Critical Services Consolidation Based on FVM
Author :
Zhang Xiaosong ; Chen Ting ; Wang Ding
Author_Institution :
Sch. of Comput. Sci. & Eng., Univ. of Electron. Sci. & Technol. of China, Chengdu
Abstract :
Current approaches to detect Internet threats prove incapable of consolidating critical services because detection usually takes places later than attacks. One traditional approach to protect critical services is patching, but it cannot take effect until the patches is distributed. This paper proposes a novel model (SCF) for critical services consolidation based on Feather weight Virtual Machine (FVM). We have two major contributions. The first contribution is the design of SCF to be able to consolidate critical services from being compromised even by unknown attacks. The second is high performance by using FVM. We tested SCF by couples of real world exploits. Experiments demonstrate that SCF can protect critical services from compromise with low overhead.
Keywords :
Internet; security of data; virtual machines; Internet threat detection; SCF design; critical services consolidation; feather weight virtual machine; Buffer overflow; Computer science; Detectors; Hardware; Internet; Protection; Resource virtualization; Testing; Virtual machining; Virtual manufacturing;
Conference_Titel :
E-Business and Information System Security, 2009. EBISS '09. International Conference on
Conference_Location :
Wuhan
Print_ISBN :
978-1-4244-2909-7
Electronic_ISBN :
978-1-4244-2910-3
DOI :
10.1109/EBISS.2009.5137887