Artificial Intelligent Systems and Machine Learning

Mohamed A. Elfiky ¹, Nashwa Abdelbaki ¹

Affiliations
1 Communication and Information Technology School, Information Security Department, Graduate Studies and Research, Nile University, EG

Abstract

The cloud concept was used to denote the segregation point between the responsibility of the provider and the user. Cloud computing overcome this border to cover servers as well as the network infrastructure. Virtualization is one of the most significant technologies to impact computing in the last few years. It is the backbone for cloud computing. Virtualization systems is exposed to some threats inherited from regular computerized systems for example Denial-of-Service (DoS) attacks, Zombies and honeypots. Some types of threats and vulnerabilities is dedicated to virtual machines. The core of VM vulnerabilities comes from a compromised VM can be attack other VMs on the same hypervisor or can be attack the hypervisor itself because they are in the same physical hardware layer. Co-location of multiple VMs increases the attack surface and risk of VM to VM compromise. In this paper, we introduce our novel security management system between virtual machines. We introduce our innovative pilot project to enhance the security between virtual machines and monitor the traffic between VMs. We design three VMs server with different platforms (OS). We implement virtual Endian FirewallvEFW and IDS from converting physical open source EFW to virtual EFW and we deployed it to monitor traffic between virtual servers and allow or deny the traffic between virtual machines and outside the system.

Keywords

Cloud Computing, Virtualization, Architecture, Security Management.

Full Text