Skip to main content
SpringerLink
Log in

Formal model of cyber attacks on virtualization tools and a measure of hypervisor vulnerability

  • Published:
Automatic Control and Computer Sciences Aims and scope Submit manuscript

Abstract

A description has been provided for a formal model of cyber attack on virtualization tools that allow one to formulate condition for the security of virtualization tools. The concept of measuring the vulnerability of virtualization tools has been introduced that characterizes the predisposition of a system to vulnerabilities that contribute to the implementation of cyber attacks in the proposed formal model. These characteristics of virtualization tools allow one to compare different hypervisors and estimate the presence of vulnerabilities in them.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Log in via an institution

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Institutional subscriptions

Similar content being viewed by others

References

  1. Williams, D., Jamjoom, H., and Weatherspoon, H., The Xen-blanket: Virtualize once, run everywhere, EuroSys 2012, Bern, 2012. http://jamjoom.net/publications/jamjoom-EuroSys-12.pdf

    Google Scholar 

  2. Pechenkin, A.I. and Lavrova, D.S., Parallel analysis of the security of network traffic on a multi-processor cluster, Zh. Inf. Bezop., Komp. Sist., 2013, no. 1, pp. 54–61.

    Google Scholar 

  3. IBM X-Force Mid-year Trend and Risk Report. IBM Security Solutions, 2010, pp. 50–53. ftp://public. dhe.ibm.com/common/ssi/ecm/en/wgl03003usen/WGL03003USEN.pdf

  4. Gruskovnjak, J., Advanced exploitation of Xen Hypervisor Sysret VMescape vulnerability, Secur. Res., 2012. http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_Xen_Sysret_VM_Escape_CVE-2012-0217.php

    Google Scholar 

  5. Jones, R., CVE-2011-4127: Privilege escalation from qemu. KVM guests. http://rwmj.wordpress.com/2011/ 12/22/cve-2011-4127-privilege-escalation-from-qemu-kvm-guests/

  6. Elhage, N., Virtunoid: Breaking out of KVM, Elhage. Black Hat: USA, 2011. http://media.blackhat.com/bh-us-11/ Elhage/BH_US_11_Elhage_Virtunoid_Slides.pdf

  7. Zegzhda, D.P. and Nikol’skii, A.V., A formal security model for hypervisors of virtual machines in cloud computing systems, Zh. Probl. Inf. Bezop., Komp. Sist., 2013, no. 1.

    Google Scholar 

  8. Vogl, S., Secure Hypervisors. http://www.sec.in.tum.de/assets/lehre/ss09/seminar_virtualisierung/Secure_ Hypervisors_S-Vogl.pdf

  9. Garfinkel, T., Pfaff, B., Chow, J., Rosenblum, M., and Boneh, D., Terra: A virtual machine-based platform for trusted computing, SIGOPS, Bolton Landing, NY, 2003. http://suif.stanford.edu/papers/sosp03-terra.pdf

    Book  Google Scholar 

  10. Karger, P., Zurko, M., Bonin, D., Mason, A., and Kahn, C., A VMM security kernel for the VAX architecture, IEEE Computer Society Symposium on Security and Privacy, 1990. http://www.scs.stanford.edu/nyu/ 02sp/sched/vmm.pdf

    Google Scholar 

  11. Sailer, R., et al., sHype: Secure Hypervisor Approach to Trusted Virtualized Systems, IBM Research Division, Thomas J. Watson Research Center, 2005. http://domino.watson.ibm.com/library/cyberdig.nsf/papers/ 265C8E3A6F95CA8D85256FA1005CBF0F/$File/rc23511.pdf

    Google Scholar 

  12. Szefer, J. and Lee, R., Architectural support for hypervisor-secure virtualization, ASPLOS, London, 2012. http://palms.princeton.edu/system/files/asplos2012_wfooter.pdf

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Peter the Great St. Petersburg Polytechnic University, St. Petersburg, Russia

    A. V. Nikolskiy & Yu. S. Vasil’ev

Authors
  1. A. V. Nikolskiy
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Yu. S. Vasil’ev
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to A. V. Nikolskiy.

Additional information

Original Russian Text © A.V. Nikolskiy, Yu.S. Vasil’ev, 2015, published in Problemy Informatsionnoi Bezopasnosti. Komp’yuternye Sistemy.

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Nikolskiy, A.V., Vasil’ev, Y.S. Formal model of cyber attacks on virtualization tools and a measure of hypervisor vulnerability. Aut. Control Comp. Sci. 49, 751–757 (2015). https://doi.org/10.3103/S014641161508012X

Download citation

  • Received:

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.3103/S014641161508012X

Keywords

Search

Navigation