Cloud computing is expected to become a common solution for deploying applications
thanks to its capacity to leverage developers from infrastructure management tasks, thus …

Separation kernels are the strongest known form of separation for virtual machines. We
agree with NSA's Information Assurance Directorate that while separation kernels are …

This work examines the use of model checking techniques to verify system-level security
properties of a collection of interacting virtual machines. Specifically, we examine how local …

Virtualization plays a vital role in building the infrastructure of clouds, and isolation is
considered as one of its important features. However, we demonstrate with practical …

In order to guarantee security properties, such as confidentiality and integrity, cryptographic
mechanisms provide encryption and signature of data, but protection is required to control …

Abstract Efficient Mandatory Access Control of Virtual Machines remains an open problem
for protecting efficiently Cloud Systems. For example, the MAC protection must allow some …

Mandatory Access Control is really poorly supported by Cloud environments. Our paper
proposes extensions of the OpenNebula Cloud software in order to provide an advanced …

In conventional military computing, security separation is provided by cryptography, for data
in motion and data at rest. Security separation for data under computation is provided by …

Virtual machine introspection has evolved into a valuable tool for several purposes such as
incident analysis and intrusion detection. In addition to that, there has been a lot of work that …

Virtualization enables the increasing efficiency and elasticity of modern IT infrastructures,
including Infrastructure as a Service. However, the operational complexity of virtualized …