Trusted End Host Monitors For Securing Cloud Datacenters
- alan shieh ,
- Srikanth Kandula ,
- Albert Greenberg
22nd ACM Symposium on Operating System Principles (Work-in-progress session) |
Published by Association for Computing Machinery, Inc.
Although datacenters dedicated for cloud computing
services are becoming increasingly prevalent, the current
datacenter network security architecture is poorly suited
for this application. Policy enforcement is smeared between
the network and end hosts, increasing cost and
complexity while reducing flexibility and security. Enforcement
is typically done at network chokepoints,
which inherently see high traffic levels from aggregate
traffic; packet filters and deep packet inspection engines
that can operate at these data rates require expensive, custom
hardware.
Copyright © 2007 by the Association for Computing Machinery, Inc. Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, to republish, to post on servers, or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from Publications Dept, ACM Inc., fax +1 (212) 869-0481, or permissions@acm.org. The definitive version of this paper can be found at ACM's Digital Library --http://www.acm.org/dl/.