Security Vulnerability Analysis in Virtualized Computing Environments

TL;DR: This paper discusses common exploits of security properties in virtualized computing environments and analyzes their security vulnerabilities from the perspective of attackers and identifies the main areas of virtualized information system design and operation in which security concerns must be addressed.

Abstract: Virtualization brings compelling features to individual computer systems and organizations allowing for the concurrent execution of multiple operating systems and applications on the same physical server. However, for all the performance improvements offered by adopting virtualization technologies, one of the major obstacles to widespread adoption of virtualization is the concern about security in the technology. Therefore, the security implications in virtualization environments must be addressed and understood because of the exploitation to compromise the operation of missioncritical systems. In this paper, we first discuss common exploits of security properties in virtualized computing environments and analyze their security vulnerabilities from the perspective of attackers. Consequently, we identify the main areas of virtualized information system design and operation in which security concerns must be addressed. Finally, we present our recommendations and future trends for trusted virtualized computing environments.