Authors:
Meng Yu
1
;
Alex Hai Wang
2
;
Wanyu Zang
1
and
Peng Liu
2
Affiliations:
1
Western Illinois University, United States
;
2
Pennsylvania State University, United States
Keyword(s):
Security modeling, Survivability, Security architecture, Software security, Data center.
Related
Ontology
Subjects/Areas/Topics:
Information and Systems Security
;
Security in Information Systems
;
Security Metrics and Measurement
Abstract:
Virtual machine based services are becoming predominant in data centers or cloud computing since virtual machines can provide strong isolation and better monitoring for security purposes. While there are many promising security techniques based on virtual machines, it is not clear how significant the difference between various system architectures can be in term of survivability.
In this paper, we analyze the survivability of three virtual machine based architectures — load balancing architecture, isolated service architecture, and BFT architecture. Both the survivability based on the availability and the survivability under sustained attacks for each architecture are analyzed. Furthermore, the costs of each architecture are compared. The results show that even if the same set of commercial off the shell (COTS) software are used, the performance of various service architectures are largely different in surviving attacks. Our results can be used as guidelines in the service architect
ure design when survivability to attacks is important.
(More)