Leveraging virtual machine introspection for hot-hardening of arbitrary cloud-user applications
Sebastian Biedermann, Stefan Katzenbeisser, Jakub M. Szefer · IEEE International Conference on Cloud Computing Technology and Science · 2014
Correctly applying security settings of various different applications is a time-consuming and in some cases a very difficult task. Moreover, with explosion in cloud computing popularity, cloud users are able to download and run pre-packaged virtual appliances. Many users may assume that these come with correct security settings and never bother to check or update these settings. In this paper we propose an architecture that can automatically and transparently improve security settings of arbitrary network applications in a cloud computing setup. Users can deploy virtual machines with different applications, and our system will attempt to find and test better security settings tailored towards their specific setup. We call this approach hot-hardening since our techniques are applied to running applications.