Process-based Security Detection Approach for Virtual Machines on Private Cloud Platforms

Abstract

A process-based security detection method PAMon is proposed in this paper based on analysis of current security detection techniques for virtual machines on private cloud platforms. The modules of PAMon, including semantic reconstruction, hidden process detection, resource utilization analysis, comprehensive analysis, and so forth, are thoroughly analyzed and investigated. To validate the feasibility of PAMon, a miniaturized private cloud was configured aided by Xen and eucalyptus technology. Through experiments, it is demonstrated that the PAMon detection system can effectively address malicious programs running on the monitored virtual machines by comprehensively analyzing the critical processes, hidden processes, and resource-seizing processes. Moreover, this detection system is more comprehensive, thorough, and reliable than existing detection techniques.