PIGA-Virt: an Advanced Distributed MAC Protection of Virtual Systems
Résumé
Efficient Mandatory Access Control of Virtual Machines re- mains an open problem for protecting efficiently Cloud Systems. For ex- ample, the MAC protection must allow some information flows between two virtual machines while preventing other information flows between those two machines. For solving these problems, the virtual environment must guarantee an in-depth protection in order to control the information flows that starts in a Virtual Machine (vm) and finishes in another one. In contrast with existing MAC approaches, PIGA-Virt is a MAC protec- tion controlling the different levels of a virtual system. It eases the man- agement of the required security objectives. The PIGA-Virt approach guarantees the required security objectives while controlling efficiently the information flows. PIGA-Virt supports a large range of predefined protection canvas whose efficiency has been demonstrated during the ANR Sec&Si 1 security challenge. The paper shows how the PIGA-Virt approach guarantees advanced confidentiality and integrity properties by controlling complex combinations of transitive information flows passing through intermediate resources. As far as we know, PIGA-Virt is the first operational solution providing in-depth MAC protection, addressing ad- vanced security requirements and controlling efficiently information flows inside and between virtual machines. Moreover, the solution is indepen- dent of the underlying hypervisor. Performances and protection scenarios are given for protecting KVM virtual machines.