This paper looks at this poorly explored area and attempts to empirically demonstrate the importance of securing the migration process. We begin by deﬁning and investigating three classes of threats to virtual machine migration: control plane, data plane, and migration module threats. We then show how a malicious party using these attack strategies can exploit the latest versions of the popular Xen and VMware virtual machine monitors and present a tool to automate the manipulation of a guest operating system’s
memory during a live virtual machine migration. Using this experience, we discuss strategies to address the deﬁciencies in virtualization software and secure the live migration process.
Download the paper in PDF format here.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.