Virtualization Security

Virtualization-aware Infrastructure-as-a-Service Security Solution

I am also involved in another PhD project address security issues in the infrastructure as a service cloud computing model. The objective of this project to project cloud virtualization infrastructure from possible security breaches initiated from virtual machines hosted on the cloud computing model. This is one of the most challenging projects we have been working on. We have to develop a new scalable pointer analysis tool that can reconstruct a complete operating system data structure layout. This layout is used in mitigating the semantic gap problem arised from adopting virtual machine introspection techniques.

Publications

1. Amani S. Ibrahim, John C. Grundy, James Hamlyn-Harris, Mohamed Almorsy, "DIGGER: Identifying Operating System Dynamic Kernel Objects for Run-time Security Analysis", International Journal on Internet and Distributed Computing Systems (IJIDCS), to appear.

2. Amani S. Ibrahim, John C. Grundy, James Hamlyn-Harris, Mohamed Almorsy, "Identifying OS Kernel Runtime Objects for Run-time Security Analysis", 6th International Conference on Network and System Security (NSS 2012), Nov 21-23 2012, Wu Yi Shan, Fujian, China, Springer.

3. Amani S. Ibrahim, John C. Grundy, James Hamlyn-Harris, Mohamed Almorsy, "Operating System Kernel Data Disambiguation to Support Security Analysis", 6th International Conference on Network and System Security (NSS 2012), Nov 21-23 2012, Wu Yi Shan, Fujian, China, Springer.

4. Amani S. Ibrahim, John C. Grundy, James Hamlyn-Harris, Mohamed Almorsy, "Supporting Operating System Kernel Data Disambiguation using Points-to Analysis", 27th IEEE/ACM International Conference on Automated Software Engineering (ASE 2012), Sept 3-7 2012, Essen, Germany, ACM Press.

5. Amani S. Ibrahim, James Hamlyn-Harris, John Grundy and Mohamed Almorsy, "Supporting Virtualizaion-Aware Security Solutions using a Systematic Approach to Overcome the Semantic Gap", 5th IEEE Conference on Cloud Computing (CLOUD 2012), IEEE CS Press, Waikiki, Hawai, USA, June 24-29 2012.

6. Amani S. Ibrahim, James Hamlyn-Harris, John Grundy and Mohamed Almorsy, "CloudSec: A Security Monitoring Appliance for Virtual Machines in the IaaS Cloud Model", 5th International Conference on Network and System Security (NSS 2011), Milan, Italy on 6 – 8 September, 2011.