Structural Feature Based Anomaly Detection for Packed Executable Identification - Computational Intelligence in Security for Information Systems - page 259

Use of Schema Associative Mapping for
Synchronization of the Virtual Machine Audit Logs
Sean Thorpe 1 , Indrajit Ray 2 , and Tyrone Grandison 3
1 Faculty of Engineering and Computing, University of Technology
Kingston, Jamaica
[e-mail]
2 Colorado State University
Fort Collins, USA
[e-mail]
3 IBM Almaden Research
Silicon Valley, USA
[e-mail]
Abstract. Compute cloud interoperability across different domains represents a
major challenge for the System administrator community. This work takes a
look at the issues for enabling heterogeneous synchronization of virtual disk log
attributes by use of an associative mapping technique. We explore this concern
as a function of providing secure log auditing for the virtual machine (VM)
cloud. Our contribution provides novel theoretical foundations that can be used
to establish these synchronized log audit requirements supported by practical
case study results.
Keywords: Log audit, Attribute, Synchronized, Virtual Machine, Associative.
1 Introduction
Enabling security within the compute cloud presents serious challenges which the VM
system administrator has to face. These challenges range from third party trust,
malicious insiders, and distributed storage just to name a few. Arguably the benefits
of economies of scale for cloud deployment is matched by the security risk.
This paper articulates using a formal approach, the specific components required in
designing an audit compute cloud. We achieve this by synchronizing the log file data
between the actual physical disk and the virtual disk using associative mapping
techniques of the adopted cloud components [7]. The rest of the paper is divided into
four (4) sections. Section 2 looks at related work, Section 3 looks at an Attribute Log
Graph context model, Section 4 looks at Experimental Results and Section 5 provides
the conclusion and future work.
2 Related Work
Cloud computing arguably is seen by many as virtualization on steroids. The first
deployment of virtual machines started as early as 2003, and by 2006 it's acceptance as