ONHelp: Components in Building Secure Cloud Based on OpenNebula

摘要

Due to the rapid development of cloud computing, several cloud computing platforms are developed to build cloud for individuals and companies. Open Nebula is known as one of the most popular open-source cloud computing software platforms. However, Open Nebula does not perform effectively in security. Virtual machines face risks of being attacked, which leads to services halt and data loss. We analyze the latest version of Open Nebula as well as some other similar products, and find out some functions are missing in these software platforms which turn out to be essential in secure cloud environment. We present ON Help, security components assisting Open Nebula to build a securer cloud platform, including trustworthiness attestation of computing nodes and VMs, deep monitoring of VMs, service-level fault tolerant service, cloud anti-virus in VMs and secure cloud storage. Our experimental results show that ON Help can be easily deployed with Open Nebula when constructing a cloud computing platform, and it can enhance the stability of cloud service and the security of cloud computing environment.