ITMO University, St. Petersburg, Russia.

---

Abstract—Nowadays Virtualization is an underlying technology in cloud computing that simplifies data center management improves corporate resource utilization, minimizes IT hardware costs. However, cloud environment faces new security challenges as the architecture of virtualized environments differs dramatically from non-virtualized. The traditional security methods cannot be applied any more to secure system in effective way as it used to be in the past. New approaches should be applied in order to be able to meet new security challenges of technology. In this research, we apply Ishikawa approach, method from Quality Management System in order to identify many possible causes and factors for hypervisor security risks. In addition to that, to better structure the risks we based Ishikawa method on traditional security model, STRIDE Model, proposed by Microsoft. Hence, this paper firstly analyses malicious environment of virtualization technology. Secondly, it applies quality-based methodology for security analyses. As a result, we see that such approach helps to identify preventive security countermeasures that have to be considered at the earlier stage before real attacks occur.

Index Terms—Secure cloud computing, hypervisor security, virtualization, threat modeling, Ishikawa, fishbone diagram, cause and effect analysis.

[PDF]

Cite: Svetlana Kolesnikova, Danil Melnik , Roman Kulikov, Yuriy Gatchin, "Hypervisor Security Analyses Based on Ishikawa Methodology," Journal of Computers vol. 13, no. 5, pp. 511-518, 2018.