Analysis of Virtual Networking Options for Securing Virtual Machines

Published

March 20, 2016

Author(s)

Ramaswamy Chandramouli

Abstract

Virtual Machines (VMs) constitute the primary category of resources to be protected in virtualized infrastructures. Out of the two types of protection for VMs -- Host-level and Network-level -- it is the approaches for the Network-level protection that are different in virtualized infrastructures as compared to those for non-virtualized environments. This is due to the fact that the VMs are end nodes of a virtual network as opposed to being end nodes of a physical network. In this paper, we provide a detailed analysis (in terms of advantages and disadvantages) of some of the key approaches for two Network-level protection measures for virtualized infrastructures -- Network Segmentation and Traffic Control using Firewalls. The choice of these two Network-level protection measures is due to the fact that they form the foundation for the network configuration of the entire virtualized infrastructure. We also provide the overall conclusions from the analysis in the form of recommended deployment choices based on approaches for these two network-level protection measures for securing VMs.

Proceedings Title

The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization (CLOUD COMPUTING 2016)

Conference Dates

March 20-24, 2016

Conference Location

Rome

Pub Type

Conferences

Download Paper

Local Download

Keywords

Virtual Machine, VLAN, Hypervisor, VXLAN, Virtual Firewall.

Citation

Chandramouli, R. (2016), Analysis of Virtual Networking Options for Securing Virtual Machines, The Seventh International Conference on Cloud Computing, GRIDs, and Virtualization (CLOUD COMPUTING 2016) , Rome, -1, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=920155 (Accessed October 6, 2024)