Austin TX (SPX) Dec 01, 2010
Researchers from North Carolina State University and IBM have invented a way to update computer systems packaged in virtual machines in a computer "cloud" - even when those programs are offline.
The new cloud computing patch tool developed by NC State and IBM is called Nuwa and protects virtual machines (VMs) from cyber-attacks by ensuring that they always receive important security upgrades.
In addition, the researchers have determined that offline application of security patches is more than four times faster than online patch application. The tool is named after a Chinese goddess who patched a hole in the sky.
A paper describing the research, "Always Up-to-date - Scalable Offline Patching of VM Images in a Compute Cloud," will be presented Dec. 10 at the Annual Computer Security Applications Conference in Austin, Texas.
"We've designed a way to patch these virtual machines while they are offline, so that they are kept up to date in terms of security protection," says Dr. Peng Ning, professor of computer science at NC State and co-author of a paper describing the research.
"Current patching systems are designed for computers that are online and they don't work for dormant computers or virtual machines. The tool we developed automatically analyzes the 'script' that dictates how a security patch is installed, and then automatically re-writes the script to make it compatible with an offline system."
Nuwa leverages a collection of techniques developed by IBM, called Mirage, that is used for performing efficient offline introspection and manipulation of a large collection of VM images, to allow cloud administrators to patch multiple VMs simultaneously.
A program already exists that allows cloud computing systems to operate more efficiently by saving one version of a computer file that is used by multiple VMs - rather than saving the same file repeatedly for each individual VM. Nuwa takes advantage of this technology and, by patching one file, can ultimately protect all of the VMs that use that file.
NC State and IBM have successfully tested and evaluated Nuwa on the IBM Research Compute Cloud, a compute cloud that is used by IBM researchers worldwide.
Cloud computing enables users to create many VMs on one large computing platform, with each VM being able to perform various computer functions.
It is so easy to create these VMs, that businesses and individuals will often create them to perform very specific tasks on a periodic basis. Because many of these VMs are used infrequently, they are often left dormant for extended periods of time, so that they are not consuming energy and computer resources when not in use.
These dormant periods pose a significant security problem, because VMs that are offline do not receive security upgrades, known as patches. This leaves the VMs vulnerable to cyber-attacks when they are brought back online. The VMs are particularly vulnerable if they have been left dormant for months, and missed significant patches.
The research collaboration was funded by the National Science Foundation and IBM. The lead author on the paper is Wu Zhou, a Ph.D. student at NC State. Co-authors are Ning; Xiaolan Zhang, Glenn Ammons and Vasanth Bala of the IBM T.J. Watson Research Center; and Ruowen Wang, a Ph.D. student at NC State.
NC State's computer science department is part of the university's College of Engineering.
"Always Up-to-date - Scalable Offline Patching of VM Images in a Compute Cloud" Authors: Wu Zhou, Peng Ning, Ruowen Wang, North Carolina State University; Xiaolan Zhang, Glenn Ammons, Vasanth Bala, IBM T. J. Watson Research Center. Presented: Dec. 10, 2010, at the Annual Computer Security Applications Conference, Austin, Texas
Share This Article With Planet Earth
North Carolina State University
Space Technology News - Applications and Research
HP to focus more on software, new CEO says
New York (AFP) Nov 22, 2010
Hewlett-Packard plans to increase its focus on software, new chief executive Leo Apotheker said Monday, as the US computer giant posted fourth quarter results that topped Wall Street's expectations. HP said net profit rose five percent in the fourth quarter of its financial year to 2.5 billion dollars while revenue was up eight percent to 33.3 billion dollars, better than the 32.75 billion d ... read more
German scientist eyes gold mine in rare earths recycling|
Apple's iPad has real Xmas rival in Samsung's Galaxy tablet
Columbia Engineering Team Discovers Graphene Weakness
Estonia's rare earth break China's market grip
Codan Receives JITC Certification For 2110 HF Manpack
Northrop Grumman Bids for Marine Corps Common Aviation CnC
DSP Satellite System Celebrates 40 Years
ManTech Awarded US Army Contract To Provide ECCS In Afghanistan
Hylas-1 In Orbit Brings Europe Broadband From Space
Ariane rocket puts telecom satellites into orbit
45th Space Wing Launches NRO Satellite
FAA issues private spacecraft permit
World-Leading Spatial Experts Meet In Sydney
Space Ministers Emphasise Priority To Deliver Galileo And GMES
New Simulator Offers Ability To Record And Replay GLONASS And GPS
Russia To Launch New Generation Satellite In 2013
Brazil eyes Boeing, Airbus aviation market
NASA awards contracts for 'green' airliner
Should Airplanes Look Like Birds
Simple Oscillating Flexible Wings Viable For MAVs
Manufacturing Made To Measure Atomic-Scale Electrodes
Short Light Pulses Will Enable Ultrafast Data Transfer Within Computer Chips
Chaogates Hold Promise For The Semiconductor Industry
Caltech Physicists Demonstrate A Four-Fold Quantum Memory
Two New Earth Observation Missions Chosen For Further Study
Express Map Delivery From Space
GOES-13 Looks At Thanksgiving Travel Conditions
Imaging Science Offers New Opportunities For Interdisciplinary Collaboration
Tiny blood vessels show pollution, heart disease link
Construction halts on India's newest hill station
Conference urged to step up anti landmine drive
Australian firm to ship toxic waste to Denmark
|The content herein, unless otherwise known to be public domain, are Copyright 1995-2010 - SpaceDaily. AFP and UPI Wire Stories are copyright Agence France-Presse and United Press International. ESA Portal Reports are copyright European Space Agency. All NASA sourced material is public domain. Additional copyrights may apply in whole or part to other bona fide parties. Advertising does not imply endorsement,agreement or approval of any opinions, statements or information provided by SpaceDaily on any Web page published or hosted by SpaceDaily. Privacy Statement|