Secure migration of virtual machines
View Patent ↗Technologies are generally described for the secure live migration of virtual machines. The migration may take place in the context of, for example, public clouds. In various embodiments, by using a hidden process incorporated in a virtual machine's kernel and a trusted wireless and/or wired positioning service, a cloud provider and/or cloud user may be alerted about possible virtual machine hijacking/theft. The provider or user may also be provided with an approximate physical location of the platform running the compromised virtual machine for further investigation and enforcement measures.
1. A method, comprising:
receiving, at a computing device, a request to migrate a virtual machine from a source host to a target host;
determining, via a hidden process, whether a geographic location of the target host is within a particular perimeter, wherein the hidden process is executable by the virtual machine;
in response to a determination that the geographic location of the target host is within the particular perimeter, allowing, via the hidden process, a migration of the virtual machine from the source host to the target host; and
in response to a determination that the geographic location of the target host is outside of the particular perimeter, denying, via the hidden process, the migration of the virtual machine from the source host to the target host.
2. The method of claim 1 , wherein the hidden process is configured to run on the computing device.
3. The method of claim 1 , wherein the hidden process is configured to run on the virtual machine.
4. The method of claim 1 , further comprising responsive to a determination that a configuration of the target host is other than a proper hardware configuration, denying, via the hidden process, the migration of the virtual machine from the source host to the target host.
5. The method of claim 4 , further comprising determining, via the hidden process, whether the configuration of the target host is the proper hardware configuration.
6. The method of claim 1 , further comprising:
determining, via the hidden process, whether a configuration of the target host is a proper configuration; and
in response to a determination that the configuration of the target host is other than the proper configuration, preventing, via the hidden process, execution of the virtual machine.
7. The method of claim 6 , wherein the proper configuration includes positioning hardware or access to a positioning service.
8. A computing system, comprising:
a computing device comprising one or more processor units; and
a memory communicatively coupled to the one or more processor units when the computing system is operational, the memory having stored therein computer instructions that, in response to execution by the one or more processor units, cause performance of:
in response to a request to migrate a virtual machine from a source host to a target host, determine, via a hidden process, whether a geographic location of the target host is within a particular perimeter, wherein the hidden process is executable by the virtual machine;
in response to a determination that the geographic location of the target host is within the particular perimeter, allow, via the hidden process, a migration of the virtual machine from the source host to the target host; and
in response to a determination that the geographic location of the target host is outside of the particular perimeter, deny, via the hidden process, the migration of the virtual machine from the source host to the target host.
9. The computing system of claim 8 , wherein the memory has further stored therein computer instructions that, in response to execution by the one or more processor units, cause performance of:
verify whether the target host has a proper configuration based on information that indicates a hardware configuration of the target host.
10. The computing system of claim 9 , wherein the memory has further stored therein computer instructions that, in response to execution by the one or more processor units, cause performance of:
in response to a determination that the verified configuration of the target host is other than the proper configuration, prevent, via the hidden process, execution of the virtual machine on the target host.
11. The computing system of claim 9 , wherein the memory has further stored therein computer instructions that, in response to execution by the one or more processor units, performance of:
in response to a determination that the verified configuration of the target host is other than the proper configuration, deny, via the hidden process, the migration of the virtual machine from the source host to the target host.
12. The computing system of claim 9 , wherein the memory has further stored therein computer instructions that, in response to execution by the one or more processor units, cause performance of:
obtain, by the hidden process, the information indicating the hardware configuration of the target host from a trusted platform module.
13. The computing system of claim 9 , wherein the information comprises a hash of an operating system of the target host and a private key.
14. The computing system of claim 8 , wherein the memory has further stored therein computer instructions that, in response to execution by the one or more processor units, cause performance of:
obtain, by the hidden process, information indicating the geographic location from at least one of a network device, a geolocation device, or a positioning service.
15. A non-transitory computer-readable storage medium having stored therein processor-executable instructions that, in response to execution by one or more processor units, cause the one or more processor units to perform or control performance of:
in response to receipt of a request to migrate a virtual machine from a source host to a target host, determine, via a hidden process, whether a geographic location of the target host is within a particular perimeter, wherein the hidden process is executable by the virtual machine; and
in response to a determination that the geographic location of the target host is within the particular perimeter, allow, via the hidden process, a migration of the virtual machine from the source host to the target host; and
in response to a determination that the geographic location of the target host is outside of the particular perimeter, deny, via the hidden process, the migration of the virtual machine from the source host to the target host.
16. The computer-readable storage medium of claim 15 , wherein the processor-executable instructions further comprise instructions that, in response to execution by the one or more processor units, cause the one or more processor units to determine a configuration of the target host.
17. The computer-readable storage medium of claim 16 , wherein the processor-executable instructions further comprise instructions that, in response to execution by the one or more processor units, cause the one or more processor units to perform or control performance of:
in response to a determination that the configuration of the target host is other than a proper configuration, deny, via the hidden process, the migration of the virtual machine from the source host to the target host; and
in response to a determination that the configuration of the target host is the proper configuration, allow, via the hidden process, the migration of the virtual machine from the source host to the target host.
18. The computer-readable storage medium of claim 15 , wherein the processor-executable instructions further comprise instructions that, in response to execution by the one or more processor units, cause the one or more processor units to send, via the hidden process, an alert that indicates denial of the request in response to the determination that geographic location of the target host is outside of the particular perimeter.
19. The computer-readable storage medium of claim 18 , wherein the alert includes an indication of the geographic location of the target host.
20. The computer-readable storage medium of claim 18 , wherein the alert includes an email message.