Featured Research

from universities, journals, and other organizations

Cloud computing: New way to patch holes in the 'cloud'

Date:
November 29, 2010
Source:
North Carolina State University
Summary:
Researchers have invented a way to update computer systems packaged in virtual machines in a computer "cloud" -- even when those programs are offline.

Researchers from North Carolina State University and IBM have invented a way to update computer systems packaged in virtual machines in a computer "cloud" -- even when those programs are offline.

Related Articles


The new cloud computing patch tool developed by NC State and IBM is called Nuwa and protects virtual machines (VMs) from cyber-attacks by ensuring that they always receive important security upgrades. In addition, the researchers have determined that offline application of security patches is more than four times faster than online patch application. The tool is named after a Chinese goddess who patched a hole in the sky.

A paper describing the research, "Always Up-to-date -- Scalable Offline Patching of VM Images in a Compute Cloud," will be presented Dec. 10 at the Annual Computer Security Applications Conference in Austin, Texas.

"We've designed a way to patch these virtual machines while they are offline, so that they are kept up to date in terms of security protection," says Dr. Peng Ning, professor of computer science at NC State and co-author of a paper describing the research. "Current patching systems are designed for computers that are online and they don't work for dormant computers or virtual machines. The tool we developed automatically analyzes the 'script' that dictates how a security patch is installed, and then automatically re-writes the script to make it compatible with an offline system."

Nuwa leverages a collection of techniques developed by IBM, called Mirage, that is used for performing efficient offline introspection and manipulation of a large collection of VM images, to allow cloud administrators to patch multiple VMs simultaneously. A program already exists that allows cloud computing systems to operate more efficiently by saving one version of a computer file that is used by multiple VMs -- rather than saving the same file repeatedly for each individual VM. Nuwa takes advantage of this technology and, by patching one file, can ultimately protect all of the VMs that use that file.

NC State and IBM have successfully tested and evaluated Nuwa on the IBM Research Compute Cloud, a compute cloud that is used by IBM researchers worldwide.

Cloud computing enables users to create many VMs on one large computing platform, with each VM being able to perform various computer functions. It is so easy to create these VMs, that businesses and individuals will often create them to perform very specific tasks on a periodic basis. Because many of these VMs are used infrequently, they are often left dormant for extended periods of time, so that they are not consuming energy and computer resources when not in use.

These dormant periods pose a significant security problem, because VMs that are offline do not receive security upgrades, known as patches. This leaves the VMs vulnerable to cyber-attacks when they are brought back online. The VMs are particularly vulnerable if they have been left dormant for months, and missed significant patches.

The research collaboration was funded by the National Science Foundation and IBM. The lead author on the paper is Wu Zhou, a Ph.D. student at NC State. Co-authors are Ning; Xiaolan Zhang, Glenn Ammons and Vasanth Bala of the IBM T.J. Watson Research Center; and Ruowen Wang, a Ph.D. student at NC State.

NC State's computer science department is part of the university's College of Engineering.


Story Source:

The above story is based on materials provided by North Carolina State University. Note: Materials may be edited for content and length.


Cite This Page:

North Carolina State University. "Cloud computing: New way to patch holes in the 'cloud'." ScienceDaily. ScienceDaily, 29 November 2010. <www.sciencedaily.com/releases/2010/11/101129102108.htm>.
North Carolina State University. (2010, November 29). Cloud computing: New way to patch holes in the 'cloud'. ScienceDaily. Retrieved October 24, 2014 from www.sciencedaily.com/releases/2010/11/101129102108.htm
North Carolina State University. "Cloud computing: New way to patch holes in the 'cloud'." ScienceDaily. www.sciencedaily.com/releases/2010/11/101129102108.htm (accessed October 24, 2014).

Share This



More Computers & Math News

Friday, October 24, 2014

Featured Research

from universities, journals, and other organizations


Featured Videos

from AP, Reuters, AFP, and other news services

Real-Life Transformer Robot Walks, Then Folds Into a Car

Real-Life Transformer Robot Walks, Then Folds Into a Car

Buzz60 (Oct. 24, 2014) — Brave Robotics and Asratec teamed with original Transformers toy company Tomy to create a functional 5-foot-tall humanoid robot that can march and fold itself into a 3-foot-long sports car. Jen Markham has the story. Video provided by Buzz60
Powered by NewsLook.com
Microsoft Riding High On Strong Surface, Cloud Performance

Microsoft Riding High On Strong Surface, Cloud Performance

Newsy (Oct. 24, 2014) — Microsoft's Q3 earnings showed its tablets and cloud services are really hitting their stride. Video provided by Newsy
Powered by NewsLook.com
The Best Apps to Organize Your Life

The Best Apps to Organize Your Life

Buzz60 (Oct. 23, 2014) — Need help organizing your bills, schedules and other things? Ko Im (@konakafe) has the best apps to help you stay on top of it all! Video provided by Buzz60
Powered by NewsLook.com
Nike And Apple Team Up To Create Wearable ... Something

Nike And Apple Team Up To Create Wearable ... Something

Newsy (Oct. 23, 2014) — For those looking for wearable tech that's significantly less nerdy than Google Glass, Nike CEO Mark Parker says don't worry, It's on the way. Video provided by Newsy
Powered by NewsLook.com

Search ScienceDaily

Number of stories in archives: 140,361

Find with keyword(s):
 
Enter a keyword or phrase to search ScienceDaily for related topics and research stories.

Save/Print:
Share:  

Breaking News:

Strange & Offbeat Stories

 

Space & Time

Matter & Energy

Computers & Math

In Other News

... from NewsDaily.com

Science News

Health News

Environment News

Technology News



Save/Print:
Share:  

Free Subscriptions


Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader:

Get Social & Mobile


Keep up to date with the latest news from ScienceDaily via social networks and mobile apps:

Have Feedback?


Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions?
Mobile iPhone Android Web
Follow Facebook Twitter Google+
Subscribe RSS Feeds Email Newsletters
Latest Headlines Health & Medicine Mind & Brain Space & Time Matter & Energy Computers & Math Plants & Animals Earth & Climate Fossils & Ruins