Security issues of virtualization in cloud computing environments

Mayank Jayantibhai Mehta, BSc

Master's thesis

Abstract:

Computing in the cloud is a relatively new technology that was developed to satisfy the requirements of businesses, cut costs, and resolve issues with IT management. Cloud computing is dependent on numerous applications, such as virtualization, but it also inherits the security issues that come along with such applications. The architecture of virtualization offers a platform that is both powerful and integrated for the construction of systems. The use of virtualization is dependent on the layer of encapsulation software known as the virtual machine monitor, or hypervisor. This software offers inputs and outputs to the operating system while simultaneously surrounding it. As a result of the complicated nature of the underlying cloud infrastructure, cloud environments are confronted with a significant variety of issues, including cyberattacks, root-kits, malware instances, and misconfigurations, all of which present themselves as serious threats to cloud environments. Because of these dangers, the cloud's overall trustworthiness, as well as its reliability and accessibility, have taken a noticeable hit. The effects of a command injection attacks can range from a loss of data privacy and integrity to unauthorised remote access to the computer system that is hosting the application that is susceptible. This thesis research aims to solve this vacuum by recommending an open-source tool called commix that automates the process of finding and exploiting command injection problems in web applications. Its name comes from the acronym for "command injection mix" (Command Injection Exploitation). This tool offers support for a wide range of functions, which enables it to cover a variety of exploitative use cases. In addition, Commix can determine, with a high degree of accuracy, whether a web application is susceptible to command injection attacks. Experiments were done to show how vulnerable the environment is, and the results showed that the proposed approach makes the environment much less vulnerable than other options.

Keywords

Computing, Virtualization Technology, Security Challenges, vulnerabilities

Language used: English

Date on which the thesis was submitted / produced: 30. 11. 2022

Thesis defence

• Supervisor: doc. Ing. Jan Tyrychtr, Ph.D.

Czech University of Life Sciences Prague

Faculty of Economics and Management

Master programme / field:
Systems Engineering and Informatics / Informatics