New computer network security threat identified

February 26, 2008
Contact:
  • umichnews@umich.edu

ANN ARBOR—Large companies are vulnerable to hackers when they network their computers for cost-saving live virtual machine migration, University of Michigan researchers say.

Virtualization, which allows multiple operating systems, or “virtual machines” and their applications to share one physical server, has been possible for decades, but live virtual machine migration is relatively new.

It allows individual virtual machines to migrate among several servers throughout the day with little service downtime, equalizing the load on the servers as it fluctuates. The security of live virtual machine migration has not been studied extensively, but the set-up is common in large companies today.

Hackers could intercept data and compromise the integrity of a virtual machine’s operating system during live migration, said Jon Oberheide, a doctoral candidate in the electrical engineering and computer science department. The most popular software doesn’t encrypt the information as it travels from server to server.

How does Oberheide know this? He hacked into his own migrating virtual machines.

“I was setting up a live virtual machine migration network in my office and I started poking around, and I noticed that it was totally insecure,” Oberheide said.

As a short-term fix, companies can isolate their migration network from other network traffic or install hardware encryption devices on all their physical servers, Oberheide said.

“The important thing is to raise awareness of the vulnerability,” Oberheide said. “Solutions are feasible, but they’re not implemented by the most popular vendors. What is really needed is authenticated and encrypted migration so the attacker cannot perform these attacks, so that even if he can see the migration, he can’t modify it.”

Oberheide details his findings in a talk at the Black Hat D.C. computer security conference this week. He will present the paper, “Empirical Exploitation of Live Virtual Machine Migration.” Other authors are research fellow Evan Cooke and professor Farnam Jahanian, both of U-M’s Department of Electrical Engineering and Computer Science.

Michigan Engineering:

The University of Michigan College of Engineering is ranked among the top engineering schools in the country. Michigan Engineering boasts one of the largest engineering research budgets of any public university, at more than $130 million annually. Michigan Engineering is home to 11 academic departments and a National Science Foundation Engineering Research Center. The College plays a leading role in the Michigan Memorial Phoenix Energy Institute and the Graham Environmental Sustainability Institute. Within the College, there is a special emphasis on research in three emerging areas: nanotechnology and integrated microsystems; cellular and molecular biotechnology; and information technology. Michigan Engineering is raising $300 million for capital projects and program support in these and other areas to continue fostering breakthrough scholarly advances, an unparalleled scope of student opportunities and contributions that improve the quality of life on an international scale.

U-M Networking and Security Research Group with professor Farnam JahanianBlack Hat