Intrusion Detection in Virtualized Environment

Server Virtualization is one of the concepts driving current enterprise infrastructure design and setup. It ensures business continuity and agility through on demand resource sharing and optimum resource utilization. At the same time it has raised concerns over new trends of security breaches and attacks on virtual machines. Traditional Intrusion Detection systems have their own limitations and they are less effective when used in virtual environment. Concept of Virtual Machine Introspection can be considered as an effective mechanism to do intrusion detection in virtual machine. This paper studies approaches of intrusion detection in virtual machines from higher privileged level than virtual machine operating system and presents a framework to detect network based as well as host based attacks on virtual machine