System and Method for Security Health Monitoring And Attestation Of Virtual Machines In Cloud Computing Systems

A method for security health monitoring and attestation of virtual machines in cloud computing systems, comprising the steps of:

• providing a cloud server including a virtual machine and a hypervisor, the cloud server collecting security measurement information and signing and hashing the security measurement information using a cryptography engine;
• providing an attestation server for receiving the security measurement information from the cloud server, the attestation server verifying the signature and hash values, and interpreting the security measurement information;
• and
• generating an attestation report by the attestation server based on the verification and interpretation of the security measurement information.

A system for security health monitoring and attestation of virtual machines in cloud computing systems, comprising:

• a cloud server including a software entity to be protected and a system software that manages the software entity to be protected, the cloud server collecting security measurement information and signing and hashing the security measurement information using a cryptography engine;
• and
• an attestation server for receiving the security measurement information from the cloud server, the attestation server verifying the signature and hash values, and interpreting the security measurement information;
• wherein the attestation server generates an attestation report based on the verification and interpretation of the security measurement information.

A method for security health monitoring and attestation of virtual machines in cloud computing systems, comprising the steps of:

• providing a cloud server including a software entity to be protected and a system software that manages the software entity to be protected, the cloud server collecting security measurement information and signing and hashing the security measurement information using a cryptography engine;
• providing an attestation server for receiving the security measurement information from the cloud server, the attestation server verifying the signature and hash values, and interpreting the security measurement information;
• and
• generating an attestation report based on the verification and interpretation of the security measurement information.

A system for security health monitoring and attestation of virtual machines in cloud computing systems, comprising:

• a virtual machine, a hypervisor, a network interface controller, a random access memory, a central processing unit, and a cache memory;
• a monitor module for monitoring and gathering security measurement information inside the virtual machine or outside the virtual machine;
• a trust module for secure storage of security measurement information, generating keys, and hashing and signing the security measurement information using cryptography operations;
• and
• a property interpretation module for interpreting the security measurement information hashed and signed from the trust module or from the monitor module.