Incentive compatible moving target defense against VM-colocation attacks in clouds

IFIP Advances in Information and Communication Technology

Volumn 376 AICT, Issue , 2012, Pages 388-399

  Zhang, Yulong ^a   Li, Min ^a   Bai, Kun ^b   Yu, Meng ^a   Zang, Wanyu ^a  

^a Virginia Commonwealth University   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Cloud computing; Moving target defence; VCG mechanism; VM migration

Indexed keywords

CLOUD PROVIDERS; COLOCATIONS; COMPUTING INFRASTRUCTURES; HYPERVISOR; INCENTIVE COMPATIBLE; MIGRATION STRATEGY; MOVING TARGETS; PROCESSOR DESIGN; SECURITY LEVEL; SIDE CHANNEL ATTACK; VCG MECHANISM; VIRTUAL MACHINES; VM MIGRATION;

CLOUD COMPUTING;

SECURITY OF DATA;

EID: 84863977611     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-30436-1_32     Document Type: Conference Paper

References (13)

1. Amazon web services, http://aws.amazon.com
2. Workshop on Secret Sharing and Cloud Computing. MEXT, Institute of Mathematics for Industry, Kyushu University, Japan (2011)
3. Armbrust, M., Fox, A., Griffith, R., Joseph, A.D., Katz, R.H., Konwinski, A., Lee, G., Patterson, D.A., Rabkin, A., Stoica, I., Zaharia, M.: Above the clouds: A berkeley view of cloud computing. Tech. Rep. UCB/EECS-2009-28, EECS Department, University of California, Berkeley (February 2009)
4. Danev, B., Masti, R.J., Karame, G.O., Capkun, S.: Enabling secure vm-vtpm migration in private clouds. In: Proceedings of the 27th Annual Computer Security Applications Conference, ACSAC 2011, pp. 187-196. ACM, New York (2011)
5. Evans, D., Nguyen-Tuong, A., Knight, J.: Effectiveness of moving target defenses. In: Jajodia, S., Ghosh, A.K., Swarup, V., Wang, C., Wang, X.S. (eds.) Moving Target Defense. Advances in Information Security, vol. 54, pp. 29-48. Springer, Heidelberg (2011)
6. Kant, K.: Configuration management security in data center environments. In: Jajodia, S., Ghosh, A.K., Swarup, V., Wang, C., Wang, X.S. (eds.) Moving Target Defense. Advances in Information Security, vol. 54, pp. 161-181. Springer, Heidelberg (2011)
7. Keller, E., Szefer, J., Rexford, J., Lee, R.B.: Nohype: virtualized cloud infrastructure without the virtualization. SIGARCH Comput. Archit. News 38, 350-361 (2010)
8. Liu, H., Xu, C.-Z., Jin, H., Gong, J., Liao, X.: Performance and energy modeling for live migration of virtual machines. In: Proceedings of the 20th International Symposium on High Performance Distributed Computing, HPDC 2011, pp. 171-182. ACM, New York (2011)
9. Nisan, N., Roughgarden, T., Tardos, E., Vazirani, V.: Introduction to Mechanism Design (for Computer Scientists). Cambridge University Press (2007)
10. Page, D.: Defending against cache-based side-channel attacks. Information Security Technical Report 8(1), 30-44 (2003)
11. Ristenpart, T., Tromer, E., Shacham, H., Savage, S.: Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In: Proceedings of the 16th ACM Conference on Computer and Communications Security, CCS 2009, pp. 199-212. ACM, New York (2009)
12. Shamir, A.: How to share a secret. Commun. ACM 22, 612-613 (1979)
13. Wang, Z., Lee, R.B.: New cache designs for thwarting software cache-based side channel attacks. SIGARCH Comput. Archit. News 35, 494-505 (2007)