Resource-freeing attacks: Improve your cloud performance (at your neighbor's expense)

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2012, Pages 281-292

  Varadarajan, Venkatanathan ^a   Kooburat, Thawan ^a   Farley, Benjamin ^a   Ristenpart, Thomas ^a   Swift, Michael M ^a  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

Author keywords

Cloud computing; Resource freeing attacks; Scheduling; Security; Virtualization

Indexed keywords

MICROSOFT; RESOURCE-FREEING ATTACKS; SECURITY; SYNTHETIC BENCHMARK; VIRTUAL MACHINES; VIRTUALIZATIONS;

BENCHMARKING; CLOUD COMPUTING; INTERNET; SALES; SCHEDULING; WINDOWS OPERATING SYSTEM;

SECURITY OF DATA;

EID: 84869441988     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2382196.2382228     Document Type: Conference Paper

References (38)

1. Specjbb2005. http://www.spec.org/jbb2005/.
2. Graph 500. Graph 500 benchmark 1. http://www.graph500.org/.
3. Amazon Ltd. Amazon elastic compute cloud (EC2). http://aws.amazon.com/ ec2/.
4. Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, and Andrew Warfield. Xen and the art of virtualization. In SOSP, 2003.
5. Sean K. Barker and Prashant Shenoy. Empirical evaluation of latency-sensitive application performance in the cloud. In MMSys, 2010.
6. M. Bhadauria and S. A. McKee. An approach to resource-aware co-scheduling for cmps. In ICS, 2010.
7. L. Cherkasova, D.Gupta, and A. Vahdat. Comparison of the three cpu schedulers in xen. SIGMETERICS Performance Evaluation Review, 25(2), September 2007.
8. Scott A. Crosby and Dan S. Wallach. Denial of service via algorithmic complexity attacks. In Usenix Security, 2003.
9. Jake Edge. Denial of service via hash collisions. http://lwn.net/ Articles/474912/, January 2012.
10. Alexandra Fedorova, Margo Seltzer, and Michael D. Smith. Improving performance isolation on chip multiprocessors via an operating system scheduler. In PACT, 2007.
11. Ajay Gulati, Arif Merchant, and Peter J. Varma. mclock: Handling throughput variability for hypervisor io scheduling. In OSDI, 2010.
12. Diwaker Gupta, Ludmila Cherkasova, Rob Gardner, and Amin Vahdat. Enforcing performance isolation across virtual machines in xen. In Middleware, 2006.
13. J. L. Henning. Spec cpu2006 benchmark descriptions. In SIGARCH Computer Architecture News, 2006.
14. R. E. Kessler and Mark D. Hill. Page placement algorithms for large real-indexed caches. ACM TOCS, 10(4):338-359, November 1992.
15. A. Li, X. Yang, S. Kandula, and M. Zhang. Cloudcmp: Comparing public cloud providers. In IMC, 2010.
16. J. Li, M. Qiu, J. Niu, W. Gao, Z. Zong, and X. Qin. Feedback dynamic algorithms for preemptable job scheduling in cloud systems. In WI-IAT, 2010.
17. Linux man page. xentrace(8). http://linux.die.net/man/8/xentrace.
18. Andreas Merkel, Jan Stoess, and Frank Bellosa. Resource-conscious scheduling for energy efficiency on multicore processors. In EuroSys, 2010.
19. Thomas Moscibroda and Onur Mutlu. Memory performance attacks: Denial of memory service in multi-core systems. In Usenix Security Symposium, 2007.
20. K. J. Nesbit, J. Laudon, and J. E. Smith. Virtual private caches. In ISCA, 2007.
21. Netcraft Ltd. August 2011 web server survey. http://news.netcraft.com/ archives/2011/08/05/august-2011-web-server-sur%vey-3.html, August 2011.
22. X. Pu, L. Liu, Y. Mei, S. Sivathanu, Y. Koh, and C. Pu. Understanding performance interference of i/o workload in virtualized cloud environments. In CLOUD, 2010.
23. Nauman Rafique, Won-Taek Lim, and Mithuna Thottethodi. Effective management of DRAM bandwidth in multicore processors. In PACT, 2007.
24. H. Raj, R. Nathuji, A. Singh, and P. England. Resource management for isolation enhanced cloud services. In CCSW, 2009.
25. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off my cloud: exploring information leakage in third party compute clouds. In CCS, 2009.
26. J. Schad, J. Dittrich, and J. Quiane-Ruiz. Runtime measurements in the cloud: Observing, analyzing, and reducing variance. In PVLDB, 2010.
27. B. Sharma, R. Prabhakar, S. Lim, M. T. Kandemir, and C. R. Das. Mrorchestrator: A fine-grained resource orchestration framework for hadoop mapreduce. Technical Report CSE-12-001, Pennsylvania State University, January 2012.
28. Alan Shieh, Srikanth Kandula, Albert Greenberg, and Changhoon Kim. Seawall: Performance isolation for cloud datacenter networks. In HotCloud, 2010.
29. Allan Snavely, Dean M. Tullsen, and Geoff Voelker. Symbiotic job scheduling with priorities for a simultaneous multithreading processor. In SIGMETRICS, 2002.
30. S. Srikantaiah, A. Kansal, and F. Zhao. Energy aware consolidation for cloud computing. In Proc. HotPowerWorkshop Power Aware Comput. Syst, 2008.
31. D. Tsafrir, Y. Etsion, and D. G. Feitelson. Secretly monopolizing the CPU without superuser privileges. In Usenix Security, 2007.
32. Ben Verghese, Anoop Gupta, and Mendel Rosenblum. Performance isolation: sharing and isolation in shared-memory multiprocessors. In ASPLOS, pages 181-192, 1998.
33. C. A. Waldspurger. Memory resource management in vmware esx server. In OSDI, 2002.
34. Guohui Wang and T. S. Eugene Ng. The impact of virtualization on network performance of amazon EC2 data center. In IEEE INFOCOM, 2010.
35. Yunjing Xu, Michael Bailey, Farnam Jahanian, Kaustubh Joshi, Matti Hiltunen, and Richard Schlichting. An exploration of l2 cache covert channels in virtualized environments. In CCSW, pages 29-40, 2011.
36. Y. Zhang, A. Juels, A. Oprea, and M. K. Reiter. Homealone: Co-residency detection in the cloud via side-channel analysis. In Security and Privacy IEEE Symposium, 2011.
37. F. Zhou, M. Goel, P. Desnoyers, and R. Sundaram. Scheduler vulnerabilities and attacks in cloud computing. arXiv:1103.0759v1 [cs.DC], March 2011.
38. Sergey Zhuravlev, Sergey Blagodurov, and Alexandra Fedorova. Addressing shared resource contention in multicore processors via scheduling. In ASPLOS, 2010.