Cloud security auditing based on behavioral modeling

Proceedings - 2013 IEEE 9th World Congress on Services, SERVICES 2013

Volumn , Issue , 2013, Pages 268-273

  Birnbaum, Zachary ^a   Liu, Bingwei ^a   Dolgikh, Andrey ^a   Chen, Yu ^a   Skormin, Victor ^a  

^a State University of New York at Binghamton   (United States)

Author keywords

Behavioral Modeling; Cloud Security Auditing (CSA); Multi Tenancy; Suspicious Process Detection

Indexed keywords

BEHAVIORAL MODEL; CLOUD SECURITIES; EFFECTIVENESS AND EFFICIENCIES; INTRUSION DETECTION TECHNOLOGIES; MULTI TENANCIES; ON-DEMAND RESOURCE PROVISIONING; PROCESS DETECTION; SECURITY IMPLICATIONS;

MANAGEMENT;

EID: 84888072557     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SERVICES.2013.81     Document Type: Conference Paper

References (23)

1. G. Ateniese, R. Burns, R. Curtmola, J. Herring, L. Kissner, Z. Peterson, and D. Song, "Provable data possession at untrusted stores," in Proceedings of the 14th ACM conference on Computer and communications security (CCS), pages 598-609, New York, NY, USA, 2007. ACM.
2. A. M. Azab, P. Ning, Z. Wang, X. Jiang, X. Zhang, N. C. Skalsky, "HyperSentry: Enabling Stealthy In-context Measurement of Hypervisor Integrity," in Proc. of the 17th ACM Conference on Computer and Communications Security, pp. 38-49, 2010.
3. L. Badger, T. Grance, R. Patt-Corner, and J. Voas, "NIST special publication 800-146, draft cloud computing synopsis and recommendations," National Institute of Standards and Technology, 2011.
4. D. Boneh, B. Lynn, and H. Shacham, "Short signatures from the weil pairing," Journal of Cryptology, 17:297-319, 2004. 10.1007/s00145-004-0314- 9.
5. C. Erway, A. Küpçü, C. Papamanthou, and R. Tamassia, "Dynamic provable data possession," in Proceedings of the 16th ACM conference on Computer and communications security, pp. 213-222. ACM, 2009.
6. J. Feng, Y. Chen, and D. Summerville, "A Fair Multi-Party Non-Repudiation Scheme for Storage Clouds," the 2011 International Conference on Collaboration Technologies and Systems (CTS 2011), Philadelphia, PA., USA, May 23-27, 2011.
7. R. Houlihan, and X. Du, "An Effective Auditing Scheme for Cloud Computing," in Proc. of IEEE GLOBECOM 2012, Anaheim, CA, USA, Dec. 2012.
8. Intel and NTT DoCoMo, "Open and Secure Terminal Initiative (OSTI) Architecture Specification V1.0," 2006.
9. A. Juels and B. S. Kaliski Jr., "Pors: proofs of retrievability for large files," in Proceedings of the 14th ACM conference on Computer and communications security (CCS), pages 584-597, New York, NY, USA, 2007. ACM.
10. L.M. Kristensen, S. Christensen, and K. Jensen, "The practitioner's guide to coloured Petri nets," Int. J. STTT, (1998) 2: 98-132.
11. J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. Gligor, and A. Perrig, "TrustVisor: Efficient TCB reduction and attestation," in Proceedings of the IEEE Symposium on Security and Privacy, May 2010.
12. J. McCune, B. Parno, A. Perrig, M. Reiter, and H. Isozaki, "Flicker: an execution infrastructure for TCB minimization," in Proc. of the ACM European Conference on Computer Systems (EuroSys), March/April 2008.
13. Open Mobile Terminal Platform Alliance, "OMTP Approved Deliverables," 2010,http://www.omtp.org/approved.html.
14. N. L. Petroni, T. Fraser, J. Molina, and W. A. Arbaugh, "Copilot-A coprocessor-based kernel runtime integrity monitor," in Proc. of the 13th USENIX Security Symposium, pp. 13, 2004.
15. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds," In Proceedings of the 16th ACM conference on Computer and communications security, pp. 199-212. ACM, 2009.
16. J. Rutkowska, "Beyond the CPU: Defeating Hardware Based RAM Acquisition Tools," Blackhat, February 2007.
17. H. Shacham and B. Waters, "Compact Proofs of Retrievability," Advances in Cryptology-ASIACRYPT 2008.
18. J. Szefer, E. Keller, R.B. Lee, and J. Rexford, "Eliminating the hypervisor attack surface for a more secure cloud," ACM CCS, 2011.
19. V. Varadarajan, T. Kooburat, B. Farley, T. Ristenpart, and M.M. Swift, "Resource-freeing attacks: improve your cloud performance (at your neighbor's expense),"ACM CCS, 2012.
20. C. Wang, Q. Wang, K. Ren, and W. Lou, "Privacy-preserving public auditing for data storage security in cloud computing," In INFOCOM, 2010 Proceedings IEEE, pages 1-9, march 2010.
21. J. Wang, A. Stavrou, and A. K. Ghosh, "HyperCheck: A hardwareassisted integrity monitor," in Proc. of the 13th International Symposium on Recent Advances in Intrusion Detection (RAID10), September 2010.
22. Q. Wang, C. Wang, K. Ren, W. Lou, and J. Li, "Enabling public auditability and data dynamics for storage security in cloud computing," Parallel and Distributed Systems, IEEE Transactions on, 22(5):847-859, may 2011.
23. R. Wojtczuk and J. Rutkowska, "Xen 0wning trilogy," in Proc. Black Hat conference, 2008