Scalable distributed service integrity attestation for software-as-a- service clouds

IEEE Transactions on Parallel and Distributed Systems

Volumn 25, Issue 3, 2014, Pages 730-739

  Du, Juan ^b   Dean, Daniel J ^a   Tan, Yongmin ^b   Gu, Xiaohui ^a   Yu, Ting ^a  

^a North Carolina State University   (United States)

^b MathWorks ^*

Author keywords

cloud computing; Distributed service integrity attestation; secure distributed data processing

Indexed keywords

EID: 84894545644     PISSN: 10459219     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPDS.2013.62     Document Type: Article

References (39)

1. Amazon Web Services, http://aws.amazon.com/, 2013.
2. Google App Engine, http://code.google.com/appengine/, 2013
3. Software as a Service, http://en.wikipedia.org/wiki/Software as a Service, 2013.
4. G. Alonso, F. Casati, H. Kuno, and V. Machiraju, Web Services Concepts, Architectures and Applications (Data-Centric Systems and Applications). Addison-Wesley Professional, 2002.
5. T. Erl, Service-Oriented Architecture (SOA): Concepts, Technology, and Design. Prentice Hall, 2005.
6. T.S. Group, "STREAM: The Stanford Stream Data Manager, " IEEE Data Eng. Bull., vol. 26, no. 1, pp. 19-26, Mar. 2003.
7. D.J. Abadi et al., "The Design of the Borealis Stream Processing Engine, " Proc. Second Biennial Conf. Innovative Data Systems Research (CIDR '05), 2005.
8. B. Gedik et al., "SPADE: The System S Declarative Stream Processing Engine, " Proc. ACM SIGMOD Int'l Conf. Management of Data (SIGMOD '08), Apr. 2008.
9. S. Berger et al., "TVDc: Managing Security in the Trusted Virtual Datacenter, " ACM SIGOPS Operating Systems Rev., vol. 42, no. 1, pp. 40-47, 2008.
10. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, You Get Off My Cloud! Exploring Information Leakage in Third-Party Compute Clouds, " Proc. 16th ACM Conf. Computer and Communications Security (CCS), 2009.
11. W. Xu, V.N. Venkatakrishnan, R. Sekar, and I.V. Ramakrishnan, "A Framework for Building Privacy-Conscious Composite Web Services, " Proc. IEEE Int'l Conf. Web Services, pp. 655-662, Sept. 2006.
12. P.C.K. Hung, E. Ferrari, and B. Carminati, "Towards Standardized Web Services Privacy Technologies, " IEEE Int'l Conf. Web Services, pp. 174-183, June 2004.
13. L. Alchaal, V. Roca, and M. Habert, "Managing and Securing Web Services with VPNs, " Proc. IEEE Int'l Conf. Web Services, pp. 236-243, June 2004.
14. H. Zhang, M. Savoie, S. Campbell, S. Figuerola, G. von Bochmann, and B.S. Arnaud, "Service-Oriented Virtual Private Networks for Grid Applications, " Proc. IEEE Int'l Conf. Web Services, pp. 944-951, July 2007.
15. M. Burnside and A.D. Keromytis, "F3ildCrypt: End-to-End Protection of Sensitive Information in Web Services, " Proc. 12th Int'l Conf. Information Security (ISC), pp. 491-506, 2009.
16. I. Roy et al., "Airavat: Security and Privacy for MapReduce, " Proc. Seventh USENIX Conf. Networked Systems Design and Implementation (NSDI), Apr. 2010.
17. J. Garay and L. Huelsbergen, "Software Integrity Protection Using Timed Executable Agents, " Proc. ACM Symp. Information, Computer and Comm. Security (ASIACCS), Mar. 2006.
18. T. Garfinkel et al., "Terra: A Virtual Machine-Based Platform for Trusted Computing, " Proc. 19th ACM Symp. Operating Systems Principles (SOSP), Oct. 2003.
19. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. van Doorn, and P. Khosla, "Pioneer: Verifying Code Integrity and Enforcing Untampered Code Execution on Legacy Systems, " Proc. 20th ACM Symp. Operating Systems Principles (SOSP), Oct. 2005.
20. E. Shi, A. Perrig, and L.V. Doorn, "Bind: A Fine-Grained Attestation Service for Secure Distributed Systems, " Proc. IEEE Symp. Security and Privacy, 2005.
21. Trusted Computing Group, https://www.trustedcomputing group.org/home, 2013.
22. "TPM Specifications Version 1.2, " TPM, https://www. trustedcomputinggroup.org/downloads/specifications/tpm/tpm, 2013.
23. J.L. Griffin, T. Jaeger, R. Perez, and R. Sailer, "Trusted Virtual Domains: Toward Secure Distributed Services, " Proc. First Workshop Hot Topics in System Dependability, June 2005.
24. L. Lamport, R. Shostak, and M. Pease, "The Byzantine Generals Problem, " ACM Trans. Programming Languages and Systems, vol. 4, no. 3, pp. 382-401, 1982.
25. T. Ho et al., "Byzantine Modification Detection in Multicast Networks Using Randomized Network Coding, " Proc. IEEE Int'l Symp. Information Theory (ISIT), 2004.
26. J. Du, W. Wei, X. Gu, and T. Yu, "Runtest: Assuring Integrity of Dataflow Processing in Cloud Computing Infrastructures, " Proc. ACM Symp. Information, Computer and Comm. Security (ASIACCS), 2010.
27. J. Du, N. Shah, and X. Gu, "Adaptive Data-Driven Service Integrity Attestation for Multi-Tenant Cloud Systems, " Proc. Int'l Workshop Quality of Service (IWQoS), 2011.
28. Virtual Computing Lab, http://vcl.ncsu.edu/, 2013.
29. Amazon Elastic Compute Cloud, http://aws.amazon.com/ec2/2013.
30. N. Jain et al., "Design, Implementation, and Evaluation of the Linear Road Benchmark on the Stream Processing Core, " Proc. ACM SIGMOD Int'l Conf. Management of Data (SIGMOD '06), 2006.
31. B. Raman et al., "The SAHARA Model for Service Composition Across Multiple Providers, " Proc. First Int'l Conf. Pervasive Computing, Aug. 2002.
32. X. Gu et al., "QoS-Assured Service Composition in Managed Service Overlay Networks, " Proc. 23rd Int'l Conf. Distributed Computing Systems (ICDCS '03), pp. 194-202, 2003.
33. K.-L. Wu, P.S. Yu, B. Gedik, K. Hildrum, C.C. Aggarwal, E. Bouillet, W. Fan, D. George, X. Gu, G. Luo, and H. Wang, "Challenges and Experience in Prototyping a Multi-Modal Stream Analytic and Monitoring Application on System S, " Proc. 33rd Int'l Conf. Very Large Data Bases (VLDB), pp. 1185-1196, 2007.
34. J. Dean and S. Ghemawat, "MapReduce: Simplified Data Processing on Large Clusters, " Proc. USENIX Symp. Operating System Design and Implementation, 2004.
35. M. Isard, M. Budiu, Y. Yu, A. Birrell, and D. Fetterly, "Dryad: Distributed Data-Parallel Programs from Sequential Building Blocks, " Proc. European Conf. Computer Systems (EuroSys), 2007.
36. A. Seshadri, A. Perrig, L.V. Doorn, and P. Khosla, "SWATT: Software-Based Attestation for Embedded Devices, " Proc. IEEE Symp. Security and Privacy, May 2004.
37. A. Haeberlen, P. Kuznetsov, and P. Druschel, "Peerreview: Practical Accountability for Distributed Systems, " Proc. 21st ACM SIGOPS Symp. Operating Systems Principles, 2007.
38. J. Du, X. Gu, and T. Yu, "On Verifying Stateful Dataflow Processing Services in Large-Scale Cloud Systems, " Proc. ACM Conf. Computer and Communications Security (CCS), pp. 672-674, 2010.
39. I. Hwang, "A Survey of Fault Detection, Isolation, and Reconfiguration Methods, " IEEE Trans. Control System Technology, vol. 18, no. 3, pp. 636-653, May 2010.