A server-side solution to cache-based side-channel attacks in the cloud

IEEE International Conference on Cloud Computing, CLOUD

Volumn , Issue , 2013, Pages 163-170

  Godfrey, Michael ^a   Zulkernine, Mohammad ^a  

^a QUEEN S UNIVERSITY   (Canada)

Author keywords

Cloud Computing; CPU Cache; Security; Server Side Defense; Side Channel Attack

Indexed keywords

CLOUD ENVIRONMENTS; CLOUD SECURITIES; CPU CACHE; INFORMATION LEAKAGE; MITIGATION TECHNIQUES; SECURITY; SERVER-SIDE DEFENSE; SIDE CHANNEL ATTACK;

COMPUTER PROGRAMMING; COMPUTER SCIENCE;

CLOUD COMPUTING;

EID: 84897712723     PISSN: 21596182     EISSN: 21596190     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2013.21     Document Type: Conference Paper

References (17)

1. Y. Xu, M. Bailey., F. Jahanian. "An Exploration of L2 Cache Covert Channels in Virtualized Environments", In Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop (CCSW), pages 29-40, 2011.
2. T. Ristenpart, E. Tromer, H. Shachem, S. Savage. "Hey, You, Get Off of my Cloud: Exploring Information Leakage in Third-Party Compute Clouds", In Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS), pages 199-212, 2009.
3. T. Kim, M. Peinado, G. Mainar-Ruiz. "STEALTHMEM: System-Level Protection Against Cache-Based Side-Channel Attacks in the Cloud", In Proceedings of the 21st USENIX Conference on Security Symposium, 2011
4. Y. Zhang, M. Reiter, A. Juels, T. Ristenpart. "Cross-VM side-channels and Their Use to Extract Private Keys", In Proceedings of the 2012 ACM Conference on Computer and Communications Security (CCS), pages 305-316, 2012.
5. Z. Wu, Z. Xu, H. Wang. "Whispers in Hyper-space: High-speed Covert Chanel Attacks in the Cloud", In Proceedings of the 21st USENIX Conference on Security Symposium, 2012.
6. B. Lampson. "A Note on the Confinement Problem", In Communications of the ACM, Volume 16, Issue 10, pages 613-615, Oct 1973.
7. Y. Tsunoo, T. Saito, T. Suzaki, M. Shigeri. "Cryptanalysis of DES Implemented on Computers with Cache", In Proceedings of Cryptographic Hardware and Embedded Systems (CHES), Springer LNCS, 2003.
8. D. Page. "Defending Against Cache-Based Side-Channel Attacks", In Information Security Technical Report, Volume 8, Issue 1, pages 30-44, March 2003
9. D. Osvik, A. Shamir, E. Tromer. "Cache Attacks and Countermeasures: The Case of AES", In Topics in Cryptology-CTRSA 2006, The Cryptographers' Track at the RSA Conference 2006.
10. S. Chen, R. Wang , X. Wang, K. Zhang. "Side-Channel Leaks in Web Applications: A Reality Today, A Challenge Tomorrow", In Proceedings of the 2010 IEEE Symposium on Security and Privacy (SP), pages 191-206, 2010.
11. S. Xi, J. Wilson, C. Lu, C. Gill. "RT-Xen: Towards Real-time Hypervisor Scheduling in Xen", In Proceedings of the Ninth ACM International Conference on Embedded Software (EMSOFT), pages 39-48, 2011.
12. H. Lv. "Tackling the Management Challenges of Server Consolidation on Multi-Core Systems", Presented at XenSummit August 2011. Retreived from http://www.xen.org/xensummit/xensummit-summer-2011.html on Nov 7th 2012.
13. W. Von Hagen. "Professional Xen Virtualizaion", Wiley Publishing Inc. 2008.
14. Amazon Web Services. http://aws.amazon.com/.
15. Xen. http://www.xen.org/.
16. D. Song, D. Wagner, X. Tian. "Timing Analysis of Keystrokes and Timing Attacks on SSH", In Proceedings of the 10th Conference on USENIX Security Symposium (SSYM)-Volume 10, 2001.
17. Xen Credit Scheduler. http://wiki.xensource.com/xenwiki/CreditScheduler