Virtual machine allocation policies against co-resident attacks in cloud computing

2014 IEEE International Conference on Communications, ICC 2014

Volumn , Issue , 2014, Pages 786-792

  Han, Yi ^a   Chan, Jeffrey ^a   Alpcan, Tansu ^a   Leckie, Christopher ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

cloud computing security; co resident attack; virtual machine allocation policy

Indexed keywords

COMPUTER SIMULATION;

ALLOCATION POLICIES; BACKGROUND TRAFFIC; CLOUD COMPUTING PLATFORMS; CLOUD COMPUTING SECURITIES; CO-RESIDENT ATTACK; QUANTITATIVE MODELING; SENSITIVE INFORMATIONS; VIRTUAL MACHINE ALLOCATIONS;

CLOUD COMPUTING;

EID: 84907000617     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2014.6883415     Document Type: Conference Paper

References (25)

1. Ristenpart, T., Tromer, E., Shacham, H., and Savage, S.: "Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds," Proc. 16th ACM Conference on Computer and Communications Security (CCS 2009), 2009, pp. 199-212
2. Zhang, Y., Juels, A., Reiter, M., and Ristenpart, T.: "Cross-VM Side Channels and Their Use to Extract Private Keys," Proc. 2012 ACM Conference on Computer and Communications Security-CCS '12, 2012, pp. 305-316
3. Okamura, K., Okamura, K., and Oyama, Y.: "Load-based Covert Channels between Xen Virtual Machines," Proc. 2010 ACM Symposium on Applied Computing-SAC '10, 2010, pp. 173-180
4. Hlavacs, H., Treutner, T., Gelas, J.-P., Lefevre, L., and Orgerie, A.-C.: "Energy Consumption Side-Channel Attack at Virtual Machines in a Cloud," Proc. 2011 IEEE Ninth International Conference on Dependable, Autonomic and Secure Computing, 2011, pp. 605-612
5. Wu, J., Ding, L., Wang, Y., and Han, W.: "Identification and Evaluation of Sharing Memory Covert Timing Channel in Xen Virtual Machines," Proc. 2011 IEEE 4th International Conference on Cloud Computing, 2011, pp. 283-291
6. Xu, Y., Bailey, M., Jahanian, F., Joshi, K., Hiltunen, M., and Schlichting, R.: "An Exploration of L2 Cache Covert Channels in Virtualized Environments," Proc. 3rd ACM Workshop on Cloud Computing Security-CCSW '11, 2011, pp. 29-39
7. Kadloor, S., Kadloor, S., Kiyavash, N., and Venkitasubramaniam, P.: "Scheduling with Privacy Constraints," Proc. 2012 IEEE Information Theory Workshop, 2012, pp. 40-44
8. Xia, Y., Yetian, X., Xiaochao, Z., Lihong, Y., Li, P., and Jianhua, L.: "Constructing the On/Off Covert Channel on Xen," Proc. 2012 Eighth International Conference on Computational Intelligence and Security, 2012, pp. 568-572
9. Aviram, A., Hu, S., Ford, B., and Gummadi, R.: "Determinating Timing Channels in Compute Clouds," Proc. 2010 ACM Workshop on Cloud Computing Security Workshop-CCSW '10, 2010, pp. 103-108
10. Jin, S., Ahn, J., Cha, S., and Huh, J.: "Architectural Support for Secure Virtualization under a Vulnerable Hypervisor," Proc. 44th Annual IEEE/ACM International Symposium on Microarchitecture-MICRO '11, 2011, pp. 272-283
11. Shi, J., Shi, J., Song, X., Chen, H., and Zang, B.: "Limiting Cachebased Side-channel in Multi-tenant Cloud using Dynamic Page Coloring," Proc. 2011 IEEE/IFIP 41st International Conference on Dependable Systems and Networks Workshops (DSN-W), 2011, pp. 194-199
12. Szefer, J., Keller, E., Lee, R., and Rexford, J.: "Eliminating the Hypervisor Attack Surface for a More Secure Cloud," Proc. 18th ACM Conference on Computer and Communications Security-CCS '11, 2011, pp. 401-412
13. Vattikonda, B., Das, S., and Shacham, H.: "Eliminating Fine Grained Timers in Xen," Proc. 3rd ACM Workshop on Cloud Computing Security Workshop-CCSW '11, 2011, pp. 41-46
14. Wu, J., Ding, L., Lin, Y., Min Allah, N., and Wang, Y.: "XenPump: A New Method to Mitigate Timing Channel in Cloud Computing," Proc. 2012 IEEE Fifth International Conference on Cloud Computing, 2012, pp. 678-685
15. Han, Y., Alpcan, T., Chan, J., and Leckie, C.: "Security Games for Virtual Machine Allocation in Cloud Computing," Proc. The fourth Conference on Decision and Game Theory for Security (GameSec 2013), pp. 99-118, Fort Worth, TX, USA
16. CloudSim, http://www.cloudbus.org/cloudsim/
17. Calheiros, R., Ranjan, R., Beloglazov, A., De Rose, C.A.F., and Buyya, R.: "CloudSim: A Toolkit for Modeling and Simulation of Cloud Computing Environments and Evaluation of Resource Provisioning Algorithms," Software, Practice and Experience, 2011, 41, (1), pp. 23-50
18. OpenStack, http://www.openstack.org/
19. Eucalyptus, http://www.eucalyptus.com/
20. OpenNebula, http://opennebula.org/
21. CloudStack, http://cloudstack.apache.org/
22. Han, Y., Chan, J., and Leckie, C.: "Analysing Virtual Machine Usage in Cloud Computing," Proc. 2013 IEEE Ninth World Congress on Services (SERVICES), June 28-July 3 2013, pp. 370-377
23. Amazon Elastic Compute Cloud (EC2), http://aws.amazon.com/ec2/
24. Windows Azure: Microsoft's Cloud Platform, http://www.windowsazure.com
25. Synthetic self-similar traffic generation, http://glenkramer.com/ucdavis/ trf-research.html