Improving users' isolation in IaaS: Virtual machine placement with security constraints

IEEE International Conference on Cloud Computing, CLOUD

Volumn , Issue , 2014, Pages 64-71

  Caron, Eddy ^a,b   Cornabas, Jonathan Rouzaud ^a,c  

^a UNIV LYON   (France)

^b UNIVERSITÉ DE LYON   (France)

^c UNIVERSITÉ LYON 1   (France)

Author keywords

Cloud Computing; Covert channel; Hierarchical VM Placement; IaaS; Isolation; Security

Indexed keywords

CLOUD COMPUTING; SECURITY OF DATA; VIRTUAL MACHINE; VIRTUALIZATION;

COVERT CHANNELS; IAAS; ISOLATION; SECURITY; VM PLACEMENTS;

INFRASTRUCTURE AS A SERVICE (IAAS);

EID: 84919790141     PISSN: 21596182     EISSN: 21596190     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2014.19     Document Type: Conference Paper

References (20)

1. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds," in Proceedings of the 16th ACM conference on Computer and communications security, ser. CCS '09. New York, NY, USA: ACM, 2009, pp. 199-212.
2. F. Broquedis, J. Clet-Ortega, S. Moreaud, N. Furmento, B. Goglin, G. Mercier, S. Thibault, and R. Namyst, "hwloc: A Generic Framework for Managing Hardware Affinities in HPC Applications," in Parallel, Distributed and Network-Based Processing (PDP), 2010 18th Euromicro International Conference on, feb. 2010, pp. 180-186.
3. B. Goglin and S. Moreaud, "Dodging Non-Uniform I/O Access in Hierarchical Collective Operations for Multicore Clusters," in CASS 2011: The 1st Workshop on Communication Architecture for Scalable Systems, held in conjunction with IPDPS 2011. Anchorage, AK: IEEE Computer Society Press, May 2011.
4. Z. Wu, Z. Xu, and H. Wang, "Whispers in the Hyperspace: High-speed Covert Channel Attacks in the Cloud," in the 21st USENIX Security Symposium (Security'12), August 2012.
5. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield, "Xen and the Art of Virtualization," SIGOPS Oper. Syst. Rev., vol. 37, no. 5, pp. 164-177, Oct. 2003.
6. V. Varadarajan, T. Kooburat, B. Farley, T. Ristenpart, and M. M. Swift, "Resource-Freeing Attacks: Improve your Cloud Performance (At your Neighbor's Expense)," in Proceedings of the 2012 ACM conference on Computer and communications security, ser. CCS '12. New York, NY, USA: ACM, 2012, pp. 281-292.
7. Y. Zhang, A. Juels, A. Oprea, and M. Reiter, "Home-Alone: Co-residency Detection in the Cloud via Side-Channel Analysis," in Security and Privacy (SP), 2011 IEEE Symposium on, may 2011, pp. 313-328.
8. H. Raj, R. Nathuji, and A. Singh, "Resource management for isolation enhanced cloud services," CCSW '09 Proceedings of the 2009 ACM workshop on Cloud computing security, p. 77, 2009.
9. K. Taesoo, M. Peinado, and G. Mainar-Ruiz, "System-Level Protection Against Cache-based Side Channel Attacks in the Cloud," in Proceedings of the 21st Usenix Security Symposium, ser. USENIX Security'12. Berkeley, CA, USA: USENIX Association, 2012, pp. 1-16.
10. E. Keller, J. Szefer, J. Rexford, and R. B. Lee, "NoHype: Virtualized Cloud Infrastructure without the Virtualization," SIGARCH Comput. Archit. News, vol. 38, no. 3, pp. 350-361, Jun. 2010.
11. J. Szefer, E. Keller, and R. Lee, "Eliminating the Hypervisor Attack Surface for a More Secure Cloud," in ACM Conference on Computer and Communications Security, 2011.
12. E. Caron, F. Desprez, and J. Rouzaud-Cornabas, "Smart resource allocation to improve cloud security," in Security, Privacy and Trust in Cloud Systems, S. Nepal and M. Pathan, Eds. Springer Berlin Heidelberg, 2014, pp. 103-143. [Online]. Available: http://dx.doi.org/10.1007/978-3-642-38586-54
13. H. Nguyen Van, F. Dang Tran, and J.-M. Menaud, "Autonomic Virtual Resource Management for Service Hosting Platforms," in Proceedings of the 2009 ICSE Workshop on Software Engineering Challenges of Cloud Computing, ser. CLOUD '09. Washington, DC, USA: IEEE Computer Society, 2009, pp. 1-8.
14. J. L. L. Simarro, R. Moreno-Vozmediano, R. S. Montero, and I. M. Llorente, "Dynamic Placement of Virtual Machines for Cost Optimization in Multi-Cloud Environments," in High Performance Computing and Simulation (HPCS), 2011 International Conference on, july 2011, pp. 1-7.
15. J. Tordsson, R. S. Montero, R. Moreno-Vozmediano, and I. M. Llorente, "Cloud Brokering Mechanisms for Optimized Placement of Virtual Machines Across Multiple Providers," Future Generation Computer Systems, vol. 28, no. 2, pp. 358-367, 2012.
16. D. Jayasinghe, C. Pu, T. Eilam, M. Steinder, I. Whally, and E. Snible, "Improving Performance and Availability of Services Hosted on IaaS Clouds with Structural Constraint-aware Virtual Machine Placement," in Services Computing (SCC), 2011 IEEE International Conference on. IEEE, 2011, pp. 72-79.
17. S. Zhuravlev, S. Blagodurov, and A. Fedorova, "Addressing Shared Resource Contention in Multicore Processors via Scheduling," SIGARCH Comput. Archit. News, vol. 38, no. 1, pp. 129-142, Mar. 2010.
18. J. Li, M. Qiu, J. Niu, W. Gao, Z. Zong, and X. Qin, "Feedback Dynamic Algorithms for Preemptable Job Scheduling in Cloud Systems," in Proceedings of the 2010 IEEE/WIC/ACM International Conference on Web Intelligence and Intelligent Agent Technology-Volume 01, ser. WI-IAT '10. Washington, DC, USA: IEEE Computer Society, 2010, pp. 561-564.
19. C. Klein and C. Perez, "An RMS for Non-predictably Evolving Applications," Cluster Computing, IEEE International Conference on, vol. 0, pp. 326-334, 2011.
20. R. Bolze, F. Cappello, E. Caron, M. Daydé, F. Desprez, E. Jeannot, Y. Jégou, S. Lanteri, J. Leduc, N. Melab, G. Mornet, R. Namyst, P. Primet, B. Quetier, O. Richard, E.-G. Talbi, and T. Irena, "Grid'5000: a large scale and highly reconfigurable experimental grid testbed." International Journal of High Performance Computing Applications, vol. 20, no. 4, pp. 481-494, Nov. 2006.