Co-location-resistant clouds

Proceedings of the ACM Conference on Computer and Communications Security

Volumn 2014-November, Issue November, 2014, Pages 9-20

  Azar, Yossi ^a   Kamara, Seny ^b   Menache, Ishai ^b   Raykovau, Mariana ^c   Shepherdu, Bruce ^d  

^a TEL AVIV UNIVERSITY   (Israel)

^b MICROSOFT RESEARCH   (United States)

^c SRI INTERNATIONAL   (United States)

^d MCGILL UNIVERSITY   (Canada)

Author keywords

Bin packing; Cloud computing; Co location attacks; Co location resistance; Cross VM attacks; Cryptography; Isolation

Indexed keywords

CLOUD COMPUTING; CRYPTOGRAPHY; LOCATION; VIRTUAL MACHINE;

BIN PACKING; BIN PACKING ALGORITHM; COLOCATIONS; CROSS-VM ATTACKS; ISOLATION; ONLINE BIN PACKING; PLACEMENT ALGORITHM; PUBLIC INFRASTRUCTURES;

SIDE CHANNEL ATTACK;

EID: 84937709982     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2664168.2664179     Document Type: Conference Paper

References (25)

1. A. Aviram, S. Hu, B. Ford, and R. Gummadi. Determinating timing channels in compute clouds. In ACM Cloud Computing Security Workshop (CCSW), pages 103-108, 2010.
2. Y. Azar, I. Cohen, S. Kamara, and B. Shepherd. Tight bounds for online vector bin packing. In ACM Symposium on Theory of Computing (STOC '13), pages 961-970, 2013.
3. R. Canetti. Security and composition of multi-party cryptographic protocols. Journal of Cryptology, 13(1), 2000.
4. P. Erdos and A. Renyi. On a classical problem of probability theory. Magyar Tud. Akad. Mat. Kutató Int. Közl., 6:215-220, 1961.
5. M. R Garey, R. L. Graham, D. S. Johnson, and A. Yao. Resource constrained scheduling as generalized bin packing. Journal of Combinatorial Theory, Series A, 21(3):257-298, 1976.
6. S. Kamara and M. Raykova. Secure outsourced computation in a multi-tenant cloud. Technical report, Workshop on Cryptography and Security in Clouds 2011.
7. T. Kim, M. Peinado, and G. Mainar-Ruiz. System-level protection against cache-based side channel attacks in the cloud. In USENIX Security, 2012.
8. S. Lee, R. Panigrahy, V. Prabhakaran, V. Ramasubramanian, K. Talwar, L. Uyeda, and U. Wieder. Validating heuristics for virtual machines consolidation. Technical Report MSR-TR-2011-9, Microsoft Research, 2011.
9. P. Li, D. Gao, and M. Reiter. Mitigating access-driven timing channels in clouds using stopwatch. In IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), pages 1-12, 2013.
10. H. Liu. Amazon data center size. http://huanliu.wordpress.com/2012/03/13/amazon-data-center-size/, 2012.
11. R. Martin, J. Demme, and S. Sethumadhavan. Timewarp: Rethinking timekeeping and performance monitoring mechanisms to mitigate side-channel attacks. ACM SIGARCH Computer Architecture News, 40(3):118-129, 2012.
12. A. Maurer. A bound on the deviation probability for sums of non-negative random variables. Journal of Inequalities in Pure and Applied Mathematics, 4(1):15, 2003.
13. R. Panigrahy, K. Talwar, L. Uyeda, and U. Wieder. Heuristics for vector bin packing. Technical report, Microsoft Research, 2011.
14. H. Raj, R. Nathuji, A. Singh, and P. England. Resource management for isolation enhanced cloud services. In ACM Cloud Computing Security Workshop (CCSW), pages 77-84, 2009.
15. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds. In ACM conference on Computer and communications security (CCS '09), pages 199-212. ACM, 2009.
16. J. Shi, X. Song, H. Chen, and B. Zang. Limiting cache-based side-channel in multi-tenant cloud using dynamic page coloring. In IEEE/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W), pages 194-199, 2011.
17. D. Sleator and R. Tarjan. Amortized efficiency of list update and paging rules. Communications of the ACM, 28(2):202-208, 1985.
18. M. Tremante. Amazon web services' growth unrelenting. http://news.netcraft.com/archives/2013/05/20/amazon-web-services-growth-unrelenting.html, 2013.
19. V. Varadarajan, T. Ristenpart, and M. Swift. Scheduler-based defenses against cross-vm side-channels. In Usenix Security, 2014.
20. B. Vattikonda, S. Das, and H. Shacham. Eliminating fine grained timers in xen. In ACM Cloud Computing Security Workshop (CCSW), pages 41-46, 2011.
21. Z. Wang and R. Lee. New cache designs for thwarting software cache-based side channel attacks. ACM SIGARCH Computer Architecture News, 35(2):494-505, 2007.
22. Z. Wang and R. Lee. A novel cache architecture with enhanced performance and security. In IEEE/ACM International Symposium on Microarchitecture (MICRO)., pages 83-93, 2008.
23. G. Woeginger. There is no asymptotic PTAS for two-dimensional vector packing. Information Processing Letters, 64(6):293-297, 1997.
24. Y. Zhang, A. Juels, M. Reiter, and T. Ristenpart. Cross-vm side channels and their use to extract private keys. In ACM Conference on Computer and Communications Security (CCS '12), pages 305-316, 2012.
25. Y. Zhang and M. Reiter. Düppel: Retrofitting commodity operating systems to mitigate cache side channels in the cloud. In Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security, pages 827-838, 2013.