VC3: Trustworthy data analytics in the cloud using SGX

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2015-July, Issue , 2015, Pages 38-54

  Schuster, Felix ^a,b   Costa, Manuel ^a   Fournet, Cédric ^a   Gkantsidis, Christos ^a   Peinado, Marcus ^a   Mainar Ruiz, Gloria ^a   Russinovich, Mark ^a  

^a MICROSOFT RESEARCH   (United States)

^b RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

DATA ANALYTICS; TRUSTED COMPUTING;

CODE RUNNING; FIRST SYSTEMS; ISOLATED REGIONS; LARGE COMPONENTS; MAP-REDUCE; MEMORY REGION; NEW PROTOCOL; RUNTIME OVERHEADS;

CODES (SYMBOLS);

EID: 84945188553     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2015.10     Document Type: Conference Paper

References (69)

1. M. Abadi, M. Budiu, U. Erlingsson, and J. Ligatti. Control-Flow Integrity: Principles, Implementations, and Applications. In ACM Conference on Computer and Communications Security (CCS), 2005.
2. P. Akritidis, C. Cadar, C. Raiciu, M. Costa, and M. Castro. Preventing memory error exploits with WIT. In IEEE Symposium on Security and Privacy, 2008.
3. I. Anati, S. Gueron, S. Johnson, and V. Scarlata. Innovative technology for CPU based attestation and sealing. In Workshop on Hardware and Architectural Support for Security and Privacy (HASP), 2013.
4. Apache Software Foundation. Hadoop. http://wiki.apache.org/hadoop/, Accessed: 11/05/2014.
5. Apache Software Foundation. HadoopStreaming. http://hadoop.apache. org/docs/r1.2.1/streaming.html, Accessed: 11/05/2014.
6. A. Arasu, S. Blanas, K. Eguro, R. Kaushik, D. Kossmann, R. Rama-murthy, and R. Venkatesan. Orthogonal security with Cipherbase. In Conference on Innovative Data Systems Research (CIDR), 2013.
7. S. Bajaj and R. Sion. TrustedDB: A trusted hardware-based database with privacy and data confidentiality. In IEEE Transactions on Knowledge and Data Engineering, volume 26, 2014.
8. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neuge-bauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In ACM Symposium on Operating Systems Principles (SOSP), 2003.
9. A. Baumann, M. Peinado, and G. Hunt. Shielding applications from an untrusted cloud with haven. In USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2014.
10. M. Bellare, A. Desai, D. Pointcheval, and P. Rogaway. Relations among notions of security for public-key encryption schemes. In Advances in Cryptology-CRYPTO, 1998.
11. M. Bellare and C. Namprempre. Authenticated encryption: Relations among notions and analysis of the generic composition paradigm. In Advances in Cryptology-ASIACRYPT, 2000.
12. E.-O. Blass, R. Di Pietro, R. Molva, and M. Ö nen. Prism-privacy-preserving search in MapReduce. In S. Fischer-Hübner and M. Wright, editors, Privacy Enhancing Technologies, volume 7384 of Lecture Notes in Computer Science. Springer Berlin Heidelberg, 2012.
13. B. Braun, A. J. Feldman, Z. Ren, S. Setty, A. J. Blumberg, and M. Walfish. Verifying computations with state. In ACM Symposium on Operating Systems Principles (SOSP), 2013.
14. S. Brenner, C. Wulf, and R. Kapitza. Running ZooKeeper coordination services in untrusted clouds. In USENIX Workshop on Hot Topics in Systems Dependability (HotDep), 2014.
15. E. Brickell and J. Li. Enhanced privacy ID from bilinear pairing for hardware authentication and attestation. In IEEE International Conference on Social Computing (SocialCom), 2010.
16. S. Chen, R. Wang, X. Wang, and K. Zhang. Side-channel leaks in web applications: A reality today, a challenge tomorrow. In IEEE Symposium on Security and Privacy, 2010.
17. X. Chen, T. Garfinkel, E. C. Lewis, P. Subrahmanyam, C. A. Waldspurger, D. Boneh, J. Dwoskin, and D. R. Ports. Overshadow: A virtualization-based approach to retrofitting protection in commodity operating systems. In International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2008.
18. J. Criswell, N. Dautenhahn, and V. Adve. Virtual Ghost: Protecting applications from hostile operating systems. In International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2014.
19. I. Damgård, V. Pastro, N. Smart, and S. Zakarias. Multiparty computation from somewhat homomorphic encryption. In Advances in Cryptology-CRYPTO, 2012.
20. J. Dean and S. Ghemawat. MapReduce: simplified data processing on large clusters. Commun. ACM, 51(1), 2008.
21. C. Fournet, M. Kohlweiss, G. Danezis, and Z. Luo. ZQL: A compiler for privacy-preserving data processing. In USENIX Security Symposium, 2013.
22. C. Gentry. Fully homomorphic encryption using ideal lattices. In ACM Symposium on Theory of Computing (STOC), 2009.
23. C. Gentry and S. Halevi. Implementing Gentry's fully-homomorphic encryption scheme. In Advances in Cryptology-EUROCRYPT, 2011.
24. E. Göktaş, E. Athanasopoulos, H. Bos, and G. Portokalidis. Out of control: Overcoming control-flow integrity. In IEEE Symposium on Security and Privacy, 2014.
25. S. Gueron and M. E. Kounavis. Intel carry-less multiplication instruction and its usage for computing the GCM mode, 2010. No. 323640-001.
26. C. Hawblitzel, J. Howell, J. R. Lorch, A. Narayan, B. Parno, D. Zhang, and B. Zill. Ironclad Apps: End-to-end security via automated full-system verification. In USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2014.
27. M. Hoekstra, R. Lal, P. Pappachan, C. Rozas, V. Phegade, and J. del Cuvillo. Using innovative instructions to create trustworthy software solutions. In Workshop on Hardware and Architectural Support for Security and Privacy (HASP), 2013.
28. O. S. Hofmann, S. Kim, A. M. Dunn, M. Z. Lee, and E. Witchel. Inktag: Secure applications on an untrusted operating system. In International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2013.
29. Y. Huang, D. Evans, J. Katz, and L. Malka. Faster secure two-party computation using garbled circuits. In USENIX Security Symposium, 2011.
30. Intel Corp. Intel 64 and IA-32 architectures software developer's manual-combined volumes: 1, 2a, 2b, 2c, 3a, 3b and 3c, 2013. No. 325462-048.
31. Intel Corp. Intel trusted execution technology. software development guide, 2013. No. 315168-009.
32. Intel Corp. Software guard extensions programming reference, 2013. No. 329298-001.
33. S. Y. Ko, K. Jeon, and R. Morales. The Hybrex model for confidentiality and privacy in cloud computing. In USENIX Workshop on Hot Topics in Cloud Computing (HotCloud), 2011.
34. V. Kuznetsov, L. Szekeres, M. Payer, G. Candea, R. Sekar, and D. Song. Code-pointer integrity. In USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2014.
35. J. Li, M. Krohn, D. Mazieres, and D. Shasha. Secure untrusted data repository (SUNDR). In USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2004.
36. Y. Li, J. McCune, J. Newsome, A. Perrig, B. Baker, and W. Drewry. MiniBox: A two-way sandbox for x86 native code. In Usenix ATC, 2014.
37. D. Lie, M. Thekkath, M. Mitchell, P. Lincoln, D. Boneh, J. Mitchell, and M. Horowitz. Architectural support for copy and tamper resistant software. In International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), 2000.
38. J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. D. Gligor, and A. Perrig. Trustvisor: Efficient TCB reduction and attestation. In IEEE Symposium on Security and Privacy, 2010.
39. J. M. McCune, B. J. Parno, A. Perrig, M. K. Reiter, and H. Isozaki. Flicker: an execution infrastructure for TCB minimization. In European Conference on Computer Systems (EuroSys), 2008.
40. D. McGrew and J. Viega. The Galois/counter mode of operation (GCM). Submission to NIST Modes of Operation Process, 2004.
41. F. Mckeen, I. Alexandrovich, A. Berenzon, C. Rozas, H. Shafi, V. Shanbhogue, and U. Savagaonkar. Innovative instructions and software model for isolated execution. In Workshop on Hardware and Architectural Support for Security and Privacy (HASP), 2013.
42. G. Morris and M. Aubury. Design space exploration of the European option benchmark using hyperstreams. In IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM), 2007.
43. S. Nagarakatte, J. Zhao, M. M. Martin, and S. Zdancewic. SoftBound: Highly compatible and complete spatial memory safety for C. In ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), 2009.
44. S. Nagarakatte, J. Zhao, M. M. Martin, and S. Zdancewic. CETS: compiler enforced temporal safety for C. In International Symposium on Memory Management, 2010.
45. O. Ohrimenko, M. T. Goodrich, R. Tamassia, and E. Upfal. The Melbourne shuffle: Improving oblivious storage in the cloud. In International Colloquium on Automata, Languages and Programming (ICALP), 2014.
46. E. Owusu, J. Guajardo, J. McCune, J. Newsome, A. Perrig, and A. Vasudevan. Oasis: On achieving a sanctuary for integrity and secrecy on untrusted platforms. In ACM Conference on Computer and Communications Security (CCS), 2013.
47. B. Parno. Bootsrapping trust in a "trusted" platform. In USENIX Workshop on Hot Topics in Security (HotSec), 2008.
48. B. Parno, C. Gentry, J. Howell, and M. Raykova. Pinocchio: Nearly practical verifiable computation. In IEEE Symposium on Security and Privacy, 2013.
49. A. Pavlo, E. Paulson, A. Rasin, D. J. Abadi, D. J. DeWitt, S. Madden, and M. Stonebraker. A comparison of approaches to large-scale data analysis. In ACM SIGMOD International Conference on Management of Data, 2009.
50. R. A. Popa, C. M. S. Redfield, N. Zeldovich, and H. Balakrishnan. CryptDB: Protecting confidentiality with encrypted query processing. In ACM Symposium on Operating Systems Principles (SOSP), 2011.
51. R. A. Popa, E. Stark, J. Helfer, S. Valdez, N. Zeldovich, M. F. Kaashoek, and H. Balakrishnan. Building web applications on top of encrypted data using Mylar. In USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2014.
52. I. Roy, S. T. Setty, A. Kilzer, V. Shmatikov, and E. Witchel. Airavat: Security and privacy for MapReduce. In USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2010.
53. M. Russinovich and D. Solomon. Windows Internals, Part 1. Microsoft Press Corp., 6th edition, 2012.
54. N. Santos, R. Rodrigues, K. P. Gummadi, and S. Saroiu. Policy-sealed data: A new abstraction for building trusted cloud services. In USENIX Security Symposium, 2012.
55. F. Schuster, M. Costa, C. Fournet, C. Gkantsidis, M. Peinado, G. Mainar-Ruiz, and M. Russinovich. V C3: Trustworthy data analytics in the cloud. Technical Report MSR-TR-2014-39, Microsoft Research, 2014.
56. D. Song, D. Wagner, and X. Tian. Timing analysis of keystrokes and SSH timing attacks. In USENIX Security Symposium, 2001.
57. R. Strackx, B. Jacobs, and F. Piessens. ICE: A passive, high-speed, state-continuity scheme. In Anual Computer Security Applications Conference (ACSAC), 2014.
58. R. Strackx and F. Piessens. Fides: Selectively hardening software application components against kernel-level or process-level malware. In ACM Conference on Computer and Communications Security (CCS), 2012.
59. G. Suh, D. Clarke, B. Gassend, M. van Dijk, and S. Devadas. AEGIS: Architecture for tamper-evident and tamper-resistant processing. In International Conference on Supercomputing (ICS), 2003.
60. L. Szekeres, M. Payer, T. Weiz, and D. Song. Sok: Eternal war in memory. In IEEE Symposium on Security and Privacy, 2013.
61. S. D. Tetali, M. Lesani, R. Majumdar, and T. Millstein. MrCrypt: Static analysis for secure cloud computations. In Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), 2013.
62. Trusted Computing Group. Trusted platform module main specification. version 1.2, revision 103, 2007.
63. K. H. Tsoi, K.-H. Lee, and P. H. W. Leong. A massively parallel RC4 key search engine. In IEEE Symposium on Field-Programmable Custom Computing Machines (FCCM), 2002.
64. S. Tu, M. F. Kaashoek, S. Madden, and N. Zeldovich. Processing analytical queries over encrypted data. In VLDB, 2013.
65. M. Van Dijk and A. Juels. On the impossibility of cryptography alone for privacy-preserving cloud computing. In USENIX Workshop on Hot Topics in Security (HotSec), 2010.
66. R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham. Efficient software-based fault isolation. In ACM Symposium on Operating Systems Principles (SOSP), 1993.
67. W. Wei, J. Du, T. Yu, and X. Gu. Securemr: A service integrity assurance framework for mapreduce. In Anual Computer Security Applications Conference (ACSAC), 2009.
68. C. Wright, L. Ballard, S. Coull, F. Monrose, and G. Masson. Spot me if you can: Uncovering spoken phrases in encrypted VoIP conversations. In IEEE Symposium on Security and Privacy, 2008.
69. F. Zhang, J. Chen, H. Chen, and B. Zang. CloudVisor: Retrofitting protection of virtual machines in multi-tenant cloud with nested virtual-ization. In ACM Symposium on Operating Systems Principles (SOSP), 2011.