Microarchitecture-Aware Virtual Machine Placement under Information Leakage Constraints

Proceedings - 2015 IEEE 8th International Conference on Cloud Computing, CLOUD 2015

Volumn , Issue , 2015, Pages 588-595

  Lefray, Arnaud ^a,c   Caron, Eddy ^a   Rouzaud Cornabas, Jonathan ^b   Toinard, Christian ^c  

^a UNIV LYON   (France)

^b CNRS   (France)

^c INSA CENTRE VAL DE LOIRE   (France)

Author keywords

Cloud; Covert channels; Isolation; Microarchitecture; Security; Virtual Machine Placement

Indexed keywords

CLOUDS; COMPUTER ARCHITECTURE; VIRTUAL REALITY;

COVERT CHANNELS; ISOLATION; MICRO ARCHITECTURES; SECURITY; VIRTUAL MACHINE PLACEMENTS;

CLOUD COMPUTING;

EID: 84960173045     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CLOUD.2015.84     Document Type: Conference Paper

References (24)

1. D. Balouek, A. Carpen Amarie, G. Charrier, F. Desprez, E. Jeannot, E. Jeanvoine, A. Lèbre, D. Margery, N. Niclausse, L. Nussbaum, O. Richard, C. Pérez, F. Quesnel, C. Rohr, and L. Sarzyniec. Adding virtualization capabilities to the Grid'5000 testbed. In Cloud Computing and Services Science, volume 367 of Communications in Computer and Information Science, pages 3-20. Springer International Publishing, 2013.
2. F. Broquedis, J. Clet-Ortega, S. Moreaud, N. Furmento, B. Goglin, G. Mercier, S. Thibault, and R. Namyst. hwloc: A Generic Framework for Managing Hardware Affinities in HPC Applications. In Parallel, Distributed and Network-Based Processing (PDP), 2010 18th Euromicro International Conference on, pages 180-186, feb. 2010.
3. E. Caron and J. Rouzaud-Cornabas. Improving users' isolation in iaas: Virtual machine placement with security constraints. In IEEE CLOUD 2014. 7th IEEE International Conference on Cloud Computing, Anchorage, USA, June 27-July 2 2014. IEEE Computer Society.
4. E. G. Coffman, Jr., M. R. Garey, and D. S. Johnson. Approximation algorithms for np-hard problems. chapter Approximation Algorithms for Bin Packing: A Survey, pages 46-93. PWS Publishing Co., Boston, MA, USA, 1997.
5. J. Demme, R. Martin, A. Waksman, and S. Sethumadhavan. Sidechannel vulnerability factor: A metric for measuring information leakage. In 2012 39th Annual International Symposium on Computer Architecture (ISCA), pages 106-117, June 2012.
6. T. Jaeger and J. Schiffman. Outlook: Cloudy with a Chance of Security Challenges and Improvements. IEEE Security & Privacy Magazine, 8(1):77-80, Jan. 2010.
7. D. Jayasinghe, C. Pu, T. Eilam, M. Steinder, I. Whally, and E. Snible. Improving Performance and Availability of Services Hosted on IaaS Clouds with Structural Constraint-aware Virtual Machine Placement. In Services Computing (SCC), 2011 IEEE International Conference on, pages 72-79. IEEE, 2011.
8. E. Keller, J. Szefer, J. Rexford, and R. B. Lee. NoHype: Virtualized Cloud Infrastructure without the Virtualization. SIGARCH Comput. Archit. News, 38(3):350-361, June 2010.
9. M. Maiza and M. S. Radjef. Heuristics for solving the bin-packing problem with conflicts. Applied Mathematical Sciences, 5(35):1739-1752, 2011.
10. L. W. McVoy, C. Staelin, et al. lmbench: Portable tools for performance analysis. In USENIX annual technical conference, pages 279-294. San Diego, CA, USA, 1996.
11. K. Okamura and Y. Oyama. Load-based covert channels between xen virtual machines. In Proceedings of the 2010 ACM Symposium on Applied Computing, SAC '10, page 173180, New York, NY, USA, 2010. ACM.
12. C. Percival. Cache missing for fun and profit. 2005.
13. H. Raj, R. Nathuji, and A. Singh. Resource management for isolation enhanced cloud services. CCSW '09 Proceedings of the 2009 ACM workshop on Cloud computing security, page 77, 2009.
14. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds. In Proceedings of the 16th ACM conference on Computer and communications security, CCS '09, pages 199-212, New York, NY, USA, 2009. ACM.
15. G. J. Simmons. The prisoners' problem and the subliminal channel. In Advances in Cryptology: Proceedings of CRYPTO '83, pages 51-67. Plenum, 1983.
16. K. Taesoo, M. Peinado, and G. Mainar-Ruiz. System-Level Protection Against Cache-based Side Channel Attacks in the Cloud. In Proceedings of the 21st Usenix Security Symposium, USENIX Security'12, pages 1-16, Berkeley, CA, USA, 2012. USENIX Association.
17. TCSEC. Trusted Computer System Evaluation Criteria. Technical Report DoD 5200. 28-STD, Department of Defense, 1985.
18. V. Varadarajan, T. Kooburat, B. Farley, T. Ristenpart, and M. M. Swift. Resource-Freeing Attacks: Improve your Cloud Performance (At your Neighbor's Expense). In Proceedings of the 2012 ACM conference on Computer and communications security, CCS '12, pages 281-292, New York, NY, USA, 2012. ACM.
19. Z. Wang and R. Lee. Covert and side channels due to processor architecture. In Computer Security Applications Conference, 2006. ACSAC '06. 22nd Annual, pages 473-482, Dec. 2006.
20. J. Wu, L. Ding, Y. Wang, and W. Han. Identification and evaluation of sharing memory covert timing channel in xen virtual machines. In 2011 IEEE International Conference on Cloud Computing (CLOUD), pages 283-291, July 2011.
21. Z. Wu, Z. Xu, and H. Wang. Whispers in the hyper-space: high-speed covert channel attacks in the cloud. In Proceedings of the 21st USENIX conference on Security symposium, Security'12, pages 9-9, Berkeley, CA, USA, 2012. USENIX Association.
22. Y. Xu, M. Bailey, F. Jahanian, K. Joshi, M. Hiltunen, and R. Schlichting. An exploration of l2 cache covert channels in virtualized environments. In Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop, CCSW '11, page 2940, New York, NY, USA, 2011. ACM.
23. T. Zhang, F. Liu, S. Chen, and R. B. Lee. Side channel vulnerability metrics: The promise and the pitfalls. In Proceedings of the 2Nd International Workshop on Hardware and Architectural Support for Security and Privacy, HASP '13, pages 2:1-2:8, New York, NY, USA, 2013. ACM.
24. Y. Zhang, A. Juels, A. Oprea, and M. Reiter. HomeAlone: Coresidency detection in the cloud via side-channel analysis. In 2011 IEEE Symposium on Security and Privacy (SP), pages 313-328, May 2011.