Fast, scalable and secure onloading of edge functions using Airbox

Proceedings - 1st IEEE/ACM Symposium on Edge Computing, SEC 2016

Volumn , Issue , 2016, Pages 14-27

  Bhardwaj, Ketan ^a   Shih, Ming Wei ^a   Agarwal, Pragya ^a   Gavrilovska, Ada ^a   Kim, Taesoo ^a   Schwan, Karsten ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

Edge Cloud; Edge Computing; Intel SGX; Security

Indexed keywords

COMPUTER PROGRAMMING; COMPUTER SCIENCE;

CURRENT TECHNOLOGY; DETAILED DESIGN; EDGE CLOUDS; EDGE COMPUTING; HARDWARE SUPPORTS; INTEL SGX; NOCV1; SECURITY; TRUSTED EXECUTION ENVIRONMENTS;

SPACE PLATFORMS;

EID: 85010799854     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SEC.2016.15     Document Type: Conference Paper

References (48)

1. E. Cuervo, A. Balasubramanian, D.-k. Cho, A. Wolman, S. Saroiu, R. Chandra, and P. Bahl, "Maui: making smartphones last longer with code offload," in Mobisys '10. ACM
2. B.-G. Chun, S. Ihm, P. Maniatis, M. Naik, and A. Patti, "Clonecloud: elastic execution between mobile device and cloud," in Eurosys '11
3. M. S. Gordon, D. A. Jamshidi, S. A. Mahlke, Z. M. Mao, and X. Chen, "Comet: Code offload by migrating execution transparently." in OSDI '12
4. A. Pamboris, M. Baguena, A. L. Wolf, P. Manzoni, and P. Pietzuch, "Demo:: Nomad: An edge cloud platform for hyper-responsive mobile apps," in Proceedings of the 13th Annual International Conference on Mobile Systems, Applications, and Services, ser. MobiSys '15. New York, NY, USA: ACM, 2015, pp. 459-459. [Online]. Available: http://doi.acm.org/10.1145/2742647.2745928
5. K. Bhardwaj, P. Agarwal, A. Gavrilovska, K. Schwan, and A. Allred, "Appflux: Taming mobile app delivery via streaming," in TRIOS '15. Monterey, CA, USA: USENIX Association
6. K. Ha, Z. Chen, W. Hu, W. Richter, P. Pillai, and M. Satyanarayanan, "Towards wearable cognitive assistance," in Proceedings of the 12th Annual International Conference on Mobile Systems, Applications, and Services, ser. MobiSys '14. New York, NY, USA: ACM, 2014, pp. 68-81. [Online]. Available: http://doi.acm.org/10.1145/2594368.2594383
7. K. Bhardwaj, P. Agarwal, A. Gavrilovska, and K. Schwan, "Appsachet: Distributed app delivery from the edge cloud," in MobiCASE 2015
8. K. Ha, P. Pillai, W. Richter, Y. Abe, and M. Satyanarayanan, "Just-in-time provisioning for cyber foraging," in Proceeding of the 11th Annual International Conference on Mobile Systems, Applications, and Services, ser. MobiSys '13. New York, NY, USA: ACM, 2013, pp. 153-166. [Online]. Available: http://doi.acm.org/10.1145/2462456.2464451
9. A. Baumann, M. Peinado, and G. Hunt, "Shielding applications from an untrusted cloud with haven," in Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation, ser. OSDI'14. Berkeley, CA, USA: USENIX Association, 2014, pp. 267-283. [Online]. Available: http://dl.acm.org/citation.cfmid=2685048.2685070
10. F. Schuster, M. Costa, C. Fournet, C. Gkantsidis, M. Peinado, G. Mainar-Ruiz, and M. Russinovich, "Vc3: Trustworthy data analytics in the cloud," Tech. Rep. MSR-TR-2014-39, February 2014. [Online]. Available: http://research.microsoft. com/apps/pubs/default.aspxid=210786
11. P. Jain, S. Desai, S. Kim, M.-W. Shih, J. Lee, C. Choi, Y. Shin, T. Kim, B. B. Kang, and D. Han, "OpenSGX: An Open Platform for SGX Research," in Proceedings of the Network and Distributed System Security Symposium, San Diego, CA, Feb. 2016
12. F. McKeen, I. Alexandrovich, A. Berenzon, C. Rozas, H. Shafi, V. Shanbhogue, and U. Savagaonkar, "Innovative instructions and software model for isolated execution," https: //goo.gl/6mp7ww
13. Intel software guard extensions programming reference. https://goo.gl/sy0tRu.
14. J. Howell, J. Elson, B. Parno, and J. R. Douceur, "Missive: Fast application launch from an untrusted buffer cache," in Proceedings of the 2014 USENIX Conference on USENIX Annual Technical Conference, ser. USENIX ATC'14. Berkeley, CA, USA: USENIX Association, 2014, pp. 145-156. [Online]. Available: http: //dl.acm.org/citation.cfmid=2643634.2643650
15. An updated performance comparison of virtual machines and linux containers. http://goo.gl/fhDwse.
16. J. N. Matthews, W. Hu, M. Hapuarachchi, T. Deshane, D. Dimatos, G. Hamilton, M. McCabe, and J. Owens, "Quantifying the performance isolation properties of virtualization systems," in Proceedings of the 2007 Workshop on Experimental Computer Science, ser. ExpCS '07. New York, NY, USA: ACM, 2007. [Online]. Available: http://doi.acm.org/10.1145/1281700.1281706
17. B. Yee, D. Sehr, G. Dardyk, B. Chen, R. Muth, T. Ormandy, S. Okasaka, N. Narula, and N. Fullagar, "Native client: A sandbox for portable, untrusted x86 native code," in IEEE Symposium on Security and Privacy (Oakland'09), IEEE, 3 Park Avenue, 17th Floor, New York, NY 10016, 2009. [Online]. Available: http://nativeclient.googlecode.com/svn/data/docs tarball/nacl/ googleclient/native client/documentation/nacl paper.pdf
18. A. Madhavapeddy, T. Leonard, M. Skjegstad, T. Gazagnaire, D. Sheets, D. Scott, R. Mortier, A. Chaudhry, B. Singh, J. Ludlam, J. Crowcroft, and I. Leslie, "Jitsu: Just-in-time summoning of unikernels," in 12th USENIX Symposium on Networked Systems Design and Implementation (NSDI 15). Oakland, CA: USENIX Association, May 2015, pp. 559-573. [Online]. Available: https://www.usenix.org/conference/ nsdi15/technical-sessions/presentation/madhavapeddy
19. Docker. https://www.docker.com/.
20. J. Howell, B. Parno, and J. R. Douceur, "Embassies: Radically refactoring the web," in Proceedings of the 10th USENIX Conference on Networked Systems Design and Implementation, ser. nsdi'13. Berkeley, CA, USA: USENIX Association, 2013, pp. 529-546. [Online]. Available: http: //dl.acm.org/citation.cfm'id=2482626.2482676
21. Docker on windows. http://goo.gl/oAT5NM.
22. J. Howell, B. Parno, and J. R. Douceur, "How to run posix apps in a minimal picoprocess," in Proceedings of the 2013 USENIX Conference on Annual Technical Conference, ser. USENIX ATC'13. Berkeley, CA, USA: USENIX Association, 2013, pp. 321-332. [Online]. Available: http: //dl.acm.org/citation.cfm?id=2535461.2535500
23. J. R. Douceur, J. Elson, J. Howell, and J. R. Lorch, "Leveraging legacy code to deploy desktop applications on the web," in Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation, ser. OSDI?08. Berkeley, CA, USA: USENIX Association, 2008, pp. 339-354. [Online]. Available: http://dl.acm.org/citation. cfm?id=1855741.1855765
24. "Aufs-layered filesystem @ http://goo.gl/z5l9fc." [Online]. Available: http://goo.gl/Z5l9FC
25. S. Checkoway and H. Shacham, "Iago attacks: Why the system call api is a bad untrusted rpc interface," in Proceedings of the Eighteenth International Conference on Architectural Support for Programming Languages and Operating Systems, ser. ASPLOS-13. New York, NY, USA: ACM, 2013, pp. 253-264. [Online]. Available: http://doi.acm.org/10.1145/2451116.2451145
26. J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. Gligor, and A. Perrig, "Trustvisor: Efficient tcb reduction and attestation," in Proceedings of the 2010 IEEE Symposium on Security and Privacy, ser. SP-10. Washington, DC, USA: IEEE Computer Society, 2010, pp. 143-158. [Online]. Available: http://dx.doi.org/10.1109/SP.2010.17
27. O. S. Hofmann, S. Kim, A. M. Dunn, M. Z. Lee, and E. Witchel, "Inktag: Secure applications on an untrusted operating system," in Proceedings of the Eighteenth International Conference on Architectural Support for Programming Languages and Operating Systems, ser. ASPLOS-13. New York, NY, USA: ACM, 2013, pp. 265-278. [Online]. Available: http://doi.acm.org/10.1145/ 2451116.2451146
28. S. Garriss, R. Caceres, S. Berger, R. Sailer, L. van Doorn, and X. Zhang, "Trustworthy and personalized computing on public kiosks," in Proceedings of the 6th International Conference on Mobile Systems, Applications, and Services, ser. MobiSys-08. New York, NY, USA: ACM, 2008, pp. 199-210. [Online]. Available: http: //doi.acm.org/10.1145/1378600.1378623
29. Y.-Y. Su and J. Flinn, "Slingshot: Deploying stateful services in wireless hotspots," in Proceedings of the 3rd International Conference on Mobile Systems, Applications, and Services, ser. MobiSys-05. New York, NY, USA: ACM, 2005, pp. 79-92. [Online]. Available: http://doi.acm.org/10.1145/ 1067170.1067180
30. S. Goyal and J. Carter, "A lightweight secure cyber foraging infrastructure for resource-constrained devices," in Proceedings of the Sixth IEEE Workshop on Mobile Computing Systems and Applications, ser. WMCSA-04. Washington, DC, USA: IEEE Computer Society, 2004, pp. 186-195. [Online]. Available: http://dx.doi.org/10.1109/ MCSA.2004.2
31. Docker trusted registry service. https://goo.gl/lTZWhM.
32. J. Sherry, C. Lan, R. A. Popa, and S. Ratnasamy, "Blindbox: Deep packet inspection over encrypted traffic," in Proceedings of the 2015 ACM Conference on Special Interest Group on Data Communication, ser. SIGCOMM-15. New York, NY, USA: ACM, 2015, pp. 213-226. [Online]. Available: http://doi.acm.org/10.1145/2785956.2787502
33. D. Naylor, K. Schomp, M. Varvello, I. Leontiadis, J. Blackburn, D. R. Lopez, K. Papagiannaki, P. Rodriguez Rodriguez, and P. Steenkiste, "Multi-context tls (mctls): Enabling secure in-network functionality in tls," in Proceedings of the 2015 ACM Conference on Special Interest Group on Data Communication, ser. SIGCOMM-15. New York, NY, USA: ACM, 2015, pp. 199-212. [Online]. Available: http://doi.acm.org/10.1145/2785956.2787482
34. K. Bhardwaj, P. Agarwal, A. Gavrilovska, and K. Schwan, "Appsachet: Distributed app delivery from the edge cloud," in MobiCASE 2015
35. K. Bhardwaj, P. Agarwal, A. Gavrilovska, K. Schwan, and A. Allred, "Appflux: Taming mobile app delivery via app streaming," in TRIOS 15
36. K. Ha, Z. Chen, W. Hu, W. Richter, P. Pillai, and M. Satyanarayanan, "Towards wearable cognitive assistance," in Mobisys-14
37. Etsi mobile edge computing. http://goo.gl/Qef61X.
38. M. Satyanarayanan, P. Bahl, R. Caceres, and N. Davies, "The case for vm-based cloudlets in mobile computing," IEEE Pervasive Computing-09
39. Emergence of micro data centers at the edge. http://goo.gl/ dVH6ji.
40. Qualcomm small cells. http://goo.gl/HEpudP.
41. Att small cell deployment plans.http://goo.gl/XdfkfH.
42. Att wifi hotspot locations. http://goo.gl/XdfkfH.
43. Qualcomm smart gateways. http://goo.gl/BwPc7f.
44. D. F. Willis, A. Dasgupta, and S. Banerjee, "Paradrop: A multi-tenant platform for dynamically installed third party services on home gateways," in Proceedings of the 2014 ACM SIGCOMM Workshop on Distributed Cloud Computing, ser. DCC-14. New York, NY, USA: ACM, 2014, pp. 43-44. [Online]. Available: http: //doi.acm.org/10.1145/2627566.2627583
45. J. Sen, "Security and privacy issues in cloud computing," Architectures and Protocols for Secure Information Technology Infrastructures, pp. 1-45, 2013
46. R. Illera, S. Ortega, and M. Petychakis, "Security and privacy considerations for cloud-based services and cloudlets," 2013
47. H. Suo, Z. Liu, J. Wan, and K. Zhou, "Security and privacy in mobile cloud computing," in Wireless Communications and Mobile Computing Conference (IWCMC), 2013 9th International. IEEE, 2013, pp. 655-659
48. R. Roman, J. Lopez, and M. Mambo, "Mobile edge computing, fog et al.: A survey and analysis of security threats and challenges."