A Measurement Study on Co-residence Threat inside the Cloud

Proceedings of the 24th USENIX Security Symposium

Volumn , Issue , 2015, Pages 929-944

  Xu, Zhang ^a   Wang, Haining ^b   Wu, Zhenyu ^c  

^a Dept of Economics and Thomas Jefferson Program in Public Policy at the College of William and Mary   (United States)

^b UNIVERSITY OF DELAWARE   (United States)

^c NEC LABORATORIES AMERICA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK MANAGEMENT; NETWORK SECURITY; VIRTUAL MACHINE;

CLOUD SERVICE MODELS; COMPUTING DEMANDS; DYNAMIC ENVIRONMENTS; INTENSIVE MEASUREMENTS; MALICIOUS ATTACK; MEASUREMENT STUDY; NETWORK-BASED SERVICES; SECURITY ENHANCEMENTS;

INFRASTRUCTURE AS A SERVICE (IAAS);

EID: 85076268999     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. Amazon elastic compute cloud (ec2). http://aws.amazon.com/ec2/.
2. Google cloud platform. https://cloud.google.com/compute/.
3. Instance types in ec2. http://aws.amazon.com/ec2/instance-types/.
4. Microsoft azure services platfor. http://www.microsoft.com/azure/default.mspx.
5. AVIRAM, A., HU, S., FORD, B., AND GUMMADI, R. Determinating timing channels in compute clouds. In Proceedings of ACM CCSW’10, pp. 103–108.
6. BARHAM, P., DRAGOVIC, B., FRASER, K., HAND, S., HARRIS, T., HO, A., NEUGEBAUER, R., PRATT, I., AND WARFIELD, A. Xen and the art of virtualization. In Proceedings of ACM SOSP’03.
7. BATES, A., MOOD, B., PLETCHER, J., PRUSE, H., VALAFAR, M., AND BUTLER, K. Detecting co-residency with active traffic analysis techniques. In Proceedings of ACM CCSW’12.
8. BERMUDEZ, I., TRAVERSO, S., MELLIA, M., AND MUNAFO, M. Exploring the cloud from passive measurements: the amazon aws case. In Proceedings of IEEE INFOCOM’13, pp. 230–234.
9. BIRKE, R., PODZIMEK, A., CHEN, L. Y., AND SMIRNI, E. State-of-the-practice in data center virtualization: Toward a better understanding of vm usage. In Proceedings of IEEE/IFIP DSN’13.
10. DURUMERIC, Z., WUSTROW, E., AND HALDERMAN, J. A. Zmap: Fast internet-wide scanning and its security applications. In Proceedings of USENIX Security’13, pp. 605–620.
11. HE, K., FISHER, A., WANG, L., GEMBER, A., AKELLA, A., AND RISTENPART, T. Next stop, the cloud: understanding modern web service deployment in ec2 and azure. In Proceedings of ACM IMC’13, pp. 177–190.
12. KIM, T., PEINADO, M., AND MAINAR-RUIZ, G. System-level protection against cache-based side channel attacks in the cloud. In Proceedings of USENIX Security’12.
13. LACURTS, K., DENG, S., GOYAL, A., AND BALAKRISHNAN, H. Choreo: network-aware task placement for cloud applications. In Proceedings of ACM IMC’13.
14. RISTENPART, T., TROMER, E., SHACHAM, H., AND SAVAGE, S. Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In Proceedings of ACM CCS’09, pp. 199–212.
15. VARADARAJAN, V., RISTENPART, T., AND SWIFT, M. Scheduler-based defenses against cross-vm side-channels. In Proceedings of USENIX Security’14.
16. VARADARAJAN, V., ZHANG, Y., RISTENPART, T., AND SWIFT, M. A placement vulnerability study in multi-tenant public clouds. In Proceedings of USENIX Security’15.
17. WANG, G., AND NG, T. E. The impact of virtualization on network performance of amazon ec2 data center. In Proceedings of IEEE INFOCOM’10.
18. WANG, L., NAPPA, A., CABALLERO, J., RISTENPART, T., AND AKELLA, A. Whowas: A platform for measuring web deployments on iaas clouds. In Proceedings of ACM IMC’14.
19. WU, Z., XU, Z., AND WANG, H. Whispers in the hyper-space: High-speed covert channel attacks in the cloud. In Proceedings of USENIX Security’12, pp. 159–173.
20. XU, Y., BAILEY, M., JAHANIAN, F., JOSHI, K., HILTUNEN, M., AND SCHLICHTING, R. An exploration of L2 cache covert channels in virtualized environments. In Proceedings of ACM CCSW’11, pp. 29–40.
21. XU, Y., MUSGRAVE, Z., NOBLE, B., AND BAILEY, M. Bobtail: avoiding long tails in the cloud. In Proceedings of USENIX NSDI’13, pp. 329–342.
22. XU, Z., WANG, H., AND WU, Z. Technical Report: WM-CS-2015-03. http://www.wm.edu/as/computerscience/documents/cstechreports/WM-CS-2015-03.pdf.
23. XU, Z., WANG, H., XU, Z., AND WANG, X. Power attack: An increasing threat to data centers. In Proceedings of NDSS’14.
24. ZHANG, Y., JUELS, A., OPREA, A., AND REITER, M. K. Homealone: Co-residency detection in the cloud via side-channel analysis. In Proceedings of IEEE S&P’11, pp. 313–328.
25. ZHANG, Y., JUELS, A., REITER, M. K., AND RISTENPART, T. Cross-tenant side-channel attacks in paas clouds. In Proceedings of ACM CCS’14, pp. 990–1003.
26. ZHANG, Y., AND REITER, M. K. Düppel: Retrofitting commodity operating systems to mitigate cache side channels in the cloud. In Proceedings of ACM CCS’13, pp. 827–838.