Detecting Sybil Attacks in Cloud Computing  Environments Based on Fail‐Stop Signature

Abstract

Due to the loosely coupled property of cloud computing environments, no node has complete knowledge of the system. For this reason, detecting a Sybil attack in cloud computing environments is a non-trivial task. In such a dynamic system, the use of algorithms based on tree or ring structures for collecting the global state of the system has unfortunate downsides, that is, the structure should be re-constructed in the presence of node joining and leaving. In this paper, we propose an unstructured Sybil attack detection algorithm in cloud computing environments. Our proposed algorithm uses one-to-one communication primitives rather than broadcast primitives and, therefore, the message complexity can be reduced. In our algorithmic design, attacker nodes forging multiple identities are effectively detected by normal nodes with the fail-stop signature scheme. We show that, regardless of the number of attacker nodes, our Sybil attack detection algorithm is able to reach consensus.

Inserção de Infraestrutura de Chave Pública no Projeto OpenDHT

“…Essa Seção aborda os trabalhos relacionados que apresentam mecanismos de defesa contra ataques em redes P2P. O trabalho de [Lim et al 2017] tem por objetivo detectar e remover nós Sybil em ambientes Cloud. Para isso,é utilizada assinatura fail-stop.…”

“…Em sequência, o nó vizinho envia suas informações ao requisitante que as verifica da mesma forma. Adicionalmente, uma terceira entidade confiávelé usada para fornecer os parâmetros públicos das chaves usadas pelos nós [Lim et al 2017]. Contudo, não há autenticidade dos nós, apenas das mensagens.…”

A Performance Perspective Analysis: A Detailed Vision on Denial of Service and Distributed Denial of Service on Cloud Computing

“…The trusted cloud computing and examined a vast number of usual Acts and regulations essential for compliance by the cloud service providers also discussed. Lim et al (2017) [22] described discovering the unstructured Sybil attack in the cloud with the use of unstructured Sybil attack detection algorithm in cloud computing environments. One-to-one communication primitives used rather than broadcast primitives and, therefore, the message complexity can decrease.…”

A Dynamic Resource Manager with Effective Resource Isolation Based on Workload Types in Virtualized Cloud Computing Environments

“…Traditionally, these needs have been addressed by using high-performance computing (HPC) hardware on physical server machines [1][2][3]. Cloud computing providers offer virtual machines (VMs) as computing resources to cloud users with user-specified configurations [4,5] and VMs can be dynamically provisioned on a pay as you go basis for many applications [6][7][8][9].…”