Handling Co-Resident Attacks: A Case for Cost-Efficient Dedicated Resource Provisioning

Ta, Nguyen Binh Duong; Pimpalkar, Neha

doi:10.1109/cloud.2018.00119

Cited by 2 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Different CSPs have different cost and performance. Users can choose a suitable plan to gain security, cost‐efficiency, or operating performance 17 . Reference 13 considers several different VM provisioning algorithms that are secure, cost‐effective, and immediately deployable for cloud users without any modifications to the architecture of cloud.…”

Section: Related Workmentioning

confidence: 99%

Defending co‐resident attack using reputation‐based virtual machine deployment policy in cloud computing

Xiao

Liang

et al. 2021

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Cloud computing enables users to utilize IT resources conveniently with low‐level cost, but it also brings some new threats. The co‐resident attack is one of the typical examples, where malicious users steal information from legal users by starting a virtual machine (VM) and building a side‐channel between VMs on the same server. Most of current studies focus mainly on defending the side‐channel attack, which requires modifications to the existing underlying architecture of cloud platforms. Some studies focus on security‐aware VMs deployment policies that can defeat co‐resident attacks through reduction of co‐residences. However, most of these studies ignore workload‐balance and energy‐efficiency. In addition, they neglect that data held in different VMs should have different security levels. Motivated by these issues, in this article, we first formalize the multi‐attackers co‐resident attack problem. The co‐located VMs rate (CVR) metric is proposed to evaluate the security level in cloud and a security‐aware policy named least‐danger‐based‐on‐reputation (LDBR) is presented to minimize the metric. Also, we propose extensional LDBR (E‐LDBR) policy to balance security, workload‐balance and energy consumption, and weighted‐LDBR (W‐LDBR) policy that considers users' different security levels. Experimental results indicate that LDBR outperforms PSSF (previous‐selected‐server‐first) by 15.02%‐22.07% in security, E‐LDBR is more balanced in workload and consumes less energy consumption, and W‐LDBR can reduce security threats by 13.3% compared with PSSF.

show abstract

Section: Related Workmentioning

confidence: 99%