.png){kind=icon}
返回
Co-Residence Data Theft Attacks on N-Version Programming-Based Cloud Services With Task Cancelation
.png){kind=icon}
PRE
AI
DOI：10.1109/TSMC.2020.3002930.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Powered by virtualization, the cloud computing has brought good merits of cost effective and on-demand resource sharing among many users. On the other hand, cloud users face security risks from co-residence attacks when using this virtualized platform. Particularly, a malicious attacker may create side channels to steal data from a target user's virtual machine (VM) that co-resides with the attacker's VM on the same physical server. This article models a cloud service undergoing the co-residence data theft attacks. The thresholdvoting-based N-version programming (NVP) is implemented to improve the service reliability, where multiple service component versions (SCVs) are activated in parallel to perform the requested service. The final output is determined upon receiving a threshold number of identical outputs from the SCVs, immediately followed by canceling all outstanding SCVs to reduce expenses. Probabilistic models are first introduced to evaluate performance metrics of the considered service, including the data theft probability, service success probability, expected service operation time, and expected utility. Optimization problems are further solved to find the optimal number of SCVs maximizing the expected utility. Interactions among different model parameters and VM allocation policies, as well as their effects on the considered performance metrics and on the optimization solutions are studied through examples.
Keyword:
Cloud computing
data security
N-version programming (NVP)
threshold voting
virtual machine (VM)
期刊
IF:
10.5
论文数:
1.1W
被引数:
5.0W
机构
引用论文
Using Virtual Machine Allocation Policies to Defend against Co-Resident Attacks in Cloud Computing
.png){kind=icon}
PREAI
分享收藏分享收藏
查看更多内容