arrow
返回

Hardware-Assisted Static and Runtime Attestation for Cloud Deployments

delete2023-10-01
delete0
PRE
AI
M
Michał Kucab *
P
Piotr Boryło
P
Piotr Chołda
DOI:10.1109/TCC.2023.3327290delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
This article is devoted to the problems of static and runtime integrity for cloud deployments. Existing remote attestation solutions for cloud infrastructure do not cover static and dynamic attestation as a whole. They evaluate either the static or dynamic part, not considering the rest. We address this gap by proposing a runtime attestation process based on hardware CET technology, as an enhancement to static attestation enabled by SGX. We show how hardware-assisted protection for control-flow-related attacks can enhance virtual deployment security with minimal tradeoff. Our solution does not significantly increase the processing time. Moreover, a processing time can even be reduced when this mechanism is used as a default protection method against control-flow related attacks.
Keyword:
Runtime
Cloud computing
Hardware
Security
Software
Virtual machining
Virtual machine monitors
Control-flow enforcement technology (CET)
SGX
software guard extensions
static integrity
runtime integrity

期刊

I
IEEE Transactions on Cloud Computing
IF:
5
论文数:
1.8K
被引数:
4.3K

机构

A
AGH University of Krakow
学者数:
9.2K
论文数: 9.4K
被引数: 1.2W
引用论文

引用论文

err分享
err收藏
Exploitation Techniques for Data-oriented Attacks with Existing and Potential Defense Approaches
err2021-09-02
err16
errOAAI
errCheng, Long; Ahmed, Salman; Liljestrand, Hans; Nyman, Thomas; Cai, Haipeng; Jaeger, Trent; Asokan, N.; Yao, Danfeng (Daphne)
err分享
err收藏
A Taxonomy and Review of Remote Attestation Schemes in Embedded Systems
err2021-01-01
err6
errOAAI
errJohnson, William A.; Ghafoor, Sheikh; Prowell, Stacy
err分享
err收藏
Gender Differences in Complicated Grief among the Elderly
err1996-06-01
err0
PREAI
errAndrew J. Bierhals; Holly G. Prigerson; Amy Fasiczka; Ellen Frank; Mark Miller; Charles F. Reynolds
err分享
err收藏
CloudCFI: Context-Sensitive and Incremental CFI in the Cloud Environment
err2021-07-01
err3
PREAI
errQiang, Weizhong; Huang, Yingda; Jin, Hai; Yang, Laurence T.; Zou, Deqing
err分享
err收藏
Genetic control of gynoecy in the buffalo gourd
err1981-09-01
err0
PREAI
errB. F. Dossey; W. P. Bemis; J. C. Scheerens
err分享
err收藏
PROSPECTIVE RANDOMIZED TRIAL OF RIVAROXABAN VERSUS WARFARIN IN THE EVALUATION OF PROGRESSION OF CORONARY ARTERY CALCIFICATION
err2018-03-01
err0
PREAI
errJuhwan Lee; Rine Nakanishi; Dong Li; Kazuhiro Osawa; Kashif Shaikh; Chandana Shekar; Eranthi Jayawardena; Maja Blanco; Matthew Chen; Matthew Sieckert; Eric Nelson; Darius Billingsley; Matthew Budoff
err分享
err收藏
Cloud-Trust-a Security Assessment Model for Infrastructure as a Service (IaaS) Clouds
err2017-07-01
err81
errOAAI
errGonzales, Dan; Kaplan, Jeremy M.; Saltzman, Evan; Winkelman, Zev; Woods, Dulani
err分享
err收藏
学者 查看更多内容