基于切换和迁移多执行体架构虚拟机的云侧信道攻击防御技术

杨超; 郭云飞; 扈红超; 王亚文; 仝青; 李凌书

doi:10.1631/FITEE.1800526

Your Location：

Home >

Browse articles >

基于切换和迁移多执行体架构虚拟机的云侧信道攻击防御技术

常规文章 | Updated：2022-05-19

- 基于切换和迁移多执行体架构虚拟机的云侧信道攻击防御技术
- Driftor: mitigating cloud-based side-channel attacks by switching and migrating multi-executor virtual machines
- 信息与电子工程前沿（英文） 2019年20卷第5期页码：731-748
- Affiliations：
  
  National Digital Switching System Engineering & Technological Research Center, Zhengzhou 450003, China
- Author bio：
  
  [ "Chao YANG, E-mail: 1989600235@qq.com" ]
- Funds：
  
  Project supported by the National Natural Science Foundation of China (Nos. 61521003 and 61602509), the National Key Research and Development Program of China (Nos. 2016YFB0800100 and 2016YFB0800101), and the Key Technologies Research and Development Program of Henan Province of China (No. 172102210615)
- DOI：10.1631/FITEE.1800526
  中图分类号： TP393
- 收稿：2018-08-31，
  
  修回：2019-;5-13，
  
  纸质出版：2019-05
- Accepted：
Scan QR Code
杨超, 郭云飞, 扈红超, 等. 基于切换和迁移多执行体架构虚拟机的云侧信道攻击防御技术[J]. 信息与电子工程前沿（英文）, 2019,20(5):731-748.

Chao YANG, Yun-fei GUO, Hong-chao HU, et al. Driftor: mitigating cloud-based side-channel attacks by switching and migrating multi-executor virtual machines[J]. Frontiers of Information Technology & Electronic Engineering, 2019, 20(5): 731-748.
杨超, 郭云飞, 扈红超, 等. 基于切换和迁移多执行体架构虚拟机的云侧信道攻击防御技术[J]. 信息与电子工程前沿（英文）, 2019,20(5):731-748. DOI： 10.1631/FITEE.1800526.

Chao YANG, Yun-fei GUO, Hong-chao HU, et al. Driftor: mitigating cloud-based side-channel attacks by switching and migrating multi-executor virtual machines[J]. Frontiers of Information Technology & Electronic Engineering, 2019, 20(5): 731-748. DOI： 10.1631/FITEE.1800526.

摘要

云中不同租户的虚拟机共存为以信息泄露为目标的侧信道攻击创造了便利条件。然而，当前绝大多数防御技术都存在通用性或兼容性问题，无法在真实环境下实现快速部署。作为云系统固有功能之一，虚拟机迁移机制可通过在服务器之间迁移虚拟机，限制租户共存，从而提供一种具有应用前景的防御思路。本文首先建立一个统一的攻击模型，攻击者关注的目标是有效侧信道攻击。设计了一种包含多执行架构虚拟机的新型云系统：Driftor。对于其中每个虚拟机，同一时刻有且仅有一个执行体处于运行状态，并通过代理提供服务，以此降低可能泄漏的信息量。为模拟虚拟机迁移机制，系统将在虚拟机不同执行体之前周期性切换运行状态，同时通过真实迁移操作加强防御效果。为解决CIRCUIT-SAT求解迁移问题时的弱扩展性，本文提出一种类贪婪算法，通过逐渐扩展必须迁移的虚拟机子集搜索可行解。实验结果表明，Driftor能有效防御快速侧信道攻击，且针对真实云应用的防御开销较小。

Abstract

Co-residency of different tenants' virtual machines (VMs) in cloud provides a good chance for side-channel attacks

which results in information leakage. However

most of current defense suffers from the generality or compatibility problem

thus failing in immediate real-world deployment. VM migration

an inherit mechanism of cloud systems

envisions a promising countermeasure

which limits co-residency by moving VMs between servers. Therefore

we first set up a unified practical adversary model

where the attacker focuses on effective side channels. Then we propose Driftor

a new cloud system that contains VMs of a multi-executor structure where only one executor is active to provide service through a proxy

thus reducing possible information leakage. Active state is periodically switched between executors to simulate defensive effect of VM migration. To enhance the defense

real VM migration is enabled at the same time. Instead of solving the migration satisfiability problem with intractable CIRCUIT-SAT

a greedy-like heuristic algorithm is proposed to search for a viable solution by gradually expanding an initial has-to-migrate set of VMs. Experimental results show that Driftor can not only defend against practical fast side-channel attack

but also bring about reasonable impacts on real-world cloud applications.

关键词

Keywords

references

JB Almeida , , , M Barbosa , , , G Barthe . . Verifiable side-channel security of cryptographic implementations: constant-time MEE-CBC . . 23 rd Int Conf on Fast Software Encryption , , 2016 . . p.163 - - 184 . . DOI: 10.1007/978-3-662-52993-5_9 http://doi.org/10.1007/978-3-662-52993-5_9 . .

EC2 Amazon . . Amazon EC2 , , 2018 . . https://amazonaws-china.com/cn/events/ec2/?sc_channel=ps&sc_campaign=inbounddg&sc_publisher=baidu&sc_detail={ec2%20amazon}&sc_country=cn&sc_geo=chna&sc_category=ec2&sc_segment={AWS%20EC2|brand}&sc_outcome=field&trkCampaign=inbounddg_ec2&trk=Baidu|AWS%20EC2|brand|ec2%20amazon&audience=205636 https://amazonaws-china.com/cn/events/ec2/?sc_channel=ps&sc_campaign=inbounddg&sc_publisher=baidu&sc_detail={ec2%20amazon}&sc_country=cn&sc_geo=chna&sc_category=ec2&sc_segment={AWS%20EC2|brand}&sc_outcome=field&trkCampaign=inbounddg_ec2&trk=Baidu|AWS%20EC2|brand|ec2%20amazon&audience=205636 , , [Accessed on Aug. 4, 2018] . .

E Bosman , , , K Razavi , , , H Bos . . Dedup est Machina: memory deduplication as an advanced exploitation vector . . IEEE Symp on Security and Privacy , , 2016 . . p.987 - - 1004 . . DOI: 10.1109/SP.2016.63 http://doi.org/10.1109/SP.2016.63 . .

JR Douceur . . The Sybil attack . . 1 st Int Workshop on Peer-to-Peer Systems , , 2002 . . p.251 - - 260 . . DOI: 10.1007/3-540-45748-8_24 http://doi.org/10.1007/3-540-45748-8_24 . .

PD Ezhilchelvan , , , I Mitrani . . Evaluating the probability of malicious co-residency in public clouds . . IEEE Trans Cloud Comput , , 2017 . . 5 ( ( 3 ): ): 420 - - 427 . . DOI: 10.1109/TCC.2015.2451633 http://doi.org/10.1109/TCC.2015.2451633 . .

DG Feng , , , M Zhang , , , Y Zhang , , , 等 . . Study on cloud computing security . . J Softw , , 2011 . . 22 ( ( 1 ): ): 71 - - 83 . . DOI: 10.3724/SP.J.1001.2011.03958 http://doi.org/10.3724/SP.J.1001.2011.03958 . .

MR Garey , , , DS Johnson . . Computers and intractability: a guide to the theory of NP-completeness . . W.H. Freeman & Co., New York, NY, USA , , 1979 . . p.498 - - 500 . . DOI: 10.2307/2273574 http://doi.org/10.2307/2273574 . .

D Gruss , , , C Maurice , , , K Wagner , , , 等 . . Flush+Flush: a fast and stealthy cache attack . . Int Conf on Detection of Intrusions and Malware, and Vulnerability Assessment , , 2016 . . p.279 - - 299 . . DOI: 10.1007/978-3-319-40667-1_14 http://doi.org/10.1007/978-3-319-40667-1_14 . .

Y Han , , , T Alpcan , , , J Chan , , , 等 . . A game theoretical approach to defend against co-resident attacks in cloud computing: preventing co-residence using semi- supervised learning . . IEEE Trans Inform Forens Secur , , 2016 . . 11 ( ( 3 ): ): 556 - - 570 . . DOI: 10.1109/TIFS.2015.2505680 http://doi.org/10.1109/TIFS.2015.2505680 . .

Y Han , , , J Chan , , , T Alpcan , , , 等 . . Using virtual machine allocation policies to defend against co-resident attacks in cloud computing . . IEEE Trans Depend Secur Comput , , 2017 . . 14 ( ( 1 ): ): 95 - - 108 . . DOI: 10.1109/TDSC.2015.2429132 http://doi.org/10.1109/TDSC.2015.2429132 . .

HC Hu , , , JX Wu , , , ZP Wang , , , 等 . . Mimic defense: a designed-in cybersecurity defense framework . . IET Inform Secur , , 2018 . . 12 ( ( 3 ): ): 226 - - 237 . . DOI: 10.1049/iet-ifs.2017.0086 http://doi.org/10.1049/iet-ifs.2017.0086 . .

G Irazoqui , , , T Eisenbarth , , , B Sunar . . S$A: a shared cache attack that works across cores and defies VM sandboxing -- and its application to AES . . IEEE Symp on Security and Privacy , , 2015 . . p.591 - - 604 . . DOI: 10.1109/SP.2015.42 http://doi.org/10.1109/SP.2015.42 . .

T Kmrinen , , , YQ Shan , , , M Siekkinen , , , 等 . . Virtual machines vs.containers in cloud gaming systems . . Int Workshop on Network and Systems Support for Games , , 2015 . . p.1 - - 6 . . DOI: 10.1109/NetGames.2015.7382987 http://doi.org/10.1109/NetGames.2015.7382987 . .

T Kim , , , M Peinado , , , G Mainar-Ruiz . . STEALTHMEM: system-level protection against cache-based side channel attacks in the cloud . . 21 st USENIX Conf on Security Symp , , 2012 . . p.1 - - 11 . . . .

L Kwiat , , , CA Kamhoua , , , KA Kwiat , , , 等 . . Security- aware virtual machine allocation in the cloud: a game theoretic approach . . Proc IEEE 8 th Int Conf on Cloud Computing , , 2015 . . p.556 - - 563 . . DOI: 10.1109/CLOUD.2015.80 http://doi.org/10.1109/CLOUD.2015.80 . .

H Li , , , K Ota , , , MX Dong , , , 等 . . Multimedia processing pricing strategy in GPU-accelerated cloud computing . . IEEE Trans Cloud Comput , , 2017 . . p.1 DOI: 10.1109/TCC.2017.2672554 http://doi.org/10.1109/TCC.2017.2672554 . .

H Li , , , K Ota , , , MX Dong . . Virtual network recognition and optimization in SDN-enabled cloud environment . . IEEE Trans Cloud Comput , , 2018 . . p.1 DOI: 10.1109/TCC.2018.2871118 http://doi.org/10.1109/TCC.2018.2871118 . .

P Li , , , DB Gao , , , MK Reiter . . StopWatch: a cloud architecture for timing channel mitigation . . ACM Trans Inform Syst Secur , , 2014 . . 17 ( ( 2 ): ): 28 DOI: 10.1145/2670940 http://doi.org/10.1145/2670940 . .

Lingeling . . Lingeling, Plingeling and Treengeling , , http://fmv.jku.at/lingeling/ http://fmv.jku.at/lingeling/ , , [Accessed on Aug. 4, 2018] . .

FF Liu , , , RB Lee . . Random fill cache architecture . . 47 th Annual IEEE/ACM Int Symp on Microarchitecture , , 2014 . . p.203 - - 215 . . DOI: 10.1109/MICRO.2014.28 http://doi.org/10.1109/MICRO.2014.28 . .

FF Liu , , , Y Yarom , , , Q Ge , , , 等 . . Last-level cache side- channel attacks are practical . . IEEE Symp on Security and Privacy , , 2015 . . p.605 - - 622 . . DOI: 10.1109/SP.2015.43 http://doi.org/10.1109/SP.2015.43 . .

MariaDB . . The MariaDB Foundation-Supporting Continuity and Open Collaboration in the MariaDB Ecosystem , , https://mariadb.org https://mariadb.org , , [Accessed on Aug. 4, 2018] . .

Azure Microsoft . . Microsoft Azure , , 2018 . . https://azure.microsoft.com/zh-cn/ https://azure.microsoft.com/zh-cn/ , , [Accessed on Aug. 4, 2018] . .

Instances Migrate . . Migrate Instances , , 2018 . . https://doi.org/nova/rocky/admin/migration.html https://doi.org/nova/rocky/admin/migration.html , , [Accessed on Aug. 4, 2018] . .

SJ Moon , , , V Sekar , , , MK Reiter . . Nomad: mitigating arbitrary cloud side channels via provider-assisted migration . . 22 nd ACM SIGSAC Conf on Computer and Communications Security , , 2015 . . p.1595 - - 1606 . . DOI: 10.1145/2810103.2813706 http://doi.org/10.1145/2810103.2813706 . .

T Moscibroda , , , O Mutlu . . Memory performance attacks: denial of memory service in multi-core systems . . Proc 16 th USENIX Security Symp, Article 18 , , 2007 . . .

Nginx News , , 2018 . . https://doi.org/ https://doi.org/ , , [Accessed on Aug. 4, 2018] . .

OpenStack . . The Open Infrastructure Summit CFP is Now Open , , https://doi.org/ https://doi.org/ , , [Accessed on Aug. 4, 2018] . .

E Pattuk , , , M Kantarcioglu , , , ZQ Lin , , , 等 . . Preventing cryptographic key leakage in cloud virtual machines . . Proc 23 rd USENIX Conf on Security Symp , , 2014 . . p.703 - - 718 . . . .

Rackspace . . Transform the Way You Do Business , , 2018 . . https://www.rackspace.com/ https://www.rackspace.com/ , , [Accessed on Aug. 4, 2018] . .

H Raj , , , R Nathuji , , , A Singh , , , 等 . . Resource management for isolation enhanced cloud services . . Proc ACM Workshop on Cloud Computing Security , , 2009 . . p.77 - - 84 . . DOI: 10.1145/1655008.1655019 http://doi.org/10.1145/1655008.1655019 . .

T Ristenpart , , , E Tromer , , , H Shacham , , , 等 . . Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds . . Proc 16 th ACM Conf on Computer and Communications Security , , 2009 . . p.199 - - 212 . . DOI: 10.1145/1653662.1653687 http://doi.org/10.1145/1653662.1653687 . .

RK Shyamasundar . . Introduction to algorithms . . Resonance , , 1996 . . 1 ( ( 9 ): ): 14 - - 24 . . DOI: 10.1007/BF02837777 http://doi.org/10.1007/BF02837777 . .

M Thompson , , , N Evans , , , V Kisekka . . Multiple OS rotational environment an implemented moving target defense . . 7 th Int Symp on Resilient Control Systems , , 2014 . . p.1 - - 6 . . DOI: 10.1109/ISRCS.2014.6900086 http://doi.org/10.1109/ISRCS.2014.6900086 . .

V Varadarajan , , , T Ristenpart , , , M Swift . . Scheduler-based defenses against cross-VM side-channels . . Proc 23 rd USENIX Conf on Security Symp , , 2014 . . p.687 - - 702 . . . .

BC Vattikonda , , , S Das , , , H Shacham . . Eliminating fine grained timers in Xen . . 3 rd ACM Workshop on Cloud Computing Security Workshop , , 2011 . . p.41 - - 46 . . DOI: 10.1145/2046660.2046671 http://doi.org/10.1145/2046660.2046671 . .

HX Wang , , , F Li , , , SQ Chen . . Towards cost-effective moving target defense against DDoS and covert channel attacks . . Proc ACM Workshop on Moving Target Defense , , 2016 . . p.15 - - 25 . . DOI: 10.1145/2995272.2995281 http://doi.org/10.1145/2995272.2995281 . .

ZH Wang , , , RB Lee . . New cache designs for thwarting software cache-based side channel attacks . . ACM SIGARCH Comput Arch News , , 2007 . . 35 ( ( 2 ): ): 494 - - 505 . . DOI: 10.1145/1273440.1250723 http://doi.org/10.1145/1273440.1250723 . .

ZH Wang , , , RB Lee . . A novel cache architecture with enhanced performance and security . . 41 st IEEE/ACM Int Symp on Microarchitecture , , 2008 . . p.83 - - 93 . . DOI: 10.1109/MICRO.2008.4771781 http://doi.org/10.1109/MICRO.2008.4771781 . .

WikiBench . . WikiBench , , 2018 . . 2018 http://www.wikibench.eu/ http://www.wikibench.eu/ , , [Accessed on Aug. 4, 2018] . .

J Wu , , , MX Dong , , , K Ota , , , 等 . . FCSS: fog computing based content-aware filtering for security services in information centric social networks . . IEEE Trans Emerg Top Comput , , 2017 . . p.1 DOI: 10.1109/TETC.2017.2747158 http://doi.org/10.1109/TETC.2017.2747158 . .

J Wu , , , MX Dong , , , K Ota , , , 等 . . Big data analysis-based secure cluster management for optimized control plane in software-defined networks . . IEEE Trans Netw Serv Manag , , 2018 . . 15 ( ( 1 ): ): 27 - - 38 . . DOI: 10.1109/TNSM.2018.2799000 http://doi.org/10.1109/TNSM.2018.2799000 . .

JX Wu . . Research on cyber mimic defense . . J Cyber Secur , , 2016 . . 1 ( ( 4 ): ): 1 - - 10 . . DOI: 10.19363/j.cnki.cn10-1380/tn.2016.04.001 http://doi.org/10.19363/j.cnki.cn10-1380/tn.2016.04.001 . .

Y Yarom , , , K Falkner . . FLUSH+RELOAD: a high resolution, low noise, L3 cache side-channel attack . . Proc 23 rd USENIX Conf on Security Symp , , 2014 . . p.719 - - 732 . . . .

YL Zhang , , , M Li , , , K Bai , , , 等 . . Incentive compatible moving target defense against VM-colocation attacks in clouds.In: Gritzalis D, Furnell S, Theoharidou M (Eds.), Information Security and Privacy Research . . Springer Berlin Heidelberg, Germany , , 2012 . . p.388 - - 399 . . DOI: 10.1007/978-3-642-30436-1_32 http://doi.org/10.1007/978-3-642-30436-1_32 . .

YQ Zhang , , , MK Reiter . . Dppel: retrofitting commodity operating systems to mitigate cache side channels in the cloud . . Proc ACM SIGSAC Conf on Computer & Communications Security , , 2013 . . p.827 - - 838 . . DOI: 10.1145/2508859.2516741 http://doi.org/10.1145/2508859.2516741 . .

YQ Zhang , , , A Juels , , , MK Reiter , , , 等 . . Cross-VM side channels and their use to extract private keys . . Proc ACM Conf on Computer and Communications Security , , 2012 . . p.305 - - 316 . . DOI: 10.1145/2382196.2382230 http://doi.org/10.1145/2382196.2382230 . .

YQ Zhang , , , A Juels , , , MK Reiter , , , 等 . . Cross-tenant side- channel attacks in PaaS clouds . . Proc ACM SIGSAC Conf on Computer and Communications Security , , 2014 . . p.990 - - 1003 . . DOI: 10.1145/2660267.2660356 http://doi.org/10.1145/2660267.2660356 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

Technology trends in large-scale high-efficiency network computing

MEACC: an energy-efficient framework for smart devices using cloud computing systems

Towards adaptable and tunable cloud-based map-matching strategy for GPS trajectories#

Data center network architecture in cloud computing:review, taxonomy, and open research issues