Abstract:Virtualization is the cornerstone of the developing third-party compute industry, allowing cloud providers to instantiate multiple virtual machines (VMs) on a single set of physical resources. Customers utilize cloud resources alongside unknown and untrusted parties, creating the co-resident threat—unless perfect isolation is provided by the virtual hypervisor, there exists the possibility for unauthorized access to sensitive customer information through the exploitation of covert side channels. This paper presents co-resident watermarking, a traffic analysis attack that allows a malicious co-resident VM to inject a watermark signature into the network flow of a target instance. This watermark can be used to exfiltrate and broadcast co-residency data from the physical machine, compromising isolation without reliance on internal side channels. As a result, our approach is difficult to defend against without costly underutilization of the physical machine. We evaluate co-resident watermarkingunder a large variety of conditions, system loads and hardware configurations, from a local laboratory environment to production cloud environments (Futuregrid and the University of Oregon’s ACISS). We demonstrate the ability to initiate a covert channel of 4 bits per second, and we can confirm co-residency with a target VM instance in <\documentclass[12pt]{minimal}\usepackage{amsmath}\usepackage{wasysym}\usepackage{amsfonts}\usepackage{amssymb}\usepackage{amsbsy}\usepackage{mathrsfs}\usepackage{upgreek}\setlength{\oddsidemargin}{-69pt}\begin{document}$$<$$\end{document}10 s. We also show that passive load measurement of the target and subsequent behavior profiling is possible with this attack. We go on to consider the detectability of co-resident watermarking, extending our scheme to create a subtler watermarking attack by imitating legitimate cloud customer behavior. Our investigation demonstrates the need for the careful design of hardware to be used in the cloud.

Multi-Flow Attacks Against Network Flow Watermarks: Analysis and Countermeasures

DeMarking: A Defense for Network Flow Watermarking in Real-Time

Flow Table Saturation Attack Against Dynamic Timeout Mechanisms in SDN

On Flow Marking Attacks in Wireless Anonymous Communication Networks

Attack on Cocktail Watermarking Based on High False Positive Probability

Non-blind watermarking of network flows

COUNTERFEITING ATTACKS ON TWO ROBUST WATERMARKING SCHEMES

HeteroTiC: A robust network flow watermarking based on heterogeneous time channels

HSTW: A Robust Network Flow Watermarking Method Based on Hybrid Packet Sequence-Timing

Dynamic Interval-based Watermarking for Tracking Down Network Attacks

On detecting co-resident cloud instances using network flow watermarking techniques

FlowCloak: Defeating Middlebox-Bypass Attacks in Software-Defined Networking.

A Unified and Fully Automated Framework for Wavelet-based Attacks on Random Delay

Securing Middlebox Policy Enforcement in SDN

Dynamic Watermarking for General LTI Systems

Statistical Watermarking for Networked Control Systems

A Dynamic Watermarking Algorithm for Finite Markov Decision Problems

Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models

DROPWAT: an Invisible Network Flow Watermark for Data Exfiltration Traceback

A Wavelet-based Power Analysis Attack Against Random Delay Countermeasure.

FlowTracker: Improved Flow Correlation Attacks with Denoising and Contrastive Learning