Abstract:The widespread diffusion of distributed and cloud storage solutions has changed dramatically the way users, system designers, and service providers manage their data. Outsourcing data on remote storage provides indeed many advantages in terms of both capital and operational costs. The security of data outsourced to the cloud, however, still represents one of the major concerns for all stakeholders. Pollution attacks, whereby a set of malicious entities attempt to corrupt stored data, are one of the many risks that affect cloud data security. In this paper we deal with pollution attacks in coding-based block-level cloud storage systems, i.e., systems that use linear codes to fragment, encode, and disperse virtual disk sectors across a set of storage nodes to achieve desired levels of redundancy, and to improve reliability and availability without sacrificing performance. Unfortunately, the effects of a pollution attack on linear coding can be disastrous, since a single polluted fragment can propagate pervasively in the decoding phase, thus hampering the whole sector. In this work we show that, using rateless codes, we can design an early pollution detection algorithm able to spot the presence of an attack while fetching the data from cloud storage during the normal disk reading operations. The alarm triggers a procedure that locates the polluting nodes using the proposed detection mechanism along with statistical inference. The performance of the proposed solution is analyzed under several aspects using both analytical modelling and accurate simulation using real disk traces. Our results show that the proposed approach is very robust and is able to effectively isolate the polluters, even in harsh conditions, provided that enough data redundancy is used.

Pollution Attacks and Defenses for Internet Caching Systems

Internet Cache Pollution Attacks and Countermeasures

Request pattern change-based cache pollution attack detection and defense in edge computing

Simple Countermeasures to Mitigate the Effect of Pollution Attack in Network Coding Based Peer-to-Peer Live Streaming

A Simple Effective Scheme to Enhance the Capability of Web Servers Using P2P Networks

Design and Evaluation of a Proxy Cache for Peer-to-Peer Traffic

Securing Coding-Based Cloud Storage Against Pollution Attacks

Exploiting Non-Cooperative Game Against Cache Pollution Attack in Vehicular Content Centric Network

A Unified Resource Allocation Framework for Defending Against Pollution Attacks in Wireless Network Coding Systems

Pollution Attack: A New Attack Against Localization in Wireless Sensor Networks

Defending P2Ps from Overlay Flooding-based DDoS.

A Trust-based Pollution Attack Prevention Scheme in Peer-to-Peer Streaming Networks

A Hybrid Scheme against Pollution Attack to Network Coding

Securing Peer-to-Peer Content Sharing Service from Poisoning Attacks

A novel self-checking pollution attackers identification scheme in wireless network coding

A holistic mechanism against file pollution in peer-to-peer networks.

SPAIS: A novel Self-checking Pollution Attackers Identification Scheme in network coding-based wireless mesh networks.

A Trust-Based Pollution Attack Prevention Scheme for Peer-to-Peer Multimedia Streaming Networks

Adaptive Caching Approach to Prevent DNS Cache Poisoning Attack

A New Approach to Decrease Invalidate Rate of Weak Consistency Methods in Web Proxy Caching.

Joint Pollution Detection and Attacker Identification in Peer-to-peer Live Streaming.