Abstract:Cloud computing paradigms have emerged as a major facility to store and process the massive data produced by various business units, public organizations, Internet-of-Things, and cyber-physical systems. To meet users' performance requirements while maximizing resource utilization to achieve cost-efficiency, cloud administrators leverage schedulers to orchestrate tasks to different physical nodes and allow applications from different users to share the same physical node. On the other hand, micro-architectural attacks can exploit the shared resources to compromise the confidentiality/integrity of a co-located victim application. Since co-location is an essential requirement for micro-architectural attacks, in this work, we investigate whether attackers can exploit the cloud schedulers to satisfy the co-location requirement. Our analysis shows that for cloud schedulers that allow users to submit application requirements, an attacker can carefully select the attacker's application requirements to influence the scheduler to co-locate it with a targeted victim application. We call such attack Replication Attack (Repttack). Our experimental results, in both a simulated cluster environment and a real cluster, show similar trends; a single attack instance can reach up to 50% co-location rate and with only 5 instances the co-location rate can reach up to 80%. Furthermore, we propose and evaluate a mitigation strategy that can help defend against Repttack. We believe that our results highlight the fact that schedulers in multi-user clusters need to be more carefully designed with security in mind, and the process of making scheduling decisions should involve as little user-defined information as possible.

Mitigating Cloud Co-Resident Attacks Via Grouping-Based Virtual Machine Placement Strategy.

A Virtual Machine Migration Strategy Based on the Relevance of Services Against Side-Channel Attacks

A Secure Virtual Machine Deployment Strategy to Reduce Co-residency in Cloud

Defending against Co-residence Attack in Energy-Efficient Cloud: An Optimization based Real-time Secure VM Allocation Strategy

A Placement Vulnerability Study in Multi-tenant Public Clouds

Co-residence Based Data Vulnerability Vs. Security in Cloud Computing System with Random Server Assignment

Optimizing Dynamic Survivability and Security of Replicated Data in Cloud Systems under Co-Residence Attacks.

A Security-Awareness Virtual Machine Placement Scheme in the Cloud

An Improved Co-Resident Attack Defense Strategy Based on Multi-Level Tenant Classification in Public Cloud Platforms

An SRN-Based Model for Assessing Co-Resident Attack Mitigation in Cloud with VM Migration and Allocation Policies*

Secure Virtual Machine Placement and Load Balancing Algorithms with High Efficiency.

Towards Robust Multi-Tenant Clouds Through Multi-Constrained VM Placement

Affinity and Conflict-Aware Placement of Virtual Machines in Heterogeneous Data Centers.

A Security-Awareness Virtual Machine Management Scheme Based on Chinese Wall Policy in Cloud Computing.

DFA-VMP: an Efficient and Secure Virtual Machine Placement Strategy under Cloud Environment.

Detecting VMs Co-residency in Cloud: Using Cache-based Side Channel Attacks

Alleviating the Impact of Abnormal Events Through Multi-Constrained VM Placement.

Repttack: Exploiting Cloud Schedulers to Guide Co-Location Attacks

Optimal Data Partitioning in Cloud Computing System with Random Server Assignment

A Reliability and Robustness-driven Approach for Optimizing VM Placement in Clouds

Agent-Based Virtual Machine Migration for Load Balancing and Co-Resident Attack in Cloud Computing