Abstract:This paper models cloud computing systems subject to co-resident attacks, where an attacker can get access to a user's sensitive data through co-residence of their virtual machines on the same physical server. Both attackers’ and users’ virtual machines are distributed among cloud servers at random. It is assumed that attacker's successes in getting unauthorized access to data in different servers are independent events that can occur with a given probability. To mitigate effects of the co-resident attacks, a data protection policy based on the partition technique is applied where sensitive data are divided and distributed among multiple virtual machines in the cloud. As the information is useful only in its integrity, the attacker should get access to all of the separated data blocks to steal the information. On the other hand, corrupting any block can destroy the information and make it useless. Hence, creating more blocks can make data more difficult to steal (lower data theft probability), but easier to corrupt (higher data corruption probability). This work makes original contributions by formulating and solving constrained optimization problems to balance the data theft and data corruption probabilities. Particularly probabilistic models are first presented, which derive probabilities that an attacker can succeed in the data theft and data corruption. Further an optimal number of different data blocks (corresponding to the number of user's virtual machines) is obtained, which minimizes the data theft probability subject to meeting a data corruption probability constraint. Both fixed and uncertain numbers of attacker's virtual machines are considered. Numerical examples are presented to demonstrate influence of cloud system parameters on the optimal user's data partition policy obtained.

Ensuring Confidentiality and Availability of Sensitive Data over a Network System under Cyber Threats

Cascading Failures of Power System with the Consideration of Cyber Attacks.

Optimal Data Partitioning in Cloud Computing System with Random Server Assignment

Balancing Theft and Corruption Threats by Data Partition in Cloud System with Independent Server Protection

Reliability Analysis of Distributed Storage Systems Considering Data Loss and Theft

Security of Separated Data in Cloud Systems with Competing Attack Detection and Data Theft Processes

Co-residence Based Data Vulnerability Vs. Security in Cloud Computing System with Random Server Assignment

Assessing Physical Network Vulnerability under Random Line-Segment Failure Model

Probabilistic Region Failure-Aware Data Center Network and Content Placement.

Reliability Assessment of Data Storage in Cyber Physical Systems

Assessing network vulnerability under probabilistic region failure model

Optimal Protection Resource Allocation: A Perspective of Network Science

Distributed Shielded Execution for Transmissible Cyber Threats Analysis

Exploiting Trust-Based Social Networks for Distributed Protection of Sensitive Data

A Data Partitioning And Scrambling Method To Secure Cloud Storage With Healthcare Applications

Ensuring Data Storage Security in Cloud Computing.

Study of the Secure Access Strategy of Cloud Storages

Research on Data Storage Security in Cloud Computing Environment

Ensuring Security and Privacy Preservation for Cloud Data Services

Robust dynamic network traffic partitioning against malicious attacks.

Secure Storage of Computer Network Data based on Cloud Computing