Shuttle: Intrusion Recovery for PaaS

2015 IEEE 35th International Conference on Distributed Computing Systems Pub Date : 2015-07-23 DOI:10.1109/ICDCS.2015.72

Dario Nascimento, M. Correia

{"title":"Shuttle: Intrusion Recovery for PaaS","authors":"Dario Nascimento, M. Correia","doi":"10.1109/ICDCS.2015.72","DOIUrl":null,"url":null,"abstract":"The number of applications being deployed using the Platform as a Service (PaaS) cloud computing model is increasing. Despite the security controls implemented by cloud service providers, we expect intrusions to strike such applications. We present Shuttle, a novel intrusion recovery service. Shuttle recovers from intrusions in applications deployed in PaaS platforms. Our approach allows undoing changes to the state of PaaS applications due to intrusions, without loosing the effect of legitimate operations performed after the intrusions take place. We combine a record-and-replay approach with the elasticity provided by cloud offerings to recover applications deployed on various instances and backed by distributed databases. The service loads a database snapshot taken before the intrusion and replays subsequent requests, as much in parallel as possible, while continuing to execute incoming requests. We present an experimental evaluation of Shuttle on Amazon Web Services. We show Shuttle can replay 1 million requests in 10 minutes and that it can duplicate the number of requests replayed per second by increasing the number of application servers from 1 to 3.","PeriodicalId":129182,"journal":{"name":"2015 IEEE 35th International Conference on Distributed Computing Systems","volume":"34 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2015-07-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"11","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2015 IEEE 35th International Conference on Distributed Computing Systems","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICDCS.2015.72","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 11

Abstract

The number of applications being deployed using the Platform as a Service (PaaS) cloud computing model is increasing. Despite the security controls implemented by cloud service providers, we expect intrusions to strike such applications. We present Shuttle, a novel intrusion recovery service. Shuttle recovers from intrusions in applications deployed in PaaS platforms. Our approach allows undoing changes to the state of PaaS applications due to intrusions, without loosing the effect of legitimate operations performed after the intrusions take place. We combine a record-and-replay approach with the elasticity provided by cloud offerings to recover applications deployed on various instances and backed by distributed databases. The service loads a database snapshot taken before the intrusion and replays subsequent requests, as much in parallel as possible, while continuing to execute incoming requests. We present an experimental evaluation of Shuttle on Amazon Web Services. We show Shuttle can replay 1 million requests in 10 minutes and that it can duplicate the number of requests replayed per second by increasing the number of application servers from 1 to 3.

查看原文本刊更多论文

穿梭:PaaS的入侵恢复

使用平台即服务(PaaS)云计算模型部署的应用程序数量正在增加。尽管云服务提供商实施了安全控制，但我们预计这些应用程序会遭到入侵。我们提出了一种新的入侵恢复服务Shuttle。Shuttle从部署在PaaS平台上的应用程序中的入侵中恢复。我们的方法允许撤消由于入侵而对PaaS应用程序状态的更改，而不会失去入侵发生后执行的合法操作的影响。我们将记录和重播方法与云产品提供的弹性相结合，以恢复部署在各种实例上并由分布式数据库支持的应用程序。该服务加载入侵前的数据库快照，并尽可能并行地重播后续请求，同时继续执行传入请求。我们在Amazon Web Services上对Shuttle进行了实验评估。我们展示了Shuttle可以在10分钟内重播100万个请求，并且可以通过将应用服务器的数量从1个增加到3个来复制每秒重播的请求数量。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

2015 IEEE 35th International Conference on Distributed Computing Systems

自引率

0.00%

发文量