{"title":"FLOMD: Fast and Low Overhead Memory Deduplication for Edge Nodes","authors":"Guann-Ling Shen, Che-Rung Lee","doi":"10.1109/CloudCom55334.2022.00022","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00022","url":null,"abstract":"Edge computing has become an indispensable architecture to provide real-time services for massive number of IoT devices and 5G platforms. To ease the effort of deploying and managing various applications on edge nodes, people usually pack their applications in containers for edge environment. However, the smooth execution of large amount of containers simultaneously on the nodes with limited computing resources remains a challenge. In this paper, we investigated the memory deduplication technology to relieve the memory pressure on edge nodes. The major difficulty is to quickly discover and merge duplicated memory pages with less CPU consumption. Based on the observed properties of memory usages for containers, we proposed a memory deduplication algorithm, called FLOMD (Fast and Low Overhead Memory Deduplication), which is based on KSM (Kernel Same-page Merging) with four novel techniques: zero page collection, search tree optimization, volatile page identification, and scanning velocity adjustment. Experiments are conducted to compare the sharing efficiency of KSM, UKSM, and FLOMD on edge nodes with various workloads. The results show that the sharing efficiency of FLOMD is more than two times higher than that of others in average.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"132 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129257645","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"CSM-DBEN: Container Storage Manager for Data Backup on Edge Nodes","authors":"Wei-Cheng Hung, Che-Rung Lee","doi":"10.1109/CloudCom55334.2022.00025","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00025","url":null,"abstract":"Edge computing that distributes computing resources close to data sources has become one of the most efficient architectures to solve the latency and the massive connection problems. On top of edge nodes, applications are usually packed in containers to enable fast deployment and multi-tenancy. However, the limited computing resource of edge nodes and application specific containerization make systematic data resilience difficult on edge nodes. In this paper, we present a container storage manager for data backup on edge nodes (CSMDBEN), which provides the live storage backup and recovery for container volumes in the system level of edge nodes. CSM-DBEN leverages virtual machines (VM) to support better security, data isolation, and storage layering. For remote backups, CSM-DBEN performs data encryption and compression for data transmission to enhance the security and bandwidth efficiency. It also dynamically adjusts the data backup frequency, based on the prediction of disk failures, to reduce the system overhead. Experiments show that the incremental data backup time of CSM-DBEN is reduced by 75% $sim 80$% compared to the commonly used rdiff-backup system.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"198 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115993989","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Note on the Determination of the Processing Capacity in a Multiserver Job System as a Model of Cloud Datacenters","authors":"A. Brandwajn, Thomas Begin","doi":"10.1109/CloudCom55334.2022.00017","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00017","url":null,"abstract":"Systems with multiserver jobs, inspired by modern datacenters, present a challenge in terms of the analysis of their performance and, in particular, the determination of their processing capacity as some servers may remain idle even though there are jobs queued for service. We consider a generalization of the multiserver jobs model to a resource of not necessarily integer quantity and jobs of different classes requiring arbitrary fractions of that resource. We present a simple approach to the analysis of such a system in steady state. Our approach relies on a suitably chosen state description and the use of conditional probabilities. The limiting values of these conditional probabilities allow us to determine the asymptotic maximum job processing capacity without having to obtain the full solution for the system.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121961295","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Survey on Cybersecurity Barrier Management in Process Control Environments","authors":"K. Øien, S. Hauge, M. Jaatun, L. Flå, L. Bodsberg","doi":"10.1109/CloudCom55334.2022.00026","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00026","url":null,"abstract":"The concept of barriers is well known in the safety domain that includes traditional process control environments. However, as critical infrastructures are moving to more interconnected scenarios connected to cloud computing service providers and the internet in general, an increased focus on security is necessary. In this paper we present a survey on how cybersecurity barriers have been presented in the literature, concluding that the concept has received little attention. More specifically, the aim of the paper is to survey the state of the art in cybersecurity barrier management and the integration with safety barrier management. Like the concept of cybersecurity barrier, the integration of safety and cybersecurity barrier management has received little attention. Most of the work focus on integration of safety and cybersecurity management in general, not on barrier management specifically. We eventually aim to integrate cybersecurity barrier management into the already existing safety barrier management regime.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128279292","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. S. M. Asadujjaman, Mohammad Ekramul Kabir, Hinddeep Purohit, Suryadipta Majumdar, Lingyu Wang, Yosr Jarraya, M. Pourzandi
{"title":"5GFIVer: Functional Integrity Verification for 5G Cloud-Native Network Functions","authors":"A. S. M. Asadujjaman, Mohammad Ekramul Kabir, Hinddeep Purohit, Suryadipta Majumdar, Lingyu Wang, Yosr Jarraya, M. Pourzandi","doi":"10.1109/CloudCom55334.2022.00032","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00032","url":null,"abstract":"5G networks attain a better performance along with a reduction in cost by cloudifying its network functions as Cloud+native Network Functions (CNFs). However, CNF may introduce new security concerns (e.g., data exfiltration and ransomware) due to potential code injection attacks against network functions at runtime. This will potentially result in a breach of functional integrity of these network functions. Towards verifying such functional integrity breaches of CNFs at the 5G-operator-level, existing approaches fell short, as most of them either (i) perform pre-deployment verification (i.e., verifying the CNF image before the deployment) and hence fail to verify integrity breaches occurring after the deployment, or (ii) perform post-deployment verification (i.e., verifying against attack signatures or normal behavior patterns) approaches that require provider-level data (e.g., system calls) which is usually inaccessible to 5G operators. In this paper, we propose 5GFIVer, a new operator-oriented approach for functional integrity verification of CNFs that overcomes the above-mentioned limitations. First, our approach utilizes the side-channel information such as performance metrics (which are already available at the operator level) so that no provider-level data is needed. Second, our approach implements unsupervised machine learning algorithms to detect outliers through time-series analysis of those available performance metrics, and hence no instrumentation for the data collection as well as no training data is required. Third, we leverage the correlation between multiple CNFs to improve the accuracy and minimize false positives (e.g., caused by cloud dynamics). Our experimental results under an open source 5G testbed demonstrate the effectiveness and negligible overhead of our solution.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131085201","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Hanif Tadjik, Jiahui Geng, M. Jaatun, Chunming Rong
{"title":"Blockchain Empowered and Self-sovereign Access Control System","authors":"Hanif Tadjik, Jiahui Geng, M. Jaatun, Chunming Rong","doi":"10.1109/CloudCom55334.2022.00021","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00021","url":null,"abstract":"Lack of trustworthiness, access policy flexibility, and user privacy preservation in centralized access control systems raise numerous security issues and reduce the collaboration maturity of global data sharing systems. In this paper, we propose a Self-Sovereign Identity-based, Decentralized, and Dynamic (SSIDD) access control system. SSIDD utilizes blockchain technologies to build trust for untrusted data sharing networks and ensures user privacy. Our access control provides high access policy flexibility and security for global inter-enterprise collaborations from a diverse industrial environment. SSIDD authenticates its users based on their Decentralized Identifiers (DID), which are under control of users and can be resolved into a DID document stored on the blockchain. Our data management technology keeps the data sharing systems safe against issues such as data breaches, identity thefts, and privacy violations. Besides, the authorization process of SSIDD is dynamic by adopting several smart contracts. The transparency of rules and agreements in smart contracts and the traceability of records on blockchain ledger provide a high level of security and trust. For proof of concept, we have developed and evaluated a prototype of SSIDD. Our evaluations show that the throughput and latency of our method are within an acceptable range.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128520640","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
G. Fatouros, Yannis Poulakis, Ariana Polyviou, Stylianos Tsarsitalidis, Georgios Makridis, J. Soldatos, Georgios Kousiouris, Michael Filippakis, D. Kyriazis
{"title":"Knowledge Graphs and interoperability techniques for hybrid-cloud deployment of FaaS applications","authors":"G. Fatouros, Yannis Poulakis, Ariana Polyviou, Stylianos Tsarsitalidis, Georgios Makridis, J. Soldatos, Georgios Kousiouris, Michael Filippakis, D. Kyriazis","doi":"10.1109/CloudCom55334.2022.00023","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00023","url":null,"abstract":"Towards enabling the automated and optimized FaaS deployment of applications in a hybrid-cloud setting, the application requirements should be met by comparing them to the capabilities of the available resources of available clusters. To this end, semantic matching between the application characteristics and the individual descriptions of available compute clusters (e.g. from public or private cloud or edge facilities available) is required. In this work, such a system is proposed, namely the Reasoning Framework, which performs semantic matching between application and resource (meta)data and facilitates information sharing among the FaaS platform components leveraging Knowledge Graphs, ontology technologies, and semantic reasoning. The proposed system harvests information from the application function workflow, provided as a graph by the function editor specification (based on Node-RED), including developer-inserted annotations during the design process, and maps them to the dynamic information retrieved from the available clusters. The Reasoning Framework interprets these data as graphs and automatically applies several semantic rules that enable filtering of the available resources and efficient information retrieval through a RESTfull interface. The paper also discusses experimental results to further showcase the advantages of the proposed approach.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"245 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132756111","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Message from the Cloud Computing Association – CloudCom.org","authors":"","doi":"10.1109/cloudcom.2011.7","DOIUrl":"https://doi.org/10.1109/cloudcom.2011.7","url":null,"abstract":"","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129833444","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Jiahui Geng, Ali Rehman, Yongli Mou, S. Decker, Chunming Rong
{"title":"Blockchain-based Cross-organizational Workflow Platform","authors":"Jiahui Geng, Ali Rehman, Yongli Mou, S. Decker, Chunming Rong","doi":"10.1109/CloudCom55334.2022.00018","DOIUrl":"https://doi.org/10.1109/CloudCom55334.2022.00018","url":null,"abstract":"Data-centric workflows across organizations are gaining more and more popularity. To automate this process, the traditional approaches centralise related data from different organizations to the cloud, and then use a workflow engine to complete cross-organizational collaboration. There are limitations of those approaches, such as the requirement of data centralisation which could lead to the leakage of critical data. In this work, we present a workflow platform for consuming distributed data based on Kubernetes and JupyterFlow, and use blockchain technology to guarantee security and privacy through empowering the data owner with control of their own data. To reduce replication and network throughput, the blockchain only contains the meta data referring to the data in off-chain storage. We develope a JupyterHub extension to support data registration and query, and used the RESTFul API to connect the web application with the blockchain network. Finally, we demonstrate a simple data processing use case as proof-of-concept to validate our proposed platform.","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121282349","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Message from Technical Program Committee Chairs","authors":"","doi":"10.1109/cloudcom55334.2022.00007","DOIUrl":"https://doi.org/10.1109/cloudcom55334.2022.00007","url":null,"abstract":"","PeriodicalId":282963,"journal":{"name":"2022 IEEE International Conference on Cloud Computing Technology and Science (CloudCom)","volume":"57 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130873455","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}