Cloud Computing Security Workshop最新文献

Return of the Covert Channel, Data Center Style 秘密通道的回归，数据中心风格

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808433

Kenneth Block, G. Noubir

引用次数: 2

Fast Order-Preserving Encryption from Uniform Distribution Sampling 基于均匀分布采样的快速保序加密

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808431

Yong Ho Hwang, Sungwook Kim, J. Seo

{"title":"Fast Order-Preserving Encryption from Uniform Distribution Sampling","authors":"Yong Ho Hwang, Sungwook Kim, J. Seo","doi":"10.1145/2808425.2808431","DOIUrl":"https://doi.org/10.1145/2808425.2808431","url":null,"abstract":"Order-preserving encryption (OPE) is a symmetric encryption that ciphertexts preserve numerical ordering of the corresponding plaintexts. It allows various applications to search or sort the order of encrypted data (e.g., range queries in database) efficiently. In this paper, we study OPE for more practical use. We first discuss the elements of previous schemes considered as obstacles in practical applications and propose a new construction by eliminating them (especially probabilistic random variate generation functions such as hypergeometric and binomial distributions). We propose a new OPE whose encryption and decryption are much faster than those of the previous schemes by employing uniform distribution sampling. Furthermore, we provide a batch decryption algorithm to support concurrent decryption of numerical values within the specific range, which is firstly observed in the OPE research literature. It can be very efficiently applied for the encrypted range query processing of database systems. The security of our scheme is proven under the weak variants of notions proposed by Teranishi et al. in Asiacrypt 2014, which yield partial indistinguishability and one-wayness.","PeriodicalId":300613,"journal":{"name":"Cloud Computing Security Workshop","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124467372","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Cloud Security: The Industry Landscape and the Lure of Zero-Knowledge Protection 云安全:行业格局和零知识保护的诱惑

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808427

Chenxi Wang

引用次数: 0

Side Channels in Multi-Tenant Environments 多租户环境中的侧通道

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808426

M. Reiter

引用次数: 3

ORAM Based Forward Privacy Preserving Dynamic Searchable Symmetric Encryption Schemes 基于ORAM的前向隐私保护动态可搜索对称加密方案

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808429

P. Rizomiliotis, S. Gritzalis

引用次数: 24

Performance Analysis of Linux RNG in Virtualized Environments 虚拟化环境下Linux RNG性能分析

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808434

R. Kumari, Mohsen Alimomeni, R. Safavi-Naini

引用次数: 7

How Private is Your Private Cloud?: Security Analysis of Cloud Control Interfaces 你的私有云有多私有?:云控制接口安全分析

Cloud Computing Security Workshop Pub Date : 2015-10-16 DOI: 10.1145/2808425.2808432

Dennis Felsch, M. Heiderich, Frederic Schulz, Jorg Schwenk

{"title":"How Private is Your Private Cloud?: Security Analysis of Cloud Control Interfaces","authors":"Dennis Felsch, M. Heiderich, Frederic Schulz, Jorg Schwenk","doi":"10.1145/2808425.2808432","DOIUrl":"https://doi.org/10.1145/2808425.2808432","url":null,"abstract":"The security gateway between an attacker and a user's private data is the Cloud Control Interface (CCI): If an attacker manages to get access to this interface, he controls the data. Several high-level data breaches originate here, the latest being the business failure of the British company Code Spaces. In such situations, using a private cloud is often claimed to be more secure than using a public cloud. In this paper, we show that this security assumption may not be justified: We attack private clouds through their rich, HTML5-based control interfaces, using well-known attacks on web interfaces (XSS, CSRF, and Clickjacking) combined with novel exploitation techniques for Infrastructure as a Service clouds.\u0000 We analyzed four open-source projects for private IaaS cloud deployment (Eucalyptus, OpenNebula, OpenStack, and openQRM) in default configuration. We were able to compromise the security of three cloud installations (Eucalyptus, OpenNebula, and openQRM) One of our attacks (OpenNebula) allowed us to gain root access to VMs even if full perimeter security is enabled, i.e. if the cloud control interface is only reachable from a certain segment of the company's network, and if all network traffic is filtered through a firewall.\u0000 We informed all projects about the attack vectors and proposed mitigations. As a general recommendation, we propose to make web management interfaces for private clouds inaccessible from the Internet, and to include this technical requirement in the definition of a private cloud.","PeriodicalId":300613,"journal":{"name":"Cloud Computing Security Workshop","volume":"110 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-10-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117212107","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Exploring Privacy Preservation in Outsourced K-Nearest Neighbors with Multiple Data Owners 探索具有多个数据所有者的外包k近邻的隐私保护

Cloud Computing Security Workshop Pub Date : 2015-07-29 DOI: 10.1145/2808425.2808430

Frank H. Li, Richard Shin, V. Paxson

{"title":"Exploring Privacy Preservation in Outsourced K-Nearest Neighbors with Multiple Data Owners","authors":"Frank H. Li, Richard Shin, V. Paxson","doi":"10.1145/2808425.2808430","DOIUrl":"https://doi.org/10.1145/2808425.2808430","url":null,"abstract":"The k-nearest neighbors (k-NN) algorithm is a popular and effective classification algorithm. Due to its large storage and computational requirements, it is suitable for cloud outsourcing. However, k-NN is often run on sensitive data such as medical records, user images, or personal information. It is important to protect the privacy of data in an outsourced k-NN system. Prior works have all assumed the data owners (who submit data to the outsourced k-NN system) are a single trusted party. However, we observe that in many practical scenarios, there may be multiple mutually distrusting data owners. In this work, we present the first framing and exploration of privacy preservation in an outsourced k-NN system with multiple data owners. We consider the various threat models introduced by this modification. We discover that under a particularly practical threat model that covers numerous scenarios, there exists a set of adaptive attacks that breach the data privacy of any exact k-NN system. The vulnerability is a result of the mathematical properties of k-NN and its output. Thus, we propose a privacy-preserving alternative system supporting kernel density estimation using a Gaussian kernel, a classification algorithm from the same family as k-NN. In many applications, this similar algorithm serves as a good substitute for k-NN. We additionally investigate solutions for other threat models, often through extensions on prior single data owner systems.","PeriodicalId":300613,"journal":{"name":"Cloud Computing Security Workshop","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-07-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133916799","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 31

Fast dynamic extracted honeypots in cloud computing 云计算中的快速动态蜜罐提取

Cloud Computing Security Workshop Pub Date : 2012-10-19 DOI: 10.1145/2381913.2381916

Sebastian Biedermann, M. Mink, S. Katzenbeisser

{"title":"Fast dynamic extracted honeypots in cloud computing","authors":"Sebastian Biedermann, M. Mink, S. Katzenbeisser","doi":"10.1145/2381913.2381916","DOIUrl":"https://doi.org/10.1145/2381913.2381916","url":null,"abstract":"In this paper, we describe the design, the implementation and the evaluation of a dynamic honeypot architecture which can be offered as an additional security service for cloud users in a cloud that offers Infrastructure-as-a-Service (IaaS). Honeypots can protect original systems while revealing new and unknown attacks at the same time. The proposed dynamic honeypot architecture detects potential attacks in the initial phases and delays these attacks until a new honeypot virtual machine (VM) is extracted from the original VM which is under attack. The extraction process is a modifying VM live cloning process which leaves sensible data behind and prevents internal data loss. This way, the newly created honeypot VM runs the same software in exactly the same up-to-date configuration. The honeypot controller redirects the delayed attack to the extracted honeypot VM and analyses its impact without risking the integrity of the original target VM. The proposed architecture benefits from the flexibility and adaptability of the cloud. It efficiently protects VMs of cloud users from contemporary network attacks while only few additional cloud resources are temporarily needed. The architecture deceives and misleads an attacker or an attacking source but does not influence the normal work-flow of the original VMs in the cloud. Based on a defined reporting format, cloud users can learn from attacks which have targeted their VMs and discover current misconfigurations and unknown vulnerabilities.","PeriodicalId":300613,"journal":{"name":"Cloud Computing Security Workshop","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-10-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127352016","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19

Managing trust and secrecy in identity management clouds 在身份管理云中管理信任和保密

Cloud Computing Security Workshop Pub Date : 2012-10-19 DOI: 10.1145/2381913.2381933

Apurva Kumar

引用次数: 1