identification and evaluation of sharing memory covert timing channel in xen virtual machines | |
Wu Jing Zheng ; Ding Liping ; Wang Yongji ; Han Wei | |
2011 | |
会议名称 | 2011 IEEE 4th International Conference on Cloud Computing, CLOUD 2011 |
会议日期 | 4-Jul-20 |
会议地点 | Washington, DC, United states |
关键词 | Virtual reality |
页码 | 283-291 |
英文摘要 | Virtualization technology is the basis of cloud computing, and the most important property of virtualization is isolation. Isolation guarantees security between virtual machines. However, covert channel breaks the isolation and leaks sensitive message covertly. In this paper, we formally model the isolation into noninterference, and define that all the transmission channels violating noninterference are covert channels. With this definition, we present an identification method based on information flow. This method first compiles the source code into a more structured equivalent code with LLVM. And then a search algorithm is proposed to obtain the shared resources and the operational processes in the equivalent code. A new covert channel termed sharing memory covert timing channel (SMCTC) is identified from Xen source code. We construct channel scenario for SMCTC, and evaluate its threat with the metrics of channel capacity and transmission accuracy. The results show that SMCTC is much more threatened than CPU load based and cache based covert channels etc. © 2011 IEEE. |
收录类别 | EI |
会议主办者 | IEEE; IEEE CS; TC-SVC; IBM; SAP |
会议录 | Proceedings - 2011 IEEE 4th International Conference on Cloud Computing, CLOUD 2011 |
会议录出版地 | United States |
ISBN号 | 9780769544601 |
内容类型 | 会议论文 |
源URL | [http://124.16.136.157/handle/311060/14281] |
专题 | 软件研究所_互联网软件技术实验室 _会议论文 |
推荐引用方式 GB/T 7714 | Wu Jing Zheng,Ding Liping,Wang Yongji,et al. identification and evaluation of sharing memory covert timing channel in xen virtual machines[C]. 见:2011 IEEE 4th International Conference on Cloud Computing, CLOUD 2011. Washington, DC, United states. 4-Jul-20. |
个性服务 |
查看访问统计 |
相关权益政策 |
暂无数据 |
收藏/分享 |
除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。
修改评论