NDLI: CloudSafetyNet: Detecting Data Leakage between Cloud Tenants

Please wait, while we are loading the content...

Securing Cloud Environments for Enterprise Computing

Emil Stefanov: Bridging the Theory and Practice of Cloud Computing Security

Co-Location-Resistant Clouds

Privacy vs. Efficacy in Cloud-based Threat Detection

Reconciling End-to-End Confidentiality and Data Reduction In Cloud Storage

Reducing the Cost of Security in the Cloud

Swap and Play: Live Updating Hypervisors and Its Application to Xen

RAID-PIR: Practical Multi-Server PIR

Distributed Key Generation for Encrypted Deduplication: Achieving the Strongest Privacy

Efficient Certification and Zero-Knowledge Proofs of Knowledge on Infrastructure Topology Graphs

A Framework for Outsourcing of Secure Computation

Your Software at my Service: Security Analysis of SaaS Single Sign-On Solutions in the Cloud

Guardians of the Clouds: When Identity Providers Fail

CloudSafetyNet: Detecting Data Leakage between Cloud Tenants

Streaming Authenticated Data Structures: Abstraction and Implementation

Inevitable Failure: The Flawed Trust Assumption in the Cloud

CloudSafetyNet: Detecting Data Leakage between Cloud Tenants

Content Provider	ACM Digital Library
Author	Eyers, David Priebe, Christian O' Keeffe, Dan Muthukumaran, Divya Kapitza, Ruediger Shand, Brian Pietzuch, Peter
Abstract	When tenants deploy applications under the control of third-party cloud providers, they must trust the provider's security mechanisms for inter-tenant isolation, resource sharing and access control. Despite a provider's best efforts, accidental data leakage may occur due to misconfigurations or bugs in the cloud platform. Especially in Platform-as-a-Service (PaaS) clouds, which rely on weaker forms of isolation, the potential for unnoticed data leakage is high. Prior work to raise tenants' trust in clouds relies on attestation, which limits the management flexibility of providers, or fine-grained data tracking, which has high overheads. We describe CloudSafetyNet (CSN), a lightweight monitoring framework that gives tenants visibility into the propagation of their application data in a cloud environment with low performance overhead. It exploits the incentive of tenants to co-operate with each other to detect accidental data leakage. CSN transparently adds opaque security tags to a subset of form fields in HTTP requests, using a client-side JavaScript library. Socket-level monitors maintain a log of observed tags flowing between application components. Tenants retrieve their logs and identify foreign tags that indicate data leakage. To check the correct operation of CSN, tenants send probe requests with known tags and verify that monitors are logging correctly. Using an implementation of CSN deployed on the OpenShift and AppScale PaaS platforms, we show that it can discover misconfigurations and bugs with a negligible performance impact.
Starting Page	117
Ending Page	128
Page Count	12
File Format	PDF
ISBN	9781450332392
DOI	10.1145/2664168.2664174
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-11-07
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Socket-level monitoring Cloud Inter-tenant isolation Data leakage detection
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in