NDLI: Mitigating Multi-Tenancy Risks in IaaS Cloud Through Constraints-Driven Virtual Resource Scheduling

Please wait, while we are loading the content...

Post-Snowden Threat Models

Valued Workflow Satisfiability Problem

Commune: Shared Ownership in an Agnostic Cloud

A Logical Approach to Restricting Access in Online Social Networks

Challenges in Making Access Control Sensitive to the "Right" Contexts

Relationship-Based Access Control for an Open-Source Medical Records System

A Prototype to Reduce the Amount of Accessible Information

A Logic of Trust for Reasoning about Delegation and Revocation

Privacy and Access Control: How are These Two concepts Related?

Mitigating Access Control Vulnerabilities through Interactive Static Analysis

Mohawk+T: Efficient Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies

SecLoc: Securing Location-Sensitive Storage in the Cloud

Preventing Information Inference in Access Control

Federated Access Management for Collaborative Network Environments: Framework and Case Study

A SMT-based Tool for the Analysis and Enforcement of NATO Content-based Protection and Release Policies

Towards Attribute-Based Authorisation for Bidirectional Programming

Towards a General Framework for Optimal Role Mining: A Constraint Satisfaction Approach

Automated Inference of Access Control Policies for Web Applications

Mitigating Multi-Tenancy Risks in IaaS Cloud Through Constraints-Driven Virtual Resource Scheduling

On Missing Attributes in Access Control: Non-deterministic and Probabilistic Attribute Retrieval

Fine-Grained Business Data Confidentiality Control in Cross-Organizational Tracking

Towards an Automatic Top-down Role Engineering Approach Using Natural Language Processing Techniques

SPA: Inviting Your Friends to Help Set Android Apps

Hard Instances for Verification Problems in Access Control

Initial Encryption of large Searchable Data Sets using Hadoop

Generating Secure Images for CAPTCHAs through Noise Addition

Mitigating Multi-Tenancy Risks in IaaS Cloud Through Constraints-Driven Virtual Resource Scheduling

Content Provider	ACM Digital Library
Author	Krishnan, Ram Bijon, Khalid Sandhu, Ravi
Abstract	A major concern in the adoption of cloud infrastructure-as-a-service (IaaS) arises from multi-tenancy, where multiple tenants share the underlying physical infrastructure operated by a cloud service provider. A tenant could be an enterprise in the context of a public cloud or a department within an enterprise in the context of a private cloud. Enabled by virtualization technology, the service provider is able to minimize cost by providing virtualized hardware resources such as virtual machines, virtual storage and virtual networks, as a service to multiple tenants where, for instance, a tenant's virtual machine may be hosted in the same physical server as that of many other tenants. It is well-known that separation of execution environment provided by the hypervisors that enable virtualization technology has many limitations. In addition to inadvertent misconfigurations, a number of attacks have been demonstrated that allow unauthorized information flow between virtual machines hosted by a hypervisor on a given physical server. In this paper, we present attribute-based constraints specification and enforcement as a mechanism to mitigate such multi-tenancy risks that arise in cloud IaaS. We represent relevant properties of virtual resources (e.g., virtual machines, virtual networks, etc.) as their attributes. Conflicting attribute values are specified by the tenant or by the cloud IaaS system as appropriate. The goal is to schedule virtual resources on physical resources in a conflict-free manner. The general problem is shown to be NP-complete. We explore practical conflict specifications that can be efficiently enforced. We have implemented a prototype for virtual machine scheduling in OpenStack, a widely-used open-source cloud IaaS software, and evaluated its performance overhead, resource requirements to satisfy conflicts, and resource utilization.
Starting Page	63
Ending Page	74
Page Count	12
File Format	PDF
ISBN	9781450335560
DOI	10.1145/2752952.2752964
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-06-01
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Constraint Multi-tenancy Virtual-resource scheduling Vm migration Vm co-residency management Cloud iaas
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Mitigating multi-tenancy risks in iaas cloud through constraints-driven virtual resource scheduling (2015)

Real Time Elastic Cloud Management for Limited Resources

When Dynamic VM Migration Falls under the Control of VM Users

Enhancing Multi-tenancy Security in the Cloud IaaS Model over Public Deployment

AMAD: Resource Consumption Profile-Aware Attack Detection in IaaS Cloud

Algorithms to improve scheduling techniques in IaaS cloud

Virtual Machine Placement for Improved Quality in IaaS Cloud

Improving utilization through dynamic VM resource allocation in hybrid cloud environment

AMAD: Resource Consumption Profile-Aware Attack Detection in IaaS Cloud

Mitigating Multi-Tenancy Risks in IaaS Cloud Through Constraints-Driven Virtual Resource Scheduling

Similar Documents

Mitigating multi-tenancy risks in iaas cloud through constraints-driven virtual resource scheduling (2015)

Real Time Elastic Cloud Management for Limited Resources

When Dynamic VM Migration Falls under the Control of VM Users

Enhancing Multi-tenancy Security in the Cloud IaaS Model over Public Deployment

AMAD: Resource Consumption Profile-Aware Attack Detection in IaaS Cloud

Algorithms to improve scheduling techniques in IaaS cloud

Virtual Machine Placement for Improved Quality in IaaS Cloud

Improving utilization through dynamic VM resource allocation in hybrid cloud environment

AMAD: Resource Consumption Profile-Aware Attack Detection in IaaS Cloud

Mitigating Multi-Tenancy Risks in IaaS Cloud Through Constraints-Driven Virtual Resource Scheduling