Paper Info
Title
Multi-processor architectural support for protecting virtual machine privacy in untrusted cloud environment
Abstract
Virtualization is fundamental to cloud computing because it allows multiple operating systems to run simultaneously on a physical machine. However, it also brings a range of security/privacy problems. One particularly challenging and important problem is: how can we protect the Virtual Machines (VMs) from being attacked by Virtual Machine Monitors (VMMs) and/or by the cloud vendors when they are not trusted? In this paper, we propose an architectural solution to the above problem in multi-processor cloud environments. Our key idea is to exploit hardware mechanisms to enforce access control over the shared resources (e.g., memory spaces), while protecting VM memory integrity as well as inter-processor communications and data sharing. We evaluate the solution using full-system emulation and cycle-based architecture models. Experiments based on 20 benchmark applications show that the performance overhead is 1.5%--10% when access control is enforced, and 9%--19% when VM memory is encrypted.
Year
DOI
Venue
2013
10.1145/2482767.2482799
Conf. Computing Frontiers
Keywords
Field
DocType
multi-processor cloud environment,multi-processor architectural support,architectural solution,vm memory integrity,vm memory,virtual machine monitors,access control,virtual machines,important problem,cloud vendor,memory space,virtual machine privacy,untrusted cloud environment,cloud
Virtualization,Virtual machine,Computer science,Data sharing,Parallel computing,Real-time computing,Encryption,Exploit,Emulation,Access control,Operating system,Cloud computing
Conference
Citations 
PageRank 
References 
4
0.39
27
Authors
7
Name
Order
Citations
PageRank
Yuanfeng Wen1687.99
JongHyuk Lee29710.51
Ziyi Liu3394.18
Qingji Zheng425510.74
Weidong Shi533141.44
Shouhuai Xu61717115.84
Taeweon Suh717122.47