Title
Modeling the Runtime Integrity of Cloud Servers: A Scoped Invariant Perspective
Abstract
One of the underpinnings of Cloud Computing security is the runtime integrity of individual Cloud servers. Due to the on-going discovery of runtime software vulnerabilities like buffer overflows, it is critical to be able to gauge the integrity of a Cloud server as it operates. In this paper, we propose scoped invariants as a primitive for analyzing the software system for its integrity properties. We report our experience with the modeling and detection of scoped invariants. The Xen Virtual Machine Manager is used for a case study. Our research detects a set of essential scoped invariants that are critical to the runtime integrity of Xen. One such property, that the addressable memory limit of a guest OS must not include Xen's code and data, is indispensable for Xen's guest isolation mechanism. The violation of this property demonstrates that the attacker only needs to modify a single byte in the Global Descriptor Table to achieve his goal.
Year
DOI
Venue
2010
10.1109/CloudCom.2010.29
CloudCom
Keywords
Field
DocType
cloud servers,global descriptor table,cloud computing security,essential scoped invariants,integrity property,individual cloud server,scoped invariants,runtime integrity,tools,virtual machines,xen virtual machine manager,cloud server,runtime software vulnerability,invariants detection,xen,software vulnerabilities,guest os,integrity modeling,cloud computing,data integrity,scoped invariant perspective,security of data,software measurement,buffer overflow,servers,security,virtual machine,software systems
Virtual machine,Computer science,Server,Global Descriptor Table,Real-time computing,Software system,Cloud computing security,Data integrity,Operating system,Distributed computing,Buffer overflow,Cloud computing
Conference
ISBN
Citations 
PageRank 
978-0-7695-4302-4
5
0.45
References 
Authors
16
5
Name
Order
Citations
PageRank
Jinpeng Wei122120.22
Calton Pu25377877.83
Carlos V. Rozas335914.72
Anand Rajan4608.35
Feng Zhu54311.49