Title
Hardware-Assisted Secure Resource Accounting under a Vulnerable Hypervisor
Abstract
With the proliferation of cloud computing to outsource computation in remote servers, the accountability of computational resources has emerged as an important new challenge for both cloud users and providers. Among the cloud resources, CPU and memory are difficult to verify their actual allocation, since the current virtualization techniques attempt to hide the discrepancy between physical and virtual allocations for the two resources. This paper proposes an online verifiable resource accounting technique for CPU and memory allocation for cloud computing. Unlike prior approaches for cloud resource accounting, the proposed accounting mechanism, called Hardware-assisted Resource Accounting (HRA), uses the hardware support for system management mode (SMM) and virtualization to provide secure resource accounting, even if the hypervisor is compromised. Using a secure isolated execution support of SMM, this study investigates two aspects of verifiable resource accounting for cloud systems. First, this paper presents how the hardware-assisted SMM and virtualization techniques can be used to implement the secure resource accounting mechanism even under a compromised hypervisor. Second, the paper investigates a sample-based resource accounting technique to minimize performance overheads. Using a statistical random sampling method, the technique estimates the overall CPU and memory allocation status with 99%~100% accuracies and performance degradations of 0.1%~0.5%.
Year
DOI
Venue
2015
10.1145/2731186.2731203
VEE
Keywords
DocType
Volume
virtualization,cloud
Conference
50
Issue
ISSN
Citations 
7
0362-1340
4
PageRank 
References 
Authors
0.43
18
4
Name
Order
Citations
PageRank
Seongwook Jin120110.24
Jinho Seol2313.70
Jaehyuk Huh3100863.91
Seungryoul Maeng473047.58