On the Feasibility of Deploying Software Attestation in Cloud Environments

We present XSWAT (Xen SoftWare ATtestation), a system that makes use of timing based software attestation to verify the integrity of cloud computing platforms. We believe that ours is the first instance of a system that uses this attestation technique in a cloud environment and results obtained indi...

Full description

Saved in:
Bibliographic Details
Published in2014 IEEE 7th International Conference on Cloud Computing pp. 128 - 135
Main Authors Ghosh, Abhrajit, Sapello, Angelo, Poylisher, Alex, Chiang, C. Jason, Kubota, Ayumu, Matsunaka, Takashi
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.06.2014
Subjects
attestation
cloud
Hardware
hypervisor
Jitter
Kernel
Ports (Computers)
security
Timing
TOCTOU
verification
Virtual machine monitors
Online AccessGet full text

Cover

More Information
Summary:We present XSWAT (Xen SoftWare ATtestation), a system that makes use of timing based software attestation to verify the integrity of cloud computing platforms. We believe that ours is the first instance of a system that uses this attestation technique in a cloud environment and results obtained indicate the feasibility of its deployment. An overview of the XSWAT system and the associated threat model, along with a study of cloud environment impacts on performance, is presented. Environmental parameters include types of interconnects between the XSWAT verifier and measurement agent as well as the number of concurrently executing virtual machines on the platform being verified. Conversely, we also study the impact of XSWAT execution using well known system benchmarks and find this to be insignificant, thereby strengthening the case for XSWAT. We also discuss novel XSWAT mechanisms for addressing TOCTOU attacks.
ISSN:2159-6182
2159-6190
DOI:10.1109/CLOUD.2014.27