首页> 外文期刊>IEEE Transactions on Parallel and Distributed Systems >Scalable Distributed Service Integrity Attestation for Software-as-a-Service Clouds
【24h】

Scalable Distributed Service Integrity Attestation for Software-as-a-Service Clouds

机译:软件即服务云的可扩展分布式服务完整性证明

获取原文
获取原文并翻译 | 示例
           

摘要

Software-as-a-service (SaaS) cloud systems enable application service providers to deliver their applications via massive cloud computing infrastructures. However, due to their sharing nature, SaaS clouds are vulnerable to malicious attacks. In this paper, we present IntTest, a scalable and effective service integrity attestation framework for SaaS clouds. IntTest provides a novel integrated attestation graph analysis scheme that can provide stronger attacker pinpointing power than previous schemes. Moreover, IntTest can automatically enhance result quality by replacing bad results produced by malicious attackers with good results produced by benign service providers. We have implemented a prototype of the IntTest system and tested it on a production cloud computing infrastructure using IBM System S stream processing applications. Our experimental results show that IntTest can achieve higher attacker pinpointing accuracy than existing approaches. IntTest does not require any special hardware or secure kernel support and imposes little performance impact to the application, which makes it practical for large-scale cloud systems.
机译:软件即服务(SaaS)云系统使应用程序服务提供商可以通过大规模的云计算基础架构交付其应用程序。但是,由于它们的共享特性,SaaS云易受恶意攻击。在本文中,我们介绍了IntTest,这是一种可扩展且有效的SaaS云服务完整性证明框架。 IntTest提供了一种新颖的集成证明图分析方案,与以前的方案相比,它可以提供更强的攻击者精确定位能力。此外,IntTest可以通过将恶意攻击者产生的不良结果替换为良性服务提供商产生的良好结果来自动提高结果质量。我们已经实现了IntTest系统的原型,并使用IBM System S流处理应用程序在生产云计算基础设施上对其进行了测试。我们的实验结果表明,与现有方法相比,IntTest可以实现更高的攻击者精确定位精度。 IntTest不需要任何特殊的硬件或安全的内核支持,并且对应用程序的性能影响很小,这使其在大型云系统中很实用。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号