JVM-Based Dynamic Attestation in Cloud Computing

Ba, Haihe; Wang, Zhiying; Ren, Jiangchun; Zhou, Huaizhe

doi:10.1109/trustcom.2014.123

Cited by 2 publications

(4 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is possible for an adversary to implement its malicious intention in the generated bytecode. Prior works [43,44] do not measure dynamically-generated bytecode, leading to high false negatives. The avoidance of false alarms (false positives) is a stringent requirement for any practical solution.…”

Section: Dynamically-generated Bytecodementioning

confidence: 99%

“…We evaluated RIM4J in the dimensions of performance (as measured by runtime overhead and memory overhead). We have also compared the bytecode resolving overhead of RIM4J with that of DTEM [43,44]. We were restricted from comparing against other bytecode measurement systems, as many were unavailable for downloading and did not use standardized benchmarks in their evaluations.…”

Section: Performance Evaluationmentioning

confidence: 99%

“…However, it also requires modifications for JVM, which restricts its widespread usage. DTEM [43,44] implements load-time and runtime measurements for bytecode integrity, but it still modifies the class loadersof the Java platform.…”

Section: Contentmentioning

confidence: 99%

“…Bytecode resolving overhead comparison between DTEM[43,44] and RIM4J (the Y-axis is the overhead normalized to RIM4J).…”

mentioning

confidence: 99%

See 3 more Smart Citations

RIM4J: An Architecture for Language-Supported Runtime Measurement against Malicious Bytecode in Cloud Computing

Zhou

Qiao

et al. 2018

Symmetry

Self Cite

View full text Add to dashboard Cite

While cloud customers can benefit from migrating applications to the cloud, they are concerned about the security of the hosted applications. This is complicated by the customers not knowing whether their cloud applications are working as expected. Although memory-safety Java Virtual Machine (JVM) can alleviate their anxiety due to the control flow integrity, their applications are prone to a violation of bytecode integrity. The analysis of some Java exploits indicates that the violation results primarily from the given excess sandbox permission, loading flaws in Java class libraries and third-party middlewares and the abuse of sun.misc.UnsafeAPI. To such an end, we design an architecture, called RIM4J, to enforce a runtime integrity measurement of Java bytecode within a cloud system, with the ability to attest this to a cloud customer in an unforgeable manner. Our RIM4J architecture is portable, such that it can be quickly deployed and adopted for real-world purposes, without requiring modifications to the underlying systems and access to application source code. Moreover, our RIM4J architecture is the first to measure dynamically-generated bytecode. We apply our runtime measurement architecture to a messaging server application where we show how RIM4J can detect undesirable behaviors, such as uploading arbitrary files and remote code execution. This paper also reports the experimental evaluation of a RIM4J prototype using both a macro-and a micro-benchmark; the experimental results indicate that RIM4J is a practical solution for real-world applications.

show abstract

Section: Dynamically-generated Bytecodementioning

confidence: 99%

Section: Performance Evaluationmentioning

confidence: 99%

Section: Contentmentioning

confidence: 99%

“…Bytecode resolving overhead comparison between DTEM[43,44] and RIM4J (the Y-axis is the overhead normalized to RIM4J).…”

mentioning

confidence: 99%

See 2 more Smart Citations