Secure and Privacy-Aware Multiplexing of Hardware-Protected TPM Integrity Measurements among Virtual Machines

Velten, Michael; Stumpf, Frederic

doi:10.1007/978-3-642-37682-5_23

Cited by 8 publications

(1 citation statement)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…MyCloud reduces as much as possible the trusted computing base (e.g., putting the control of VMs out of its scope) and permits clients to configure their privacy protection, reducing at the same time the ability of the cloud provider of modifying privacy settings. Departing from vTPM, Velten and Stumpf [2013] provide a solution proving integrity of several different VMs using a single hardware TPM. The presented approach does not allow an attacker to tamper with the mapping between a VM and each integrity measurement, and stores the latter in a concealed manner to prevent information leakage by other tenants during remote attestation.…”

Section: Trusted Computingmentioning

confidence: 99%

From Security to Assurance in the Cloud

et al. 2015

View full text Add to dashboard Cite

The cloud computing paradigm has become a mainstream solution for the deployment of business processes and applications. In the public cloud vision, infrastructure, platform, and software services are provisioned to tenants (i.e., customers and service providers) on a pay-as-you-go basis. Cloud tenants can use cloud resources at lower prices, and higher performance and flexibility, than traditional on-premises resources, without having to care about infrastructure management. Still, cloud tenants remain concerned with the cloud's level of service and the nonfunctional properties their applications can count on. In the last few years, the research community has been focusing on the nonfunctional aspects of the cloud paradigm, among which cloud security stands out. Several approaches to security have been described and summarized in general surveys on cloud security techniques. The survey in this article focuses on the interface between cloud security and cloud security assurance. First, we provide an overview of the state of the art on cloud security. Then, we introduce the notion of cloud security assurance and analyze its growing impact on cloud security approaches. Finally, we present some recommendations for the development of next-generation cloud security and assurance solutions.

show abstract

Section: Trusted Computingmentioning

confidence: 99%