On localization attacks against cloud infrastructure

Linqiang Ge; Wei Yu; Mohammad Ali Sistani

doi:10.1117/12.2015626

28 May 2013 On localization attacks against cloud infrastructure

Linqiang Ge, Wei Yu, Mohammad Ali Sistani

Proceedings Volume 8757, Cyber Sensing 2013; 875703 (2013) https://doi.org/10.1117/12.2015626
Event: SPIE Defense, Security, and Sensing, 2013, Baltimore, Maryland, United States

Abstract

One of the key characteristics of cloud computing is the device and location independence that enables the user to access systems regardless of their location. Because cloud computing is heavily based on sharing resource, it is vulnerable to cyber attacks. In this paper, we investigate a localization attack that enables the adversary to leverage central processing unit (CPU) resources to localize the physical location of server used by victims. By increasing and reducing CPU usage through the malicious virtual machine (VM), the response time from the victim VM will increase and decrease correspondingly. In this way, by embedding the probing signal into the CPU usage and correlating the same pattern in the response time from the victim VM, the adversary can find the location of victim VM. To determine attack accuracy, we investigate features in both the time and frequency domains. We conduct both theoretical and experimental study to demonstrate the effectiveness of such an attack.

Citation Download Citation

Linqiang Ge, Wei Yu, and Mohammad Ali Sistani "On localization attacks against cloud infrastructure", Proc. SPIE 8757, Cyber Sensing 2013, 875703 (28 May 2013); https://doi.org/10.1117/12.2015626

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available