Projects per year
Abstract
By exploiting a side channel created by Copy-on-Write (CoW) operations of modern file systems, we present a novel attack which allows for detecting files in a shared cloud environment across virtual machine boundaries. In particular, we measure deduplication operation timings in order to probe for existing files of neighbouring virtual machines in a shared file system pool. As a result, no assumptions about the underlying hardware and no network access are necessary. To evaluate the real-world implications, we successfully demonstrate the feasibility of our attack on the ZFS file system. Our results clearly show that the presented attack enables the detection of vulnerable software or operating systems in a victim’s virtual machine on the same file system pool with high accuracy. Furthermore, we discuss several potential countermeasures and their implications.
Original language | English |
---|---|
Title of host publication | Proceedings of the 16th International Joint Conference on e-Business and Telecommunications |
Place of Publication | Prague, Czech Republic |
Publisher | SciTePress - Science and Technology Publications |
Pages | 187 - 197 |
Volume | 2: SECRYPT |
ISBN (Electronic) | 978-989-758-378-0 |
DOIs | |
Publication status | Published - Jul 2019 |
Event | 16th International Joint Conference on e-Business and Telecommunications - Prague, Czech Republic Duration: 26 Jul 2019 → 28 Jul 2019 |
Conference
Conference | 16th International Joint Conference on e-Business and Telecommunications |
---|---|
Abbreviated title | ICETE 2019 |
Country/Territory | Czech Republic |
City | Prague |
Period | 26/07/19 → 28/07/19 |
Fingerprint
Dive into the research topics of 'Prying CoW: Inferring Secrets Across Virtual Machine Boundaries'. Together they form a unique fingerprint.Projects
- 1 Active
-
A-SIT - Secure Information Technology Center Austria
Stranacher, K., Dominikus, S., Leitold, H., Marsalek, A., Teufl, P., Bauer, W., Aigner, M. J., Rössler, T., Neuherz, E., Dietrich, K., Zefferer, T., Mangard, S., Payer, U., Orthacker, C., Lipp, P., Reiter, A., Knall, T., Bratko, H., Bonato, M., Suzic, B., Zwattendorfer, B., Kreuzhuber, S., Oswald, M. E., Tauber, A., Posch, R., Bratko, D., Feichtner, J., Ivkovic, M., Reimair, F., Wolkerstorfer, J. & Scheibelhofer, K.
21/05/99 → 6/08/20
Project: Research area