Cloud fingerprinting: using clock skews to determine co-location of virtual machines

Simple item page
dc.contributor.advisorXie, Geoffrey G.
dc.contributor.advisorKolsch, Mathias
dc.contributor.authorWasek, Christopher J.
dc.contributor.departmentComputer Science (CS)
dc.date.accessioned2016-11-02T17:18:13Z
dc.date.available2016-11-02T17:18:13Z
dc.date.issued2016-09
dc.description.abstractCloud computing has quickly revolutionized computing practices of organizations, to include the Department of Defense. However, security concerns over co-location attacks have arisen from the consolidation inherent in virtualization and from physical hardware hosting virtual machines for multiple businesses and organizations. Current cloud security methods, such as Amazon's Virtual Private Cloud, have evolved defenses against most of the well-known fingerprinting and mapping methods in order to prevent malicious users from determining virtual machine co-location on the same hardware. Our solution to co-locating virtual machines unhindered was to derive their clock skews, or the temporal deviation of the system clock over time. Capturing normal TCP traffic to analyze timestamps from a virtual machine in the cloud, our results were inconclusive in demonstrating that co-located virtual machines will have similar clock skews due to large, inconsistent packet delays. Our research demonstrates a potential vulnerability in cloud defenses so that cloud users and providers can take appropriate steps to prevent malicious co-location attacks.en_US
dc.description.distributionstatementApproved for public release; distribution is unlimited.
dc.description.recognitionOutstanding Thesis
dc.description.serviceLieutenant Commander, United States Navyen_US
dc.description.urihttp://archive.org/details/cloudfingerprint1094550503
dc.identifier.urihttps://hdl.handle.net/10945/50503
dc.publisherMonterey, CA; Naval Postgraduate School
dc.relation.ispartofseriesNPS Outstanding Theses and Dissertations
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.subject.authorclouden_US
dc.subject.authorTCP timestampsen_US
dc.subject.authorclock skewsen_US
dc.subject.authorside-channel attacksen_US
dc.subject.authorvirtual machinesen_US
dc.subject.authorVM co-locationen_US
dc.subject.authorfinger-printingen_US
dc.titleCloud fingerprinting: using clock skews to determine co-location of virtual machinesen_US
dc.typeThesisen_US
dspace.entity.typePublication
etd.thesisdegree.disciplineComputer Scienceen_US
etd.thesisdegree.grantorNaval Postgraduate Schoolen_US
etd.thesisdegree.levelMastersen_US
etd.thesisdegree.nameMaster of Science in Computer Scienceen_US
relation.isDepartmentOfPublication67864e54-711d-4c0a-a6d4-439a011f2bd1
relation.isDepartmentOfPublication.latestForDiscovery67864e54-711d-4c0a-a6d4-439a011f2bd1
relation.isSeriesOfPublicationc5e66392-520c-4aaf-9b4f-370ce82b601f
relation.isSeriesOfPublication.latestForDiscoveryc5e66392-520c-4aaf-9b4f-370ce82b601f
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
16Sep_Wasek_Chris.pdf
Size:
2.23 MB
Format:
Adobe Portable Document Format
Download
Collections
Theses