Confidential State Verification for the Delegated Cloud Jobs with Confidential Audit Log

Liu, Anyi and Haidar, Selena and Cheng, Yuan and Li, Yingjiu (2019) Confidential State Verification for the Delegated Cloud Jobs with Confidential Audit Log. EAI Endorsed Transactions on Security and Safety, 6 (20). e3. ISSN 2032-9393

[img]
Preview
Text
eai.13-7-2018.162290.pdf
Available under License Creative Commons Attribution No Derivatives.

Download (3MB) | Preview

Abstract

Cloud computing provides versatile solutions that allow users to delegate their jobs. An apparent limitation of most cloud audit services is that it is difficult for cloud users to tell the state of a delegated job. Although cloud users can provide a user-specified model, the model is susceptible to various exploits. In this paper, we present VERDICT, a system that amplifies the capability of the existing cloud audit services and allows users to check the state of a cloud job through the confidential model and audit log. VERDICT extracts the model from an application and keeps it in the encrypted form. The encrypted model is partitioned and updated with homomorphic encryption cipher in multiple sandboxes. The state of a delegated job can be checked by cloud users at any time. We implement VERDICT and deploy it in the VMs and containers on popular cloud platforms. Our evaluation shows that VERDICT is capable of reporting the state of a cloud job at run time, keeping the model confidential, and detecting malicious operations.

Item Type: Article
Uncontrolled Keywords: homomorphic encryption, finite state automaton, virtual machine, container.
Subjects: H Social Sciences > H Social Sciences (General)
Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor IV
Date Deposited: 26 Mar 2021 14:00
Last Modified: 26 Mar 2021 14:00
URI: https://eprints.eudl.eu/id/eprint/2117

Actions (login required)

View Item View Item