Domain-Based Storage Protection (DBSP) in Public Infrastructure Clouds

Paladi, Nicolae and Gehrmann, Christian and Morenius, Fredric (2013) Domain-Based Storage Protection (DBSP) in Public Infrastructure Clouds. In: 18th Nordic Conference, NordSec 2013, October 18-21, 2013, Ilulissat, Greenland.

PDF (Domain-Based Storage Protection (DBSP) in Public Infrastructure Clouds, published in proceedings of NordSec 2013)

Official URL:


Confidentiality and integrity of data in Infrastructure-as-a-Service (IaaS) environments increase in relevance as adoption of IaaS advances towards maturity. While current solutions assume a high degree of trust in IaaS provider staff and infrastructure management processes, earlier incidents have demon- strated that neither are impeccable. In this paper we introduce Domain-Based Storage Protection (DBSP) a data confidentiality and integrity protection mechanism for IaaS environments, which relies on trusted computing principles to provide transparent storage isolation between IaaS clients. We describe the building blocks of this mechanism and provide a set of detailed protocols for generation and handling of keys for confidentiality and integrity pro- tection of data stored by guest VM instances. The protocols assume an untrusted IaaS provider and aim to prevent both malicious and accidental faulty config- urations that could lead to breach of data confidentiality and integrity in IaaS deployments.

Item Type:Conference or Workshop Item (Paper)
ID Code:5611
Deposited By:Nicolae Paladi
Deposited On:10 Dec 2013 14:17
Last Modified:10 Dec 2013 14:17

Repository Staff Only: item control page