What I'm curious about is if it would be possible to use a network of participating VMs on a public cloud to pass around messages untraceably from one party to another. Should certainly be easier to execute than the attack scenario they studied.
Attack of the week: Cross-VM timing attacks
11–13 of 13 posts
Re: Attack of the week: Cross-VM timing attacks
#12Amazingly cool, and nice writing. I tried to check out the paper linked at the bottom re. collocating an instance with a target VM but it's slow for me. Anyone know what the paper is? What I'm curious about is if it would be possible to use a network of participating VMs on a public cloud to pass around messages untraceably from one party to another. Should certainly be easier to execute than the attack scenario they…
The following paper by the same authors, from a few months later, appears to be the published-paper version of that research, though, which is probably more useful: http://pages.cs.wisc.edu/~rist/papers/cloudsec.html
Re: Attack of the week: Cross-VM timing attacks
#13Amazingly cool, and nice writing. I tried to check out the paper linked at the bottom re. collocating an instance with a target VM but it's slow for me. Anyone know what the paper is? What I'm curious about is if it would be possible to use a network of participating VMs on a public cloud to pass around messages untraceably from one party to another. Should certainly be easier to execute than the attack scenario they…
If you mean the paper linked as "slightly older research" ( http://rump2009.cr.yp.to/8d9cebc9ad358331fcde611bf45f735d.pd... ), it's slides from a talk entitled "Cross-VM Vulnerabilities in Cloud Computing" by Thomas Ristenpart, Eran Tromer, Stefan Savage, and Hovav Shacham, presented at Crypto'09's "rump session" (a session for short, amusing and/or late-breaking talks). Downloads slowly for me too, but eventually fi…