CDT to Detect Co-residence in Cloud Computing

  • Hicham Boukhriss
  • Mustapha Hedabou
  • Omar Boutkhoum
Conference paper
Part of the Lecture Notes in Networks and Systems book series (LNNS, volume 37)


Virtualization has been wide used for serving the ever growing computing demand, allowing cloud providers to instantiate multiple virtual machines (VMs) on a single set of physical resources. Customers use this shared resources without warned about the possibility of extracting or manipulating their sensitive data by an attacker who can co-resident his malicious VM with the target one. This paper presents the Co-residence Detection Technique (CDT), a method to analyze how attackers can co-resident with a target VM. Our method consists of three parts: (a) cartography cloud (b) co-residence test and (c) request for migration. We used Amazon EC2, GCE and Microsoft Azure as a case study to demonstrate that is possible to scan the local network and confirm co-residency with a target VM instance by using the network commands.


Cloud computing Co-residence Migration Detection Virtualization Cartography cloud 


  1. 1.
    AbdelSalam, A.M., Elkilani, W.S., Amin, K.M.: An automated approach for preventing ARP spoofing attack using static ARP entries. (JACSA) Int. J. Adv. Comput. Sci. Appl. 5(1) (2004)Google Scholar
  2. 2.
    Srinath, D., Panimalar, S., JerrinSimla, A., Deepa, J.: Detection and prevention ofARP spoofing using centralized server. Int. J. Comput. Appl. 113(19) (2015). (0975 –8887)Google Scholar
  3. 3.
    Boukhriss, H., Mohammed, A.A., Hedabou, M.: New technique of localization a targeted virtual machine in a cloud platform. In: Proceedings 5th Workshop on Codes, Cryptography and Communication Systems, WCCCS 2014 (2014)Google Scholar
  4. 4.
    Upton, D.: Detection and subversion of virtual machines. University of Virginia, CS 851 - Virtual Machine (2006)Google Scholar
  5. 5.
    Zou, C.C., Cunningham, R.: Honeypot-aware advanced botnet construction and maintenance. In: International Conference on Dependable Systems and Networks DSN 2006 (2006)Google Scholar
  6. 6.
    Wang, P., Wu, L., Cunningham, R., Zou, C.C.: Honeypot detection in advanced botnet attacks. Int. J. Inf. Comput. Secur. 4(1), 30–51 (2010)Google Scholar
  7. 7.
    Del Pozo, S.M., Standaert, F.X., Kamel, D., Moradi, A.: Side-channel attacks from static power: when should we care? In: Proceedings of the 2015 Design, Automation & Test in Europe Conference & Exhibition, pp. 145–150 (2015)Google Scholar
  8. 8.
    Zhou, F.F., Goel, M., Desnoyers, P., Sundaram, R.: Scheduler vulnerabilities and coordinated attacks in cloud computing. In: Proceedings of Tenth IEEE International Symposium on Network Computing and Applications (NCA 2011), pp. 123–130 (2011)Google Scholar
  9. 9.
    Varadarajan, V., Kooburat, T., Farley, B., Ristenpart, T., Swift, M.: Resource-freeing attacks: improve your cloud performance (at Your Neighbors Expense). In: Proceedings of ACM Conference on Computer and Communications Security (CCS 2012), pp. 281–292 (2012)Google Scholar
  10. 10.
    Yang, Z., Fang, H., Wu, Y., Li, C., Zhao, B., Huang, H.H.: Understanding the effects of hypervisor I/O scheduling for virtual machine performance interference. In: Proceedings of Fourth IEEE International Conference on Cloud Computing Technology and Science (CloudCom 2012), pp. 34–41 (2012)Google Scholar
  11. 11.
    Bedi, H., Shiva, S.: Securing cloud infrastructure against co-resident DoS attacks using game theoretic defense mechanisms. In:Proceedings of International Conference on Advances in Computing, Communications and Informatics (ICACCI 2012), pp. 463–469 (2012)Google Scholar
  12. 12.
    Perez-Botero, D., Szefer, J., Lee, R.B.: Characterizing hypervisor vulnerabilities in cloud computing. In: Proceedings of the Workshop on Security in Cloud Computing (SCC). Princeton University, Princeton, NJ, USA (2013)Google Scholar
  13. 13.
    Zhao, M., Figueiredo, R.J.: Experimental study of virtual machine migration in support of reservation of cluster resources. In: Proceedings of the 2nd International Workshop on Virtualization Technology in Distributed Computing Article No. 5. Reno, Nevada (2007)Google Scholar
  14. 14.
    Clark, C., Fraser, K., Hand, S., Hansen, J.G., Jul, E., Limpach, C., Pratt, I., Warfield, A.: Live migration of virtual machines. In: Proceedings of the 2nd Conference on Symposium on Networked Systems Design & Implementation, vol. 2, pp. 273–286, (02–04 May 2005)Google Scholar
  15. 15.
    Ye, K., Jiang, X., Ma, R.: VC-migration: live migration of virtual clusters in the cloud grid computing (GRID). In: ACM/IEEE 13th International Conference (2012)Google Scholar
  16. 16.
    Ristenpart, T., Shacham, H., Savage, S.: Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. ACM ‎(2009)Google Scholar
  17. 17.
    Zhang, Y., Oprea, A., Juels, A., Reiter, M.K.: HomeAlone: co-residency detection in the cloud via side-channel analysis. In: IEEE Symposium on Security and Privacy (SP) (2011)Google Scholar
  18. 18.
    Si, Y., Xiaolin, G., Jiancai, L., Xuejun, Z., Junfei, W.: Detecting VMs co-residency in the cloud: using cache-based side channels attacks. Elektronika Ir Elektrotechnika 19(5), 73–78 (2013). ISSN 1392-1215Google Scholar
  19. 19.
    Xu, Y., Bailey, M., Kaustubh, Joshi, F.J.K., Hiltunen, M., Schlichting, R.: .An exploration of L2 cache covert channels in virtualized environments. In: Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop, CCSW 2011, pp. 29–40 (2011)Google Scholar
  20. 20.
    Sevak, B.: Security against side channel attack in cloud computing. Int. J. Eng. Adv. Technol. (IJEAT). 2(2), p. 183 (2012). ISSN: 2249 – 8958Google Scholar
  21. 21.
    Microsoft Azure: Cloud Computing Platform & Services.
  22. 22.
    Amazon Web Services (AWS) - Cloud Computing Services.
  23. 23.
    Compute Engine - IaaS – Google Cloud Platform.

Copyright information

© Springer International Publishing AG 2018

Authors and Affiliations

  • Hicham Boukhriss
    • 1
  • Mustapha Hedabou
    • 1
  • Omar Boutkhoum
    • 2
  1. 1.National School of Applied SciencesUniversity Cadi AyyadSafiMorocco
  2. 2.Faculty of the Sciences SemlaliaUniversity Cadi AyyadMarrakechMorocco

Personalised recommendations