Amazingly cool, and nice writing. I tried to check out the paper linked at the bottom re. collocating an instance with a target VM but it's slow for me. Anyone know what the paper is?
What I'm curious about is if it would be possible to use a network of participating VMs on a public cloud to pass around messages untraceably from one party to another. Should certainly be easier to execute than the attack scenario they studied.
If you mean the paper linked as "slightly older research" (http://rump2009.cr.yp.to/8d9cebc9ad358331fcde611bf45f735d.pd...), it's slides from a talk entitled "Cross-VM Vulnerabilities in Cloud Computing" by Thomas Ristenpart, Eran Tromer, Stefan Savage, and Hovav Shacham, presented at Crypto'09's "rump session" (a session for short, amusing and/or late-breaking talks). Downloads slowly for me too, but eventually finishes (6mb pdf).
The following paper by the same authors, from a few months later, appears to be the published-paper version of that research, though, which is probably more useful: http://pages.cs.wisc.edu/~rist/papers/cloudsec.html
Comments
Amazingly cool, and nice writing. I tried to check out the paper linked at the bottom re. collocating an instance with a target VM but it's slow for me. Anyone know what the paper is?
What I'm curious about is if it would be possible to use a network of participating VMs on a public cloud to pass around messages untraceably from one party to another. Should certainly be easier to execute than the attack scenario they studied.
If you mean the paper linked as "slightly older research" (http://rump2009.cr.yp.to/8d9cebc9ad358331fcde611bf45f735d.pd...), it's slides from a talk entitled "Cross-VM Vulnerabilities in Cloud Computing" by Thomas Ristenpart, Eran Tromer, Stefan Savage, and Hovav Shacham, presented at Crypto'09's "rump session" (a session for short, amusing and/or late-breaking talks). Downloads slowly for me too, but eventually finishes (6mb pdf).
The following paper by the same authors, from a few months later, appears to be the published-paper version of that research, though, which is probably more useful: http://pages.cs.wisc.edu/~rist/papers/cloudsec.html
Thanks a lot!