DMCA
Exploiting cloud utility models for profit and ruin (2011)
| Venue: | 2012 IEEE Fifth International Conference on Cloud Computing, 0:33–40 |
| Citations: | 4 - 0 self |
BibTeX
@INPROCEEDINGS{Idziorek11exploitingcloud,
author = {Joseph Idziorek and Mark Tannian},
title = {Exploiting cloud utility models for profit and ruin},
booktitle = {2012 IEEE Fifth International Conference on Cloud Computing, 0:33–40},
year = {2011}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract—This paper discusses an attack on the cloud com-puting model by which an attacker subtly exploits a fundamental vulnerability of current utility compute models over a sustained period of time. Internet-accessible cloud services expose resources that are metered for billing purposes. These resources are subject to fraudulent resource consumption that is intended to run up the operating expenses for public cloud service customers. The details and significance of this attack are discussed as well as two detection methodologies and there respective experimental results. This work investigates a potentially significant vulnera-bility of the cloud computing model that could be exploited from any Internet connected host. Well-crafted transactions that only differ in intent but not in content are challenging to differentiate and thus this attack may be difficult to detect and prevent. Keywords-cloud computing; utility compute model; fraudulent resource consumption attack; application-layer DDoS; anomaly detection; I.
Keyphrases
cloud utility model operating expense cloud com-puting model application-layer ddos respective experimental result significant vulnera-bility public cloud service customer fraudulent resource consumption keywords-cloud computing internet-accessible cloud service expose resource current utility compute model fraudulent resource consumption attack detection methodology fundamental vulnerability sustained period utility compute model well-crafted transaction anomaly detection billing purpose
