Please use this identifier to cite or link to this item:
Title: Replica placement to mitigate attacks on clouds
Authors: Araújo, Filipe 
Boychenko, Serhiy 
Barbosa, Raul 
Casimiro, António
Keywords: Cloud computing; Fault-Tolerance; Dependability; Virtualization
Issue Date: 2014
Project: FCT/COMPETE/FEDER - project EXPL/EEI-ESS/2542/2013 
FCT/COMPETE/FEDER - project DECAF, An Exploratory Study of Distributed Cloud Application Failures 
FCT/COMPETE/FEDER - project CMU-PT/RNQ/0015/2009, TRONE, Trustworthy and Resilient Operations in a Network Environment. 
Serial title, monograph or event: Journal of Internet Services and Applications
Volume: 5
Issue: 1
Abstract: Execution of critical services traditionally requires multiple distinct replicas, supported by independent networks and hardware. To operate properly, these services often depend on the correctness of a fraction of replicas, usually over 2/3 or 1/2. Defying the ideal situation, economical reasons may tempt users to replicate critical services onto a single multi-tenant cloud infrastructure. Since this may expose users to correlated failures, we assess the risks for two kinds of majorities: a conventional one, related to the number of replicas, regardless of the machines where they run; and a second one, related to the physical machines where the replicas run. This latter case may exist in multi-tenant virtualized environments only. To assess these risks, under crash and Byzantine failures of virtual and physical machines, we resort to theoretical and experimental evaluation. Contrary to what one might expect, we conclude that it is not always favorable to distribute replicas evenly over a fixed number of physical machines. On the contrary, we found cases where they should be as unbalanced as possible. We systematically identify the best defense for each kind of failure and majority to preserve. We then review the most common real-life attacks on clouds and discuss the a priori placement of service replicas that minimizes the effects of these attacks.
ISSN: 1867-4828
DOI: 10.1186/s13174-014-0007-z
Rights: openAccess
Appears in Collections:I&D CISUC - Artigos em Revistas Internacionais

Show full item record


checked on Feb 19, 2024


checked on Feb 2, 2024

Page view(s)

checked on Feb 20, 2024


checked on Feb 20, 2024

Google ScholarTM




This item is licensed under a Creative Commons License Creative Commons