enCloud: Aspect‐oriented trusted service migration on SGX‐enabled cloud VM-Reference-Cited by-同舟云学术

enCloud: Aspect‐oriented trusted service migration on SGX‐enabled cloud VM

Published:2024-06-18 Issue: Volume: Page:
ISSN:0038-0644
Container-title:Software: Practice and Experience
language:en
Short-container-title:Softw Pract Exp

Author:

Yoo Seehwan¹^ORCID,Kim Youngpil²,Park Hyunchan³,Hwang Jaehyun⁴,Kim Kitak⁵

Affiliation:

1. Department of Mobile Systems Engineering Dankook University Yongin‐si South Korea

2. Department of Information and Telecommunication Engineering Incheon National University Incheon South Korea

3. Department of Computer Science and Artificial Intelligence/CAIIT Jeonbuk National University Jeonju‐si South Korea

4. Department of Semiconductor Systems Engineering Sungkyunkwan University Suwon‐si South Korea

5. Foundry Design Service Team, Foundry Business Samsung Electronics Suwon‐si South Korea

Abstract

AbstractThis paper presents enCloud, a new aspect‐oriented trusted service migration with SGX‐enabled cloud VM. Addressing the challenge of reconciling end‐to‐end security with VM migration, enCloud incorporates two key aspects: (1) end‐to‐end security for enclave context migration, and (2) VM abstraction for conventional VM context migration. This paper provides a practical guideline with applicable APIs for trusted service migration. In a case study, enCloud demonstrates effective trusted DB service migration on a cloud VM, achieving end‐to‐end security with minimal trust boundaries. The framework supports pre‐copy live VM migration to minimize service downtime. This paper contributes a concise and practical solution in the form of the enCloud framework for secure service migration.

Publisher

Wiley

Link

https://onlinelibrary.wiley.com/doi/pdf/10.1002/spe.3357

Reference54 articles.

1. CloudSim: a toolkit for modeling and simulation of cloud computing environments and evaluation of resource provisioning algorithms

2. An energy‐aware virtual machines consolidation method for cloud computing: Simulation and verification

3. Confidence interval‐based overload avoidance algorithm for virtual machine placement

4. A thermal‐aware VM consolidation mechanism with outage avoidance

5. Data center service that supports cloud infrastructure;Suzuki Atsuo IM;NEC Techn J,2015