Attack of the week: Cross-VM timing attacks

Re:Attack of the week: Cross-VM timing attacks by jberryman on Saturday October 27, 2012 @03:12PM (#4706930)

Amazingly cool, and nice writing. I tried to check out the paper linked at the bottom re. collocating an instance with a target VM but it's slow for me. Anyone know what the paper is?

What I'm curious about is if it would be possible to use a network of participating VMs on a public cloud to pass around messages untraceably from one party to another. Should certainly be easier to execute than the attack scenario they studied.

[ Parent | on HN ]

Re:Attack of the week: Cross-VM timing attacks by mjn on Saturday October 27, 2012 @04:33PM (#4707155)

If you mean the paper linked as "slightly older research" (http://rump2009.cr.yp.to/8d9cebc9ad358331fcde611bf45f735d.pd...), it's slides from a talk entitled "Cross-VM Vulnerabilities in Cloud Computing" by Thomas Ristenpart, Eran Tromer, Stefan Savage, and Hovav Shacham, presented at Crypto'09's "rump session" (a session for short, amusing and/or late-breaking talks). Downloads slowly for me too, but eventually finishes (6mb pdf).

The following paper by the same authors, from a few months later, appears to be the published-paper version of that research, though, which is probably more useful: http://pages.cs.wisc.edu/~rist/papers/cloudsec.html

[ Parent | on HN ]

Re:Attack of the week: Cross-VM timing attacks by jberryman on Sunday October 28, 2012 @11:36AM (#4709149)

Thanks a lot!

[ Parent | on HN ]