Scalable Distributed Service Integrity Attestation

Abstract

When the Service providers send applications to the Clients malicious attackers may modify the Applications resulting in the Applications being not delivered promptly to the Clients. When such scenarios the clients may not be able to receive the original Application.The proposed Technique called IntTest overcomes this problem by identifying the attacks and ensures the correct delivery of the Application. This IntTest Technique incorporates a graph analysis scheme, that Provides the pinpointing accuracy of identifying the attacks than the existing schemes. When an attack has been detected the IntTest ensures auto-correction of the Application by replacing the corrupted data. Thus restoring the quality of the original Application.

Existing System

Software-as-a-service (SaaS) clouds (e.g., Amazon Web Service (AWS) and Google AppEngine) build upon the concepts of software as a service and service oriented architecture (SOA), which enable application service providers (ASPs) to deliver their applications via the massive cloud computing infrastructure. In particular, our work focuses on data stream processing services that are considered to be one class of killer applications for clouds with many real-world applications in security surveillance, scientific computing, and business intelligence. However, cloud computing infrastructures are often shared by ASPs from different security domains, which make them vulnerable to malicious attacks.

Proposed System

In this paper, we present IntTest, a new integrated service integrity attestation framework for multitenant cloud systems. IntTest provides a practical service integrity attestation scheme that does not assume trusted entities on third party service provisioning sites or require application modifications. However, in large-scale multitenant cloud systems, multiple malicious attackers may launch colluding attacks on certain targeted service functions to invalidate the assumption. To address the challenge, IntTest takes a holistic approach by systematically examining both consistency and inconsistency relationships among different service providers within the entire cloud system. IntTest examines both perfunction consistency graphs and the global inconsistency graph. Hence, IntTest can still pinpoint malicious attackers even if they become majority for some service functions.

Architecture