Yinqian Zhang      Yinqian Zhang
Computer Science Department
University of North Carolina - Chapel Hill
"Security Threats and Defenses in Multi-Tenant Public Clouds"
Tuesday, February 18, 4:00 PM
Packard Lab, Room 466

Abstract:This talk covers a series of studies on the security threats and defenses in multi-tenant public clouds. In particular, it details the work on cache-based side-channel attacks that can successfully extract cryptographic private keys from another VM co-located on the same physical machine, which calls into question the established belief that the security isolation provided by modern virtualization technologies remains adequate under the new threat model in multi-tenant public clouds. To address such threats, two defensive techniques were devised, which can be adopted by cloud tenants immediately on modern cloud platforms without extra help from the providers: (1) for tenants requiring a high degree of security and physical isolation, a tool to facilitate cloud auditing of such isolation without querying the cloud provider; and (2) for tenants who use multi-tenant cloud services, an operating-system-level defense for the tenants to defend against side-channel threats on their own.

Bio: Yinqian Zhang is a Ph.D. candidate in the Computer Science Department of the University of North Carolina at Chapel Hill. His research focuses on computer systems and security, with particular emphasis on the security of virtualized and and distributed systems. His work on side-channel analysis in the clouds was broadly cited in academia and widely discussed in popular technology news websites. The work he conducted as a research intern at RSA labs and Google Research resulted in several U.S. pending patents. He is also the recipient of the Google Ph.D. Fellowship in Computer Security in 2013.

© 2014-2016 Computer Science and Engineering, P.C. Rossin College of Engineering & Applied Science, Lehigh University, Bethlehem PA 18015.