Running ZooKeeper coordination services in untrusted clouds

Brenner S, Wulf C, Kapitza R (2014)


Publication Type: Conference contribution

Publication year: 2014

Publisher: USENIX Association

Conference Proceedings Title: 10th Workshop on Hot Topics in System Dependability, HotDep 2014

Event location: Broomfield, CO, USA

Abstract

Cloud computing is a recent trend in computer science. However, privacy concerns and a lack of trust in cloud providers are an obstacle for many deployments. Maturing hardware support for implementing Trusted Execution Environments (TEEs) aims at mitigating these problems. Such technologies allow to run applications in a trusted environment, thereby protecting data from unauthorized access. To reduce the risk of security vulnerabilities, code executed inside a TEE should have a minimal Trusted Codebase. As a consequence, there is a trend for partitioning application's logic in trusted and untrusted parts. Only the trusted parts are executed inside the TEE handling the privacy-sensitive processing steps. In this paper, we add a transparent encryption layer to ZooKeeper by means of a privacy proxy supposed to run inside a TEE. We show what measures are necessary to split an application into a trusted and an untrusted part in order to protect the data stored inside, with Zoo- Keeper as an example. With our solution, ZooKeeper can be deployed at untrusted cloud providers, establishing confidential coordination for distributed applications. With our privacy proxy, all ZooKeeper functionality is retained while there is little degradation of throughput.

Authors with CRIS profile

Involved external institutions

How to cite

APA:

Brenner, S., Wulf, C., & Kapitza, R. (2014). Running ZooKeeper coordination services in untrusted clouds. In 10th Workshop on Hot Topics in System Dependability, HotDep 2014. Broomfield, CO, USA: USENIX Association.

MLA:

Brenner, Stefan, Colin Wulf, and Rüdiger Kapitza. "Running ZooKeeper coordination services in untrusted clouds." Proceedings of the 10th Workshop on Hot Topics in System Dependability, HotDep 2014, Broomfield, CO, USA USENIX Association, 2014.

BibTeX: Download