Skip to main content

Lund University Publications

LUND UNIVERSITY LIBRARIES

Flowrider: Fast On-Demand Key Provisioning for Cloud Networks

Paladi, Nicolae LU orcid ; Tiloca, Marco ; Nikbakht Bideh, Pegah LU orcid and Hell, Martin LU (2021) EAI SecureComm 2021 - 17th EAI International Conference on Security and Privacy in Communication Networks
Abstract
Increasingly fine-grained cloud billing creates incentives to review the software execution footprint in virtual environments. For example, virtual execution environments move towards lower overhead: from virtual machines to containers, unikernels, and serverless cloud computing. However, the execution footprint of security components in virtualized environments has either remained the same or even increased. We present Flowrider, a novel key provisioning mechanism for cloud networks that unlocks scalable use of symmetric keys and significantly reduces the related computational load on network endpoints. We describe the application of Flowrider to common transport security protocols, the results of its formal verification, and its... (More)
Increasingly fine-grained cloud billing creates incentives to review the software execution footprint in virtual environments. For example, virtual execution environments move towards lower overhead: from virtual machines to containers, unikernels, and serverless cloud computing. However, the execution footprint of security components in virtualized environments has either remained the same or even increased. We present Flowrider, a novel key provisioning mechanism for cloud networks that unlocks scalable use of symmetric keys and significantly reduces the related computational load on network endpoints. We describe the application of Flowrider to common transport security protocols, the results of its formal verification, and its prototype implementation. Our evaluation shows that Florwider uses up to an order of magnitude less CPU to establish a TLS session while preventing by construction some known attacks. (Less)
Please use this url to cite or link to this publication:
author
; ; and
organization
publishing date
type
Chapter in Book/Report/Conference proceeding
publication status
published
subject
keywords
Network Security, Software Defined Networking, Secure Communication, Key Management, Cloud Security
host publication
SecureComm 2021 - Proceedings of the 2021 EAI International Conference on Security and Privacy in Communication Networks
publisher
EAI
conference name
EAI SecureComm 2021 - 17th EAI International Conference on Security and Privacy in Communication Networks
conference location
Canterbury (Virtual), United Kingdom
conference dates
2021-09-06 - 2021-09-09
external identifiers
  • scopus:85120078340
project
Säkra mjukvaruuppdateringar för den smarta staden
language
English
LU publication?
yes
id
ea114a62-c02c-4cef-98a4-60de4e4585ea
date added to LUP
2021-06-02 10:14:48
date last changed
2022-05-05 01:49:41
@inproceedings{ea114a62-c02c-4cef-98a4-60de4e4585ea,
  abstract     = {{Increasingly fine-grained cloud billing creates incentives to review the software execution footprint in virtual environments. For example, virtual execution environments move towards lower overhead: from virtual machines to containers, unikernels, and serverless cloud computing. However, the execution footprint of security components in virtualized environments has either remained the same or even increased. We present Flowrider, a novel key provisioning mechanism for cloud networks that unlocks scalable use of symmetric keys and significantly reduces the related computational load on network endpoints. We describe the application of Flowrider to common transport security protocols, the results of its formal verification, and its prototype implementation. Our evaluation shows that Florwider uses up to an order of magnitude less CPU to establish a TLS session while preventing by construction some known attacks.}},
  author       = {{Paladi, Nicolae and Tiloca, Marco and Nikbakht Bideh, Pegah and Hell, Martin}},
  booktitle    = {{SecureComm 2021 - Proceedings of the 2021 EAI International Conference on Security and Privacy in Communication Networks}},
  keywords     = {{Network Security; Software Defined Networking; Secure Communication; Key Management; Cloud Security}},
  language     = {{eng}},
  month        = {{05}},
  publisher    = {{EAI}},
  title        = {{Flowrider: Fast On-Demand Key Provisioning for Cloud Networks}},
  url          = {{https://lup.lub.lu.se/search/files/98553541/SecureComm_2021.pdf}},
  year         = {{2021}},
}