{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T06:19:17Z","timestamp":1743142757898,"version":"3.40.3"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319457406"},{"type":"electronic","value":"9783319457413"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-45741-3_25","type":"book-chapter","created":{"date-parts":[[2016,9,14]],"date-time":"2016-09-14T04:50:25Z","timestamp":1473828625000},"page":"493-511","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["The Beauty or The Beast? Attacking Rate Limits of the Xen Hypervisor"],"prefix":"10.1007","author":[{"given":"Johanna","family":"Ullrich","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Edgar","family":"Weippl","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2016,9,15]]},"reference":[{"key":"25_CR1","unstructured":"With an eye on Russia, Estonia seeks security in cloud computing, December 2015. http:\/\/www.firstpost.com\/business\/with-an-eye-on-russia-estonia-seeks-security-in-cloud-computing-2535650.html"},{"key":"25_CR2","unstructured":"Dou, E., Barr, A.: U.S. Cloud Providers Face Backlash From China\u2019s Censors, March 2015. http:\/\/www.wsj.com\/articles\/u-s-cloud-providers-face-backlash-from-chinas-censors-1426541126"},{"issue":"1","key":"25_CR3","doi-asserted-by":"publisher","first-page":"393","DOI":"10.1109\/SURV.2013.062613.00160","volume":"16","author":"A Khan","year":"2014","unstructured":"Khan, A., Othman, M., Madani, S., Khan, S.: A survey of mobile cloud computing application models. IEEE Commun. Surv. Tutorials 16(1), 393\u2013413 (2014)","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"25_CR4","unstructured":"Ericsson, Connected Vehicle Cloud Under The Hood"},{"key":"25_CR5","unstructured":"Gilpin, L.: How The Cloud Is Revolutionizing Healthcare, December 2015. http:\/\/www.forbes.com\/sites\/lyndseygilpin\/2015\/12\/01\/how-the-cloud-is-revolutionizing-healthcare\/"},{"key":"25_CR6","unstructured":"Departement of Commerce, 2015 Top Markets Report Cloud Computing - A Market Assessment Tool for U.S. Exporterts (2015)"},{"key":"25_CR7","unstructured":"FCA paves the way for cloud computing in UK financial services, November 2015. http:\/\/www.out-law.com\/en\/articles\/2015\/november\/fca-paves-the-way-for-cloud-computing-in-uk-financial-services\/"},{"key":"25_CR8","unstructured":"Finnegan, M.: How Tesco Bank has adopted AWS cloud as \u2018business as usual\u2019 in eight months, November 2015. http:\/\/www.computerworlduk.com\/cloud-computing\/how-tesco-bank-has-adopted-aws-cloud-as-business-as-usual-in-eight-months-3629767\/"},{"key":"25_CR9","doi-asserted-by":"crossref","unstructured":"Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Neugebauer, R., Pratt, I., Warfield, A.: Xen and the art of virtualization. In: Proceedings of the Nineteenth ACM Symposium on Operating Systems Principles, SOSP 2003, pp. 164\u2013177 (2003)","DOI":"10.1145\/1165389.945462"},{"key":"25_CR10","volume-title":"Cloud security and privacy: an enterprise perspective on risks and compliance","author":"T Mather","year":"2009","unstructured":"Mather, T., Kumaraswamy, S., Latif, S.: Cloud security and privacy: an enterprise perspective on risks and compliance. O\u2019Reilly Media Inc., Sebastopol (2009)"},{"key":"25_CR11","doi-asserted-by":"crossref","unstructured":"Ristenpart, T., Tromer, E., Shacham, H., Savage, S.: Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In: 16th ACM Conference on Computer and Communications Security, pp. 199\u2013212 (2009)","DOI":"10.1145\/1653662.1653687"},{"key":"25_CR12","doi-asserted-by":"crossref","unstructured":"Herzberg, A., Shulman, H., Ullrich, J., Weippl, E.: Cloudoscopy: services discovery and topology mapping. In: ACM Cloud Computing Security Workshop, pp. 113\u2013122 (2013)","DOI":"10.1145\/2517488.2517491"},{"key":"25_CR13","doi-asserted-by":"crossref","unstructured":"Okamura, K., Oyama, Y.: Load-based covert channels between Xen virtual machines. In: Proceedings of the 2010 ACM Symposium on Applied Computing, pp. 173\u2013180 (2010)","DOI":"10.1145\/1774088.1774125"},{"key":"25_CR14","doi-asserted-by":"crossref","unstructured":"Xu, Y., Bailey, M., Jahanian, F., Joshi, K., Hiltunen, M., Schlichting, R.: An exploration of l2 cache covert channels in virtualized environments. In: Proceedings of the 2011 ACM Workshop on Cloud Computing Security Workshop, pp. 29\u201340 (2011)","DOI":"10.1145\/2046660.2046670"},{"key":"25_CR15","doi-asserted-by":"crossref","unstructured":"Varadarajan, V., Kooburat, T., Farley, B., Ristenpart, T., Swift, M.M.: Resource-freeing attacks: improve your cloud performance (at your neighbor\u2019s expense). In: ACM Conference on Computer and Communications Security, pp. 281\u2013292 (2012)","DOI":"10.1145\/2382196.2382228"},{"key":"25_CR16","doi-asserted-by":"crossref","unstructured":"Bates, A., Mood, B., Pletcher, J., Pruse, H., Valafar, M., Butler, K.: Detecting co-residency with active traffic analysis techniques. In: ACM Cloud Computing Security Workshop, pp. 1\u201312 (2012)","DOI":"10.1145\/2381913.2381915"},{"issue":"2","key":"25_CR17","doi-asserted-by":"publisher","first-page":"171","DOI":"10.1007\/s10207-013-0210-0","volume":"13","author":"A Bates","year":"2014","unstructured":"Bates, A., Mood, B., Pletcher, J., Pruse, H., Valafar, M., Butler, K.: On detecting co-resident cloud instances using network flow watermarking techniques. Int. J. Inf. Secur. 13(2), 171\u2013189 (2014)","journal-title":"Int. J. Inf. Secur."},{"key":"25_CR18","unstructured":"redhat, 33.10.Limit network bandwidth for a Xen guest (2016). https:\/\/access.redhat.com\/documentation\/en-US\/Red_Hat_Enterprise_Linux\/5\/html\/Virtualization\/sect-Virtualization-Tips_and_tricks-Limit_network_bandwidth_for_a_Xen_guest.html"},{"key":"25_CR19","unstructured":"Adamczyk, B., Chydzinski, A.: On the performance isolation across virtual network adapters in Xen. In: Proceedings of the 2nd International Conference Cloud Comput. GRIDs Virtual, CLOUD COMPUTING 2011, pp. 222\u2013227 (2011)"},{"key":"25_CR20","doi-asserted-by":"crossref","unstructured":"Mei, L., Lv, X.: Optimization of network bandwidth allocation in Xen. In: 2015 IEEE 17th International Conference on High Performance Computing and Communications (HPCC), 2015 IEEE 7th International Symposium on Cyberspace Safety and Security (CSS), 2015 IEEE 12th International Conferen on Embedded Software and Systems (ICESS), pp. 1558\u20131566, August 2015","DOI":"10.1109\/HPCC-CSS-ICESS.2015.35"},{"key":"25_CR21","doi-asserted-by":"crossref","unstructured":"Li, C., Xi, S., Lu, C., Gill, C.D., Guerin, R.: Prioritizing soft real-time network traffic in virtualized hosts based on Xen. In: 21st IEEE Real-Time and Embedded Technology and Applications Symposium, pp. 145\u2013156, April 2015","DOI":"10.1109\/RTAS.2015.7108436"},{"key":"25_CR22","doi-asserted-by":"crossref","unstructured":"Rossow, C.: Amplification hell: revisiting network protocols for DDoS abuse. In: Network and Distributed System Security Symposium (NDSS) (2014)","DOI":"10.14722\/ndss.2014.23233"},{"key":"25_CR23","doi-asserted-by":"crossref","unstructured":"Sherwood, R., Bhattacharjee, B., Braud, R.: Misbehaving TCP receivers can cause internet-wide congestion collapse. In: Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS), pp. 383\u2013392 (2005)","DOI":"10.1145\/1102120.1102170"},{"key":"25_CR24","unstructured":"Xu, Y., Musgrave, Z., Noble, B., Bailey, M.: Bobtail: avoiding long tails in the cloud. In: Presented as Part of the 10th USENIX Symposium on Networked Systems Design and Implementation (NSDI 2013), pp. 329\u2013341 (2013)"},{"key":"25_CR25","doi-asserted-by":"crossref","unstructured":"Xu, Y., Bailey, M., Noble, B., Jahanian, F.: Small is better: avoiding latency traps in virtualized data centers. In: Proceedings of the 4th Annual Symposium on Cloud Computing, SOCC 2013 (2013)","DOI":"10.1145\/2523616.2523620"},{"key":"25_CR26","unstructured":"Varadarajan, V., Ristenpart, T., Swift, M.: Scheduler-based defenses against Cross-VM side-channels. In: 23rd USENIX Security Symposium (USENIX Security 2014), pp. 687\u2013702, August 2014"},{"key":"25_CR27","doi-asserted-by":"crossref","unstructured":"Bowers, K.D., van Dijk, M., Juels, A., Oprea, A., Rivest, R.L.: How to tell if your cloud files are vulnerable to drive crashes. In: 18th ACM Conference on Computer and Communications Security, pp. 501\u2013514 (2011)","DOI":"10.1145\/2046707.2046766"},{"key":"25_CR28","doi-asserted-by":"crossref","unstructured":"Benson, K., Dowsley, R., Shacham, H.: Do you know where your cloud files are? In: 3rd ACM Cloud Computing Security Workshop, pp. 73\u201382 (2011)","DOI":"10.1145\/2046660.2046677"},{"key":"25_CR29","doi-asserted-by":"crossref","unstructured":"Kadloor, S., Gong, X., Kiyavash, N., Tezcan, T., Borisov, N.: Low-cost side channel remote traffic analysis attack in packet networks. In: IEEE International Conference on Communications (ICC), pp. 1\u20135, May 2010","DOI":"10.1109\/ICC.2010.5501972"},{"key":"25_CR30","doi-asserted-by":"crossref","unstructured":"Kadloor, S., Kiyavash, N., Venkitasubramaniam, P.: Mitigating timing based information leakage in shared schedulers. In: IEEE INFOCOM, pp. 1044\u20131052 (2012)","DOI":"10.1109\/INFCOM.2012.6195460"},{"key":"25_CR31","doi-asserted-by":"crossref","unstructured":"Alarifi, S., Wolthusen, S.D.: Robust coordination of cloud-internal denial of service attacks. In: 2013 Third International Conference on Cloud and Green Computing (CGC), pp. 135\u2013142, September 2013","DOI":"10.1109\/CGC.2013.28"},{"issue":"1","key":"25_CR32","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1109\/TCC.2014.2325045","volume":"3","author":"M Ficco","year":"2015","unstructured":"Ficco, M., Rak, M.: Stealthy denial of service strategy in cloud computing. IEEE Trans. Cloud Comput. 3(1), 80\u201394 (2015)","journal-title":"IEEE Trans. Cloud Comput."},{"key":"25_CR33","doi-asserted-by":"crossref","unstructured":"Liu, H.: A new form of DOS attack in a cloud and its avoidance mechanism. In: Proceedings of the 2010 ACM Workshop on Cloud Computing Security Workshop, CCSW 2010, pp. 65\u201376 (2010)","DOI":"10.1145\/1866835.1866849"},{"key":"25_CR34","doi-asserted-by":"crossref","unstructured":"Shea, R., Liu, J.: Understanding the impact of denial of service attacks on virtual machines. In: Proceedings of the 2012 IEEE 20th International Workshop on Quality of Service, IWQoS 2012, pp. 27:1\u201327:9 (2012)","DOI":"10.1109\/IWQoS.2012.6245975"},{"issue":"2","key":"25_CR35","doi-asserted-by":"publisher","first-page":"335","DOI":"10.1109\/JSYST.2012.2221998","volume":"7","author":"R Shea","year":"2013","unstructured":"Shea, R., Liu, J.: Performance of virtual machines under networked denial of service attacks: experiments and analysis. IEEE Syst. J. 7(2), 335\u2013345 (2013)","journal-title":"IEEE Syst. J."},{"key":"25_CR36","doi-asserted-by":"crossref","unstructured":"Ferriman, B., Hamed, T., Mahmoud, Q.H.: Storming the cloud: a look at denial of service in the Google App Engine. In: 2015 International Conference on Computing, Networking and Communications (ICNC), pp. 363\u2013368, February 2015","DOI":"10.1109\/ICCNC.2015.7069370"},{"issue":"4","key":"25_CR37","doi-asserted-by":"crossref","first-page":"1097","DOI":"10.1016\/j.jnca.2010.06.004","volume":"34","author":"Ashley Chonka","year":"2011","unstructured":"Chonka, A., Xiang, Y., Zhou, W., Bonti, A.: Cloud security defence to protect cloud computing against HTTP-DoS and XMLAQ2DoS attacks. J. Netw. Comput. Appl. 34(4), 1097\u20131107 (2011)","journal-title":"Journal of Network and Computer Applications"},{"issue":"4","key":"25_CR38","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1109\/MCOM.2015.7081075","volume":"53","author":"Q Yan","year":"2015","unstructured":"Yan, Q., Yu, F.R.: Distributed denial of service attacks in software-defined networking with cloud computing. IEEE Commun. Mag. 53(4), 52\u201359 (2015)","journal-title":"IEEE Commun. Mag."},{"issue":"1","key":"25_CR39","doi-asserted-by":"publisher","first-page":"369","DOI":"10.1109\/SURV.2013.050113.00090","volume":"16","author":"Z Sanaei","year":"2014","unstructured":"Sanaei, Z., Abolfazli, S., Gani, A., Buyya, R.: Heterogeneity in mobile cloud computing: Taxonomy and open challenges. IEEE Commun. Surv. Tutorials 16(1), 369\u2013392 (2014)","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"25_CR40","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"172","DOI":"10.1007\/978-3-642-40651-5_14","volume-title":"Service-Oriented and Cloud Computing","author":"U Lampe","year":"2013","unstructured":"Lampe, U., Kieselmann, M., Miede, A., Z\u00f6ller, S., Steinmetz, R.: A tale of millis and nanos: time measurements in virtual and physical machines. In: Lau, K.-K., Lamersdorf, W., Pimentel, E. (eds.) ESOCC 2013. LNCS, vol. 8135, pp. 172\u2013179. Springer, Heidelberg (2013)"},{"key":"25_CR41","unstructured":"Broomhead, T., Cremean, L., Ridoux, J., Veitch, D.: Virtualize everything but time. In: USENIX Symposium on Operating Systems Design and Implementation (OSDI 2010) (2010)"},{"key":"25_CR42","doi-asserted-by":"crossref","unstructured":"Ullmann, M., Vogeler, M.: Delay attacks: implication on NTP and PTP time synchronization. In: 2009 International Symposium on Precision Clock Synchronization for Measurement, Control and Communication, October 2009","DOI":"10.1109\/ISPCS.2009.5340224"},{"key":"25_CR43","doi-asserted-by":"crossref","unstructured":"Rasti, R., Murthy, M., Weaver, N., Paxson, V.: Temporal lensing and its application in pulsing denial-of-service attacks. In: 2015 IEEE Symposium on Security and Privacy, pp. 187\u2013198, May 2015","DOI":"10.1109\/SP.2015.19"},{"key":"25_CR44","doi-asserted-by":"crossref","unstructured":"Wang, G., Ng, T.S.E.: The impact of virtualization on network performance of amazon EC2 data center. In: INFOCOM, 2010 Proceedings IEEE, pp. 1\u20139, March 2010","DOI":"10.1109\/INFCOM.2010.5461931"},{"key":"25_CR45","unstructured":"Rackspace, Pricing (2016). https:\/\/www.rackspace.com\/cloud\/servers\/pricing"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2016"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-45741-3_25","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,9,15]],"date-time":"2021-09-15T02:51:08Z","timestamp":1631674268000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-45741-3_25"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319457406","9783319457413"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-45741-3_25","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2016]]},"assertion":[{"value":"15 September 2016","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Heraklion","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Greece","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2016","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2016","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2016","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2016","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}