DECH: A Novel Attack Pattern of Cloud Environment and Its Countermeasures
Haoyu Gao, Leixiao Li, Hao Lin, Jianxiong Wan, Dan Deng, Jie Li · 2021
Cloud computing has become more and more vital in digital world as a basic technique of many services. As the foundation of cloud computing, the cloud platform hosts various cloud services running on it and providing interfaces to cloud users. Thus, it becomes a high-value target in attacker's eyes. This paper proposes a novel attack pattern named DECH for intruding and controlling a cloud platform standing on the side of attackers. From the defenders' perspective, this paper points out the key measures to enforce cloud service security are to restrict the Trust Computing Base (TCB) size and strengthen the isolation between cloud components. Then we provide countermeasures against “Detect Escape Control and Harvest” (DECH) based on the combination of Software Guard Extensions (SGX) and Trust Domain Extensions (TDE). This research provisions references for building secure cloud services.