Cross-Tenant Side-Channel Attacks in PaaS Clouds

摘要: We present a new attack framework for conducting cache-based side-channel attacks and demonstrate this in between tenants on commercial Platform-as-a-Service (PaaS) clouds. Our uses the FLUSH-RELOAD of Gullasch et al. as primitive, extends work by leveraging it within an automaton-driven strategy tracing victim's execution. leverage our first to confirm co-location then extract secrets across tenant boundaries. specifically collect potentially sensitive application data (e.g., number items shopping cart), hijack user accounts, break SAML single sign-on. To best knowledge, are granular, cross-tenant, successfully demonstrated state-of-the-art clouds, PaaS or otherwise.