Paper 2018/602

On the Universally Composable Security of OpenStack

Kyle Hogan, Hoda Maleki, Reza Rahaeimehr, Ran Canetti, Marten van Dijk, Jason Hennessey, Mayank Varia, and Haibin Zhang

Abstract

OpenStack is the prevalent open-source, non-proprietary package for managing cloud services and data centers. It is highly complex and consists of multiple inter-related components which are developed by separate, loosely coordinated groups. We initiate an effort to provide a rigorous and holistic security analysis of OpenStack. Our analysis has the following key features: -It is user-centric: It stresses the security guarantees given to users of the system, in terms of privacy, correctness, and timeliness of the services. -It provides defense in depth: It considers the security of OpenStack even when some of the components are compromised. This departs from the traditional design approach of OpenStack, which assumes that all services are fully trusted. -It is modular: It formulates security properties for individual components and uses them to assert security properties of the overall system. We base our modeling and security analysis in the universally composable (UC) security framework, which has been so far used mainly for analyzing security of cryptographic protocols. Indeed, demonstrating how the UC framework can be used to argue about security-sensitive systems which are mostly non-cryptographic in nature is another main contribution of this work. Our analysis covers only a number of core components of OpenStack. Still, it uncovers some basic and important security trade-offs in the design. It also naturally paves the way to a more comprehensive analysis of OpenStack.

Note: The order of the authors is alphabetical among the first three authors, and again alphabetical among the remaining authors. Indeed, the first three authors contributed signicantly more to the paper than the other ones.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint. MINOR revision.
Keywords
Modular Security AnalysisUniversal ComposabilityCloud SecurityOpenStack
Contact author(s)
reza rahaeimehr @ uconn edu
History
2018-08-10: last of 2 revisions
2018-06-18: received
See all versions
Short URL
https://ia.cr/2018/602
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2018/602,
      author = {Kyle Hogan and Hoda Maleki and Reza Rahaeimehr and Ran Canetti and Marten van Dijk and Jason Hennessey and Mayank Varia and Haibin Zhang},
      title = {On the Universally Composable Security of OpenStack},
      howpublished = {Cryptology ePrint Archive, Paper 2018/602},
      year = {2018},
      note = {\url{https://eprint.iacr.org/2018/602}},
      url = {https://eprint.iacr.org/2018/602}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.