Resource management for isolation enhanced cloud services

Himanshu Raj, Ripal Nathuji, Abhishek Singh, Paul England
2009 Proceedings of the 2009 ACM workshop on Cloud computing security - CCSW '09  
The cloud infrastructure provider (CIP) in a cloud computing platform must provide security and isolation guarantees to a service provider (SP), who builds the service(s) for such a platform. We identify last level cache (LLC) sharing as one of the impediments to finer grain isolation required by a service, and advocate two resource management approaches to provide performance and security isolation in the shared cloud infrastructure -cache hierarchy aware core assignment and page coloring
more » ... cache partitioning. Experimental results demonstrate that these approaches are effective in isolating cache interference impacts a VM may have on another VM. We also incorporate these approaches in the resource management (RM) framework of our example cloud infrastructure, which enables the deployment of VMs with isolation enhanced SLAs.
doi:10.1145/1655008.1655019 dblp:conf/ccs/RajNSE09 fatcat:x5xgbgvtr5ai5hs633peljebka