The DOI matches its Crossref record; 26 of the 26 references it cites were found in a registry or an index.
Cross-Tenant Side-Channel Attacks in PaaS Clouds
Open accessAbstract
We present a new attack framework for conducting cache-based side-channel attacks and demonstrate this framework in attacks between tenants on commercial Platform-as-a-Service (PaaS) clouds. Our framework uses the FLUSH-RELOAD attack of Gullasch et al. as a primitive, and extends this work by leveraging it within an automaton-driven strategy for tracing a victim's execution. We leverage our framework first to confirm co-location of tenants and then to extract secrets across tenant boundaries. We specifically demonstrate attacks to collect potentially sensitive application data (e.g., the number of items in a shopping cart), to hijack user accounts, and to break SAML single sign-on. To the best of our knowledge, our attacks are the first granular, cross-tenant, side-channel attacks successfully demonstrated on state-of-the-art commercial clouds, PaaS or otherwise.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Valgrind: a framework for heavyweight dynamic binary instrumentation
Nethercote, N., & Seward, J. (2007) · Proceedings of the 28th ACM SIGPLAN Conference on Programming Language Design and Implementation · doi:10.1145/1250734.1250746 · Cited by 2,244
Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds
Ristenpart, T., Tromer, E., Shacham, H., & Savage, S. (2009) · Proceedings of the 16th ACM conference on Computer and communications security · doi:10.1145/1653662.1653687 · Cited by 2,053
Self-citation(2011) · IEEE Software · doi:10.1109/ms.2011.67 · Cited by 1,989
Cache Attacks and Countermeasures: The Case of AES
Osvik, D. A., Shamir, A., & Tromer, E. (2006) · Lecture Notes in Computer Science · doi:10.1007/11605805_1 · Cited by 1,352
FLUSH+RELOAD: a high resolution, low noise, L3 cache side-channel attack
Yarom, Y., & Falkner, K. E. K. (2013) · Cited by 987
Cross-VM side channels and their use to extract private keys
Zhang, Y., Juels, A., Reiter, M. K., & Ristenpart, T. (2012) · Proceedings of the 2012 ACM conference on Computer and communications security · doi:10.1145/2382196.2382230 · Cited by 787
Self-citationAllen, F. E. (1970) · ACM SIGPLAN Notices · doi:10.1145/390013.808479 · Cited by 738
Chosen ciphertext attacks against protocols based on the RSA encryption standard PKCS #1
Bleichenbacher, D. (1998) · Lecture Notes in Computer Science · doi:10.1007/bfb0055716 · Cited by 590
Cache Games -- Bringing Access-Based Cache Attacks on AES to Practice
Gullasch, D., Bangerter, E., & Krenn, S. (2011) · 2011 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2011.22 · Cited by 528
Efficient Cache Attacks on AES, and Countermeasures
Tromer, E., Osvik, D. A., & Shamir, A. (2010) · Journal of Cryptology · doi:10.1007/s00145-009-9049-y · Cited by 444
Cited by
Spectre Attacks: Exploiting Speculative Execution
Kocher, P., Genkin, D., Gruss, D., Haas, W., Hamburg, M., Lipp, M., Mangard, S., Prescher, T., Schwarz, M., & Yarom, Y. (2018) · arXiv · doi:10.48550/arxiv.1801.01203 · Cited by 1,850
Last-Level Cache Side-Channel Attacks are Practical
Liu, F., Yarom, Y., Ge, Q., Heiser, G., & Lee, R. B. (2015) · 2015 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2015.43 · Cited by 1,009
Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX
Wang, W., Chen, G., Pan, X., Zhang, Y., Wang, X., Bindschaedler, V., Tang, H., & Gunter, C. A. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134038 · Cited by 320
Self-citationSgxPectre: Stealing Intel Secrets from SGX Enclaves Via Speculative Execution
Chen, G., Chen, S., Xiao, Y., Zhang, Y., Lin, Z., & Lai, T. H. (2019) · 2019 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2019.00020 · Cited by 319
Self-citationCacheZoom: How SGX Amplifies the Power of Cache Attacks
Moghimi, A., Irazoqui, G., & Eisenbarth, T. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-66787-4_4 · Cited by 237
Metadata
- Authors
- Zhang, Y., Juels, A., Reiter, M. K., & Ristenpart, T.
- Venue
- Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security
- Publisher
- ACM
- Published
- 2014-11-03
- Pages
- 990-1003
- OpenAlex
- W2001759130
- Cited by
- 327
- References
- 26
- FWCI
- 20.75
- Type
- conference paper
- Language
- en
- Open access
- bronze
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Cross-Tenant Side-Channel Attacks in PaaS Clouds. https://app.cochat.ai/papers/10.1145/2660267.2660356
- The paper
- Zhang, Y., Juels, A., Reiter, M. K., & Ristenpart, T. (2014). Cross-Tenant Side-Channel Attacks in PaaS Clouds. Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security. https://doi.org/10.1145/2660267.2660356
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
