Secure Consistency Verification for Untrusted Cloud Storage by Public Blockchains

by   Kai Li, et al.

This work presents ContractChecker, a Blockchain-based security protocol for verifying the storage consistency between the mutually distrusting cloud provider and clients. Unlike existing protocols, the ContractChecker uniquely delegates log auditing to the Blockchain, and has the advantages in reducing client cost and lowering requirements on client availability, lending itself to modern scenarios with mobile and web clients. The ContractChecker collects the logs from both clients and the cloud server, and verifies the consistency by cross-checking the logs. By this means, it does not only detects the attacks from malicious clients and server forging their logs, but also is able to mitigate those attacks and recover the system from them. In addition, we design new attacks against ContractChecker exploiting various limits in real Blockchain systems (e.g., write unavailability, Blockchain forks, contract race conditions). We analyze and harden the security of ContractChecker protocols against the proposed new attacks. For evaluating the cost, we build a functional prototype of the ContractChecker on Ethereum/Solidity. By experiments on private and public Ethereum testnets, we extensively evaluate the cost of the ContractChecker in comparison with that of existing client-based log auditing works. The result shows the ContractChecker can scale to hundreds of clients and save client costs by more than one order of magnitude.


page 1

page 2

page 3

page 4


Requirements for Ethereum Private Sidechains

The Enterprise Ethereum Client Specification by the Enterprise Ethereum ...

Prover efficient public verification of dense or sparse/structured matrix-vector multiplication

With the emergence of cloud computing services, computationally weak dev...

The Sorry State of TLS Security in Enterprise Interception Appliances

Network traffic inspection, including TLS traffic, in enterprise environ...

Mining Function Homology of Bot Loaders from Honeypot Logs

Self-contained loaders are widely adopted in botnets for injecting loadi...

Immutable Log Storage as a Service

Logs contain critical information about the quality of the rendered serv...

Bonsai: A Generalized Look at Dual Deduplication

Cloud Service Providers (CSPs) offer a vast amount of storage space at c...

Indexing structures for the PLS blockchain

This paper studies known indexing structures from a new point of view: m...

Please sign up or login with your details

Forgot password? Click here to reset