138 Advances in Mobile Cloud Computing Systems
an encryption layer to compute node’s disks, whose encryption
keys are then remotely managed by the PCO. This setup protects
cloud tenants from CNPs, giving the tenants an equivalent of data
center-based security. Cloud tenants can choose to add another layer
of encryption from within their VMs (using their own encryption
keys) if they want to protect themselves from the PCO, much like
Amazon EC2 customers encrypt EBS volumes.
Denial of Service: A malicious CNP can prevent a cloud tenant
from completing his task by frequently powering off the provider
machines, or disconnecting them from the network. An eBay-like
rating system can help identify good and bad CNPs. Like eBay, the
PCO works purely in a matchmaking ...