CycleMeter: detecting fraudulent peers in internet cycle sharing

ABSTRACT

Internet cycle sharing systems that utilize idle computing resources dramatically increase the available resources for high performance computing. Fraudulent resource providers, however, can subvert these systems. While previous research has investigated protection against resource providers that return bad results, we consider a different fraudulent behavior -- cycle short-changing -- in which the resource provider faithfully executes the submitted job, but using a smaller percentage of the CPU resources than he/she promises. To detect this short-changing, we propose CycleMeter, a tool that allows a remotely executing application to accurately monitor the percentage of CPU resources it is utilizing throughout its execution period. CycleMeter employs a microbenchmark to measure the instantaneous CPU utilization of the application, and employs a simple and practical mechanism for embedding the microbenchmark into the application. Our experimental results on three operating systems and uniprocessor and multiprocessor machines show that CycleMeter is portable, incurs a low overhead, and is highly effective in detecting a spectrum of cycle shortchanging behavior.

REFERENCES

• 1: Cristiana Amza , Alan L. Cox , Sandhya Dwarkadas , Pete Keleher , Honghui Lu , Ramakrishnan Rajamony , Weimin Yu , Willy Zwaenepoel, TreadMarks: Shared Memory Computing on Networks of Workstations, Computer, v.29 n.2, p.18-28, February 1996 [doi>10.1109/2.485843]
• 2: David P. Anderson, BOINC: A System for Public-Resource Computing and Storage, Proceedings of the Fifth IEEE/ACM International Workshop on Grid Computing (GRID'04), p.4-10, November 08-08, 2004 [doi>10.1109/GRID.2004.14]
• 3: Nazareno Andrade , Francisco Brasileiro , Walfredo Cirne , Miranda Mowbray, Discouraging Free Riding in a Peer-to-Peer CPU-Sharing Grid, Proceedings of the 13th IEEE International Symposium on High Performance Distributed Computing (HPDC'04), p.129-137, June 04-06, 2004 [doi>10.1109/HPDC.2004.9]
• 4: Matthew Arnold , Barbara G. Ryder, A framework for reducing the cost of instrumented code, Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation, p.168-179, June 2001, Snowbird, Utah, United States
• 5: Bailey, D., Barton, J., Lasinski, T., and Simon, H. 1991. The NAS parallel benchmarks. Tech. Rep. TR RNR-91-002, NASA Ames, Aug.
• 6: Paul Barham , Boris Dragovic , Keir Fraser , Steven Hand , Tim Harris , Alex Ho , Rolf Neugebauer , Ian Pratt , Andrew Warfield, Xen and the art of virtualization, Proceedings of the nineteenth ACM symposium on Operating systems principles, October 19-22, 2003, Bolton Landing, NY, USA
• 7: R. Bianchini , L. I. Kontothanassis , R. Pinto , M. De Maria , M. Abud , C. L. Amorim, Hiding communication latency and coherence overhead in software DSMs, Proceedings of the seventh international conference on Architectural support for programming languages and operating systems, p.198-209, October 01-04, 1996, Cambridge, Massachusetts, United States
• 8: Elmarie Bierman , Elsabe Cloete, Classification of malicious host threats in mobile agent computing, Proceedings of the 2002 annual research conference of the South African institute of computer scientists and information technologists on Enablement through technology, September 16-18, 2002, Port Elizabeth, South Africa
• 9: Ali Raza Butt , Rongmei Zhang , Y. Charlie Hu, A Self-Organizing Flock of Condors, Proceedings of the 2003 ACM/IEEE conference on Supercomputing, p.42, November 15-21, 2003
• 10: Butt, A. R., Fang, X., Hu, Y. C., and Midkiff, S. 2004. Java, peer-to-peer, and accountability: Building blocks for distributed cycle sharing. In Proceedings 3rd USENIX Virtual Machine Research and Technology Symposium.
• 11: John B. Carter , John K. Bennett , Willy Zwaenepoel, Implementation and performance of Munin, Proceedings of the thirteenth ACM symposium on Operating systems principles, p.152-164, October 13-16, 1991, Pacific Grove, California, United States
• 12: C. Collberg , E. Carter , S. Debray , A. Huntwork , J. Kececioglu , C. Linn , M. Stepp, Dynamic path-based software watermarking, Proceedings of the ACM SIGPLAN 2004 conference on Programming language design and implementation, June 09-11, 2004, Washington DC, USA
• 13: Landon P. Cox , Brian D. Noble, Samsara: honor among thieves in peer-to-peer storage, Proceedings of the nineteenth ACM symposium on Operating systems principles, October 19-22, 2003, Bolton Landing, NY, USA
• 14: Eaton, J. W. Gnu octave, http://www.octave.org/.
• 15: Fei, L., Fang, X., Hu, Y. C., and Midkiff, S. P. 2006. Monitoring remotely executing shared memory programs in software DSMs. In Proceedings of the 20th IEEE International Parallel and Distributed Processing Symposium (IPDPS).
• 16: Kourosh Gharachorloo , Daniel Lenoski , James Laudon , Phillip Gibbons , Anoop Gupta , John Hennessy, Memory consistency and event ordering in scalable shared-memory multiprocessors, Proceedings of the 17th annual international symposium on Computer Architecture, p.15-26, May 28-31, 1990, Seattle, Washington, United States
• 17: Gilchrist, J. Parallel bzip2 (pbzip2) data compression software, http://compression.ca/pbzip2/.
• 18: Y. Charlie Hu , Alan Cox , Willy Zwaenepoel, Improving fine-grained irregular shared-memory benchmarks by data reordering, Proceedings of the 2000 ACM/IEEE conference on Supercomputing (CDROM), p.33-es, November 04-10, 2000, Dallas, Texas, United States
• 19: Jiang, X., and Xu, D. 2004. Collapsar: A VM-based architecture for network attack detention center. In Proceedings of the 13th USENIX Security Symposium (Security '04).
• 20: Johnson, D. B., and Zwaenepoel, W. 1987. Sender-based message logging. In The 7th annual international symposium on fault-tolerant computing (FTCS), IEEE Computer Society.
• 21: Pete Keleher , Alan L. Cox , Willy Zwaenepoel, Lazy release consistency for software distributed shared memory, Proceedings of the 19th annual international symposium on Computer architecture, p.13-21, May 19-21, 1992, Queensland, Australia
• 22: Lamport, L. 1979. How to make a multiprocessor computer that correctly executes multiprocess programs. IEEE Transactions on Computers C--28, 9 (Sept.), 690--691.
• 23: Lee, S.-I., Johnson, T. A., and Eigenmann, R. 2003. Cetus--an extensible compiler infrastructure for source-to-source transformation. In Proceedings of the 16th International Workshop on Languages and Compilers for Parallel Computing (LCPC).
• 24: Kai Li , Paul Hudak, Memory coherence in shared virtual memory systems, ACM Transactions on Computer Systems (TOCS), v.7 n.4, p.321-359, Nov. 1989 [doi>10.1145/75104.75105]
• 25: Lo, V., Zhou, D., Zappala, D., Liu, Y., and Zhao. S. 2004. Cluster computing on the fly: P2P scheduling of idle cycles in the internet. In Proceedings of the 3rd International Workshop on Peer-to-Peer Systems (IPTPS).
• 26: Loureiro, S., Bussard, L., and Roudier, Y. 2002. Extending tamper-proof hardware security to untrusted execution environments. In Proceeding of the Fifth Smart Card Research and Advanced Application Conference (CARDIS'02), USENIXIFIP.
• 27: Meadows, C. 1997. Detecting attacks on mobile agents. In Foundations for Secure Mobile Code Workshop, 64--65.
• 28: Parzen, E. 1962. On estimation of a probability density function and mode. Ann. Math. Stat. 33, 1065--1076.
• 29: John Regehr, Inferring Scheduling Behavior with Hourglass, Proceedings of the FREENIX Track: 2002 USENIX Annual Technical Conference, p.143-156, June 10-15, 2002
• 30: Tomas Sander , Christian F. Tschudin, Protecting Mobile Agents Against Malicious Hosts, Mobile Agents and Security, p.44-60, January 1998
• 31: Sander, T., and Tschudin, C. F. 1998. Towards mobile cryptography. In Proceedings of the IEEE Symposium on Security and Privacy.
• 32: Saroiu, S., Gummadi, P. K., and Gribble, S. D. 2002. A measurement study of peer-to-peer fi le sharing systems. In Proceedings of Multimedia Computing and Networking (MMCN).
• 33: Simplescalar LLC. Simplescalar, http://www.simplescalar.com/.
• 34: Jaswinder P Singh , Wolf Weber , Anoop Gupta, SPLASH: Stanford parallel applications for shared-memory, Stanford University, Stanford, CA, 1991
• 35: Hal Wasserman , Manuel Blum, Software reliability via run-time result-checking, Journal of the ACM (JACM), v.44 n.6, p.826-849, Nov. 1997 [doi>10.1145/268999.269003]
• 36: Yang, S., Butt, A. R., Hu. Y. C., and Midkiff, S. P. 2005. Lightweight monitoring of the progress of remotely executing computations. In Proceedings of the 18th International Workshop on Languages and Compilers for Parallel Computing (LCPC).
• 37: Shuo Yang , Ali R. Butt , Y. Charlie Hu , Samuel P. Midkiff, Trust but verify: monitoring remotely executing programs for progress and correctness, Proceedings of the tenth ACM SIGPLAN symposium on Principles and practice of parallel programming, June 15-17, 2005, Chicago, IL, USA [doi>10.1145/1065944.1065971]
• 38: Yee, B. 1994. Using secure coprocessors. PhD thesis, Carnegie Mellon University.
• 39: Bennet S. Yee, A sanctuary for mobile agents, Secure Internet programming: security issues for mobile and distributed objects, Springer-Verlag, London, 2001
• 40: Zhao, S., Zhou, D., Liu, Y., Lo, V., and Zappala, D. 2004. Result verification in open peer-to-peer cycle sharing systems. In submitted to Sigcomm'04 Poster Session.
• 41: D. Zhou , V. Lo, Cluster Computing on the Fly: resource discovery in a cycle sharing peer-to-peer system, Proceedings of the 2004 IEEE International Symposium on Cluster Computing and the Grid, p.66-73, April 19-22, 2004
• 42: Zoraja, I., Rackl, G., and Ludwig, T. 1999. Towards monitoring in parallel and distributed environments. In International Conference on Software in Telecommunications and Computer Networks SoftCOM '99, 133--141.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.7 Organization and Design
          Subjects: Distributed systems

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.1 Process Management
          Subjects: Scheduling
      D.4.8 Performance
          Subjects: Monitors

General Terms:
Algorithms, Design, Performance

Keywords:
benchmarking, monitoring, operating systems, peer-to-Peer