Cloud Location Verification and Adversary Identification

When it comes to cloud computing, people get concerned not only of privacy and integrity of their data but its location as well. This is particularly important due to the existence of variations of laws and regulations governing data storage and access mechanisms in different geographical regions. We will consider a distributed environment such as the cloud and try to verify whether the client-requested servers are holding the file they actually claim to hold. We make some plausible assumptions on the adversarial model and propose a scheme called CLVI for finding out geographical location of servers. Our scheme uses a challenge-response protocol instead of traditional pinging mechanism to accomplish its task. CLVI is able to detect location forgery and identify the adversary involved in the forgery. We validated our technique of detecting location forgery and approximating the adversary's location using measurements from PlanetLab.