Challenges for cloud networking security

HP Laboratories Technical Report

Volumn , Issue 137, 2010, Pages 1-17

  Schoo, Peter ^a   Fusenig, Volker ^a   Souza, Victor ^b   Melo, Márcio ^c   Murray, Paul ^d   Debar, Hervé ^e   Medhioub, Houssem ^e   Zeghlache, Djamal ^e  

^a FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY SIT   (Germany)

^b ERICSSON RESEARCH   (Sweden)

^c Portugal Telecom Inovacao SA   (Portugal)

^d HEWLETT PACKARD LABORATORIES   (United Kingdom)

^e TELECOM PARISTECH   (France)

Author keywords

Cloud Computing; Cloud Networking; Network Virtualisation; Security

Indexed keywords

CLOUD COMPUTING; NETWORKING SECURITY; POSITION PAPERS; SECURITY; SECURITY CHALLENGES; SERVICE MODEL; VIRTUALISATION;

NETWORK SECURITY;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 78650598095     PISSN: None     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (34)

1. SAIL project website (2010). URL http://www.sail-project.eu/
2. Provos, N., Rajab, M.A., Mavrommatis, P.: Cybercrime 2.0: When the cloud turns dark. Queue 7(2), 46{47 (2009)
3. McCarthy, J.: MIT Centennial Speech of 1961 cited in Architects of the Information Society: Thirty-five Years of the Laboratory for Computer Science at MIT. SL Garfinkel Ed (1999)
4. Armbrust, M., Fox, A., Grifith, R., Joseph, A.D., Katz, R.H., Konwinski, A., Lee, G., Patterson, D.A., Rabkin, A., Stoica, I., Zaharia, M.: Above the clouds: A berke- ley view of cloud computing. Tech. Rep. UCB/EECS-2009-28, EECS Department, University of California, Berkeley (2009)
5. Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Neugebauer, R., Pratt, I.,Warfield, A.: XEN and the art of virtualization. In: SOSP '03: Proceedings of the nineteenth ACM symposium on Operating systems principles, pp. 164{177. ACM, New York, NY, USA (2003)
6. VMware (2010). URL http://www.vmware.com
7. Edwards, A., Fischer, A., Lain, A.: Diverter: A new approach to networking within virtualized infrastructures. Tech. Rep. HPL-2009-231, HP Laboratories (2009)
8. Amazon elastic block store (2010). URL http://aws.amazon.com/ebs/
9. Intel virtualization (2010). URL http://www.intel.com/technology/ virtualization/
10. AMD Virtualization (AMD-V) Technology (2010). URL http://sites.amd.com/ us/business/it-solutions/virtualization/Pages/amd-v.aspx
11. Fraser, D.: The canadian response to the USA Patriot Act. Security Privacy, IEEE 5(5), 66 {68 (2007)
12. Directive 2002/58/EC of the European Parliament and of the Council of 12 july 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (directive on privacy and electronic communications). In: official Journal of the European Union, L201, pp. 0037{0047 (2002)
13. Amazon virtual private cloud (2010). URL http://aws.amazon.com/vpc/
14. Pallis, G., Vakali, A.: Insight and perspectives for content delivery networks. Com- mun. ACM 49(1), 101{106 (2006)
15. Chowdhury, N.M.K., Boutaba, R.: A survey of network virtualization. Computer Networks 54(5), 862 { 876 (2010)
16. Bavier, A., Feamster, N., Huang, M., Peterson, L., Rexford, J.: In VINI veritas: realistic and controlled network experimentation. In: SIGCOMM '06: Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications, pp. 3{14. ACM, New York, NY, USA (2006)
17. Feamster, N., Gao, L., Rexford, J.: How to lease the internet in your spare time. SIGCOMM Comput. Commun. Rev. 37(1), 61{64 (2007)
18. Schaffrath, G., Werle, C., Papadimitriou, P., Feldmann, A., Bless, R., Greenhalgh, A., Wundsam, A., Kind, M., Maennel, O., Mathy, L.: Network virtualization ar- chitecture: proposal and initial prototype. In: VISA '09: Proceedings of the 1st ACM workshop on Virtualized infrastructure systems and architectures, pp. 63{ 72. ACM, New York, NY, USA (2009)
19. FEDERICA: Federated E-infrastructure Dedicated to European Researchers Innovating in Computing network Architectures (2010). URL http://www. fp7-federica.eu/
20. Wang, Y., Keller, E., Biskeborn, B., van der Merwe, J., Rexford, J.: Virtual routers on the move: live router migration as a network-management primitive. SIGCOMM Comput. Commun. Rev. 38(4), 231{242 (2008)
21. Brunette, G., Mogul, R.: Security guidance for critical areas of focus in cloud computing v2.1. Cloud Security Alliance (2009)
22. Streitberger W. Ruppel, A.: Cloud computing security - protection goals, taxon- omy, market review. Tech. rep., Institute for Secure Information Technology SIT (2010)
23. Ristenpart, T., Tromer, E., Shacham, H., Savage, S.: Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In: CCS '09: Proceedings of the 16th ACM conference on Computer and communications security, pp. 199{212. ACM, New York, NY, USA (2009)
24. Abi Haidar, D., Cuppens-Boulahia, N., Cuppens, F., Debar, H.: XeNA: an access negotiation framework using XACML. Annals of telecommunications 64(1), 155{ 169 (2009)
25. Gentry, C.: Fully homomorphic encryption using ideal lattices. In: STOC '09: Proceedings of the 41st annual ACM symposium on Theory of computing, pp. 169{178. ACM, New York, NY, USA (2009)
26. Gennaro, R., Gentry, C., Parno, B.: Non-interactive verifiable computing: Outsourcing computation to untrusted workers. In: Proceedings of the International Cryptology Conference (CRYPTO) (2010)
27. Abou El Kalam, A., Baida, R.E., Balbiani, P., Benferhat, S., Cuppens, F., Deswarte, Y., Miège, A., Saurel, C., Trouessin, G.: Organization Based Access Control. In: 4th IEEE International Workshop on Policies for Distributed Systems and Networks (Policy'03) (2003)
28. XEN networking blog (2010). http://wiki.xensource.com/xenwiki/ XenNetworking
29. Chinni, S., Hiremane, R.: Virtual machine device queues (VMDq) - white paper (2010). http://software.intel.com/file/1919
30. Pci-sig single root i/o virtualization (sr-iov) support in intel virtualization technology for connectivity - white paper (2008). www.intel.com/network/ connectivity/solutions/SR-IOV-046NTL-Whitepaper-061308. pdf
31. Uhlig, R., Neiger, G., Rodgers, D., Santoni, A., Martins, F., Anderson, A., Bennett, S., Kagi, A., Leung, F., Smith, L.: Intel virtualization technology. Computer 38(5), 48{56 (2005)
32. Price, M., Partners, A.: The Paradox of Security in Virtual Environments. Com- puter 41(11), 22{28 (2008)
33. King, S.T., Chen, P.M., Wang, Y.M., Verbowski, C., Wang, H.J., Lorch, J.R.: SubVirt: Implementing malware with virtual machines. Security and Privacy, IEEE Symposium on 0, 314{327 (2006)
34. CA Community Blog: Zeus "in-the-cloud" (2009). http://community.ca.com/ blogs/securityadvisor/archive/2009/12/09/zeus-in-the- cloud.aspx