Application of a distributed security method to end-2-end services security in independent heterogeneous cloud computing environments

Proceedings - 2011 IEEE World Congress on Services, SERVICES 2011

Volumn , Issue , 2011, Pages 379-384

  Goyal, Pankaj ^a  

^a MicroMega Inc   (United States)

Author keywords

End to end security; Heterogeneous clouds; Interoperable clouds

Indexed keywords

COMPUTING ENVIRONMENTS; CONTROL MECHANISM; DISTRIBUTED SECURITY; END-TO-END SECURITY; HETEROGENEOUS CLOUDS; SERVICE PERFORMANCE; SERVICE PROVIDER; SERVICE REQUESTORS; SERVICE SPECIFICATIONS; SERVICE USAGE; SINGLE SOURCE; THREAT SCENARIOS; TRUST AND SECURITY;

CLOUD COMPUTING; CLOUDS; COMPUTER SYSTEMS; ICE; ICE CONTROL;

INTEROPERABILITY;

EID: 80053402847     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SERVICES.2011.34     Document Type: Conference Paper

References (21)

1. Cloud Security Alliance, Security Guidance for Critical Areas of Focus in Cloud Computing, April 2009, http://www.cloudsecurityalliance.org/guidance/ csaguide.pdf
2. E. Bertino, P.A. Bonatti, "Trbac: A temporal role-based access control model," ACM Trans. on Information and System Security, 4(9), 191-223, 2001.
3. E. Bertino, F. Paci, R. Ferrini, "Privacy-Preserving Digital Identity Management for Cloud Computing," IEEE Computer Society Data Engineering Bulletin, 1-4, Mar. 2009.
4. G. Edjlali, A. Acharya, V. Chaudhary, "History-based access control for mobile code," ACM Conference on Computer and Communication Security, 38-48, 1998.
5. ENSIA Report on Cloud Computing Security Risk Assessment, http://www.enisa.europa.eu/act/rm/files/deliverables/cloudcomputing- risk-assessment
6. Epsilon Breach March 30, 2010, http://www.businessweek.com/news/2011-04- 05/citigroupwalgreen- new-york-co-warn-of-e-mail-breaches.html
7. P. Goyal, "An Interoperability Enabling Framework: Services, Processes and Clouds," 2009 IEEE Asia-Pacific Services Computing Conference, 174-179, 2009.
8. J. Heiser, "What you need to know about Cloud computing security and compliance," Gartner Report, July 13, 2009.
9. J. Hu, A. Weaver,) A Corradi, R Montanari, D Tibaldi, "Context-based access control for ubiquitous service provisioning," 28th Interl Computer Software and Applications Conf (COMPSAC'2004), 444-501, 2004.
10. J.B. Joshi, R. Bhatti, E. Bertino, A. Ghafoor, "Access Control Language for Multi-domain Environments," IEEE Internet Computing, 8(6), 40-50, 2004.
11. M. Ko, G.-J. Ahn, M. Shehab "Privacy-Enhanced User-Centric Identity Management," IEEE Int'l Conf. Communications, 998-1002, 2009.
12. D.R. Kuhn, E.J. Coyne, T.R. Weil, "Adding Attributes to Rolebased Access Control," IEEE Computer, vol. 43, 79-81, 2010.
13. A. Kumar, N. Karnik, and G. Chafle, "Context sensitivity in role-based access control," ACM SIGOPS Operating Systems Review, 36(3), 53-66, 2002.
14. D. Liu, J. Zic, "A Framework for Delivering Rigorously Trusted Services," 2010 IEEE International Conference on Web Services, 648-651, 2010.
15. M. Moyer, M. Ahamad, "Generalized role-based access control," 21st International conference on distributed computing systems (ICDCS'01), 391-398, 2001.
16. R.L. Rivest A. Shamir, L.M. Adleman, "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems," Communications of the ACM, 21(2), 120-126, 1978.
17. R.S. Sandhu, E.J. Coyne, H.L. Feinstein, C.E. Youman, "Role based access control models," IEEE Computer, 29(2), 38-47, 1996.
18. P. Saripalli, B. Walters, "QUIRC: A Quantitative Impact and Risk Assessment Framework for Cloud Security," 2010 IEEE 3rd International Conference on Cloud Computing, 280-288, 2010.
19. B. Shafiq, J.B.D. Joshi, E. Bertino, A. Ghafoor, "Secure Interoperation in a Multidomain Environment Employing RBAC Policies," IEEE Transactions on Knowledge and Data Engineering, Vol. 17 (11), 1557-1577, 2005.
20. H. Takabi, J. B.D. Joshi, G.-J. Ahn, "Security privacy challenges in cloud computing environments," IEEE Security & Privacy, vol. 8, 24-31, 2010.
21. E. Yuan, J. Tong, "Attributed Based Access Control (ABAC) for Web Services," IEEE International Conf. on Web Services (ICWS'05), 561-569, 2005.