A monitoring and audit logging architecture for data location compliance in federated cloud infrastructures

IEEE International Symposium on Parallel and Distributed Processing Workshops and Phd Forum

Volumn , Issue , 2011, Pages 1510-1517

  Massonet, Philippe ^a,b   Naqvi, Syed ^a,b   Ponsard, Christophe ^a,b   Latanicki, Joseph ^a,b   Rochwerger, Benny ^c,d   Villari, Massimo ^c,d  

^a Centre d'Excellence en Technologies de l'Information et de la Communication   (Belgium)

^b Thales Theresis ^*  (France)

^c IBM HAIFA RESEARCH LAB   (Israel)

^d UNIVERSITY OF MESSINA   (Italy)

Author keywords

Cloud computing; Compliance issues; Federated architectures; Logging architecture; Monitoring mechanisms

Indexed keywords

AUDIT LOGS; CLOUD MONITORING; COMPLIANCE AUDITING; COMPLIANCE ISSUES; CRITICAL BUSINESS; DATA LOCATION; E-GOVERNMENT; FEDERATED ARCHITECTURE; MONITORING INFORMATION; SERVICE OFFERING; SERVICE PROVIDER; VIRTUAL MACHINES;

ARCHITECTURE; CLOUD COMPUTING; DISTRIBUTED PARAMETER NETWORKS; MANAGEMENT;

MONITORING;

EID: 83455220824     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IPDPS.2011.304     Document Type: Conference Paper

References (13)

1. Rochwerger et al. (Eds.), RESERVOIR High Level Architecture (release 1.2), Project Deliverable D.1.1.1, 2008
2. Clayman S. et al., Monitoring Service Clouds in the Future Internet, Towards the Future Internet, pp 115-126, 2010, IOS Press, ISBN 978-1-60750-538-9
3. Mazzoleni P. et al., XACML Policy Integration Algorithms, ACM Transaction on Information System Security, 11/1, 2008
4. Naqvi S. et al., Fine-Grained Continuous Usage Control of Service Based Grids - The GridTrust Approach, ServiceWave Conference 2008, pp 242-253, 2008
5. Trusted Computer System Evaluation Criteria (TCSEC), US Department of Defense DoD-5200.28-STD, 1985
6. International Standards Organization, ISO/IEC 1508: Common Criteria, 1999
7. Information Systems Security, Army Regulation 38019, 1998
8. Gruschka N., Lo Iacono L., Vulnerable Cloud: SOAP Message Security Validation Revisited, IEEE International Conference on Web Services 2009 (ICWS-2009), pp 625-631, ISBN 978-0-7695-3709-2
9. Amazon Elastic Compute Cloud Developer Guide, API Version 2010-08-31
10. SAS 70 audit, probably the best you can get for a security test, especially when you compare it to something like a security penetration study.
11. The "ISO27k" (ISO/IEC 27000-series) standards provide good practice guidance on designing, implementing and auditing Information Security Management Systems
12. Tim Mather, Subra Kumaraswamy and Shahed Latif. Cloud Security and Privacy: An Enterprise Perspective on Risks and Compliance. O'Reilly Media. September 2009.
13. Cloud Computing, European Research Consortium for Informatics and Mathematics (ERCIM News no. 83). October 2010.