Building safe PaaS clouds: A survey on security in multitenant software platforms

Computers and Security

Volumn 31, Issue 1, 2012, Pages 96-108

  Rodero Merino, Luis ^a,b   Vaquero, Luis M ^c   Caron, Eddy ^a,d   Muresan, Adrian ^a   Desprez, Frédéric ^a,d  

^a UNIVERSITÉ DE LYON   (France)

^b UNIVERSIDAD POLITÉCNICA DE MADRID   (Spain)

^c HEWLETT PACKARD LABORATORIES   (United Kingdom)

^d SysFera   (France)

Author keywords

.NET; Cloud; Container; Java; Multitenancy; PaaS; Security

Indexed keywords

.NET; JAVA; MULTITENANCY; PAAS; SECURITY;

CODES (SYMBOLS); CONTAINERS; SURVEYS;

CLOUDS;

EID: 84855993467     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2011.10.006     Document Type: Conference Paper

References (62)

1. H. Ahn, H. Oh, and C.O. Sung Towards reliable OSGi framework and applications Proceedings of the 2006 21st ACM symposium on applied computing (SAC'06) April 2006 1456 1461
2. M. Aiken, M. Fähndrich, C. Hawblitzel, G. Hunt, and J. Larus Deconstructing process isolation Proceedings of the 2006 workshop on memory system performance and correctness (MSPC'06) October 2006 1 10 (Pubitemid 47177297)
3. G. Back, and W.C. Hsieh The KaffeOS Java runtime system ACM Transactions on Programming Languages and Systems (TOPLAS) 27 July 2005 583 630 (Pubitemid 43942501)
4. G. Banga, P. Druschel, and J.C. Mogul Resource containers: a new facility for resource management in server systems Proceedings of the 3rd symposium on operating systems design and implementation (OSDI'99) February 1999 45 58
5. L. Bauer, J. Ligatti, and D. Walker Composing security policies with polymer ACM SIGPLAN Notices 4 June 2005 305 314
6. W. Binder Secure and reliable Java-based middleware - challenges and solutions Proceedings of the first international Conference on availability, reliability and security 2006 (ARES'06) April 2006 662 669 (Pubitemid 44732705)
7. W. Binder, and J.G. Hulaas Portable resource control in java - the J-SEAL2 approach Proceedings of the 2001 16th ACM SIGPLAN conference on object oriented programming, systems, languages and applications (OOPSLA'01) October 2001 139 155 (Pubitemid 35009063)
8. W. Binder, and J. Hulaas Exact and portable profiling for the JVM using bytecode instruction counting Electronic Notes in Theoretical Computer Science 164 October 2006 45 64 (Pubitemid 44584821)
9. V. Caldern, and W. Binder JRAF-the java resource accounting facility Proceedings of the 2002 1st workshop on resource management for safe languages (ECOOP'02) June 2002
10. J.M.A. Calero, N. Edwards, J. Kirschnick, L. Wilcock, and M. Wray Toward a multi-tenancy authorization system for cloud services IEEE Security and Privacy 8 December 2010 48 55
11. F. Chen, and R. Grigore Java-MOP: a monitoring oriented programming environment for Java Proceedings of the 11th international conference on tools and algorithms for the construction and analysis of systems (TACAS'05) Lecture notes in computer science Vol. 3440 April 2005 Springer 546 550 (Pubitemid 41282531)
12. X. Chu, K. Nadiminti, C. Jin, S. Venugopal, and R. Buyya Aneka: next-generation enterprise grid platform for e-science and e-business Proceedings of the 3rd IEEE international conference on e-science and grid computing (eScience'07) December 2007 151 159
13. P. Clemente, J. Rouzaud-Cornabas, and C. Toinard From a generic framework for expressing integrity properties to a dynamic MAC enforcement for operating systems. Transactions on computational science XI 2010 Springer pp. 131-161
14. G. Czajkowski, and L. Daynés Multitasking without compromise: a virtual machine evolution ACM SIGPLAN Notices 36 November 2001 125 138 (Pubitemid 35009062)
15. G. Czajkowski, and T.V. Eicken JRes: a resource accounting interface for java Proceedings of the 1998 13th ACM SIGPLAN conference on object-oriented programming systems, languages and applications (OOPSLA'98) October 1998 21 35 (Pubitemid 128454812)
16. G. Czajkowski, L. Dayns, and B. Titzer A multi-user virtual machine Proceedings of the 2003 USENIX annual technical conference June 2003 USENIX Association 7
17. G. Czajkowski, S. Hahn, G. Skinner, P. Soper, and C. Bryce A resource management interface for the java platform Software: Practice and Experience 35 November 2004 123 157
18. T. Elrad, R.E. Filman, and A. Bader Aspect-oriented programming: introduction Communications of the ACM 44 October 2001 29 32
19. C. Escoffier, D. Donsez, and R.S. Hall Developing an OSGi-like service platform for.NET Proceedings of the 3rd IEEE consumer communications and networking conference (CCNC'06) Vol. 1 January 2006 213 217 URL http://ieeexplore.ieee.org/xpls/abs-all.jsp?arnumber=1593018 (Pubitemid 44460381)
20. K. Gama, and D. Donsez Towards dynamic component isolation in a service oriented platform Proceedings of the 2009 12th international symposium on component-based software engineering (CBSE'09) Lecture Notes in Computer Science Vol. 5582 June 2009 Springer 104 120
21. N. Geoffray, G. Thomas, C. Clément, and B. Folliot Towards a new isolation abstraction for OSGi Proceedings of the 2008 1st workshop on isolation and integration in embedded systems (IIES'08) April 2008 41 45
22. N. Geoffray, G. Thomas, G. Muller, P. Parrend, S. Frénot, and B. Folliot I-JVM: A java virtual machine for component isolation in OSGi Research Report RR-6801, INRIA 2009 http://hal.inria.fr/inria-00354580/en/
23. N. Geoffray, G. Thomas, J. Lawall, G. Muller, and B. Folliot VMKit: a substrate for managed runtime environments Proceedings of the 6th ACM SIGPLAN/SIGOPS international conference on Virtual execution environments (VEE'10) March 2010 51 62
24. L. Gong, G. Ellison, and M. Dageforde Inside java 2 platform security: architecture, API design and implementation June 2003 Prentice Hall
25. K.W. Hamlen, and M. Jones Aspect-oriented in-lined reference monitors Proceedings of the 3rd ACM SIGPLAN workshop on programming languages and analysis for security (PLAS'08) June 2008 11 20
26. A. Herzog, and N. Shahmehri An evaluation of java application containers according to security requirements Proceedings of the 2005 14th IEEE international workshops on enabling technologies: infrastructure for collaborative enterprise (WETICE'05) June 2005 178 183 (Pubitemid 46090871)
27. A. Herzog, and N. Shahmehri Problems running untrusted services as java threads IFIP international federation for information processing Vol. 177/2005 September 2005 Springer pp. 19-32
28. J. Hulaas, and W. Binder Program transformations for portable CPU accounting and control in Java Proceedings of the 2004 ACM SIGPLAN symposium on partial evaluation and semantics-based program manipulation (PEPM'04) August 2004 169 177 (Pubitemid 40061969)
29. T. Jaeger Operating system security. Synthesis lectures on information security, privacy, and trust 2008 Morgan & Claypool Publishers
30. X. Jiang, and D. Xu Protection of application service hosting platforms: an operating system perspective Position paper 2003 Purdue University http://www.cs.purdue.edu/homes/dxu/pubs/SODA-protection.pdf
31. M. Jordan, G. Czajkowski, K. Kouklinski, and G. Skinner Extending a J2EE server with dynamic and flexible resource management Proceedings of the 2004 5th ACM/IFIP/USENIX international conference on Middleware Middleware Conference Vol. 78 October 2004 Springer 439 458 (Pubitemid 39738592)
32. M. Jordan, L. Dayns, M. Jarzab, C. Bryce, and G. Czajkowski Scaling J2EE application servers with the multi-tasking virtual machine June 2004 Tech. Rep. TR-2004-135, SUN Microsystems
33. JSR121 Java specification request 121: java isolation API June 2006 Available Online: http://jcp.org/en/jsr/detail?id=121
34. JSR154 Java specification request 154: java servlet 2.5 specification September 2007 Available Online: http://jcp.org/en/jsr/detail?id=154
35. JSR220 Java specification request 220: enterprise java beans 3.0 May 2006 Available Online: http://jcp.org/en/jsr/detail?id=220
36. JSR244 Java specification request 244: java platform, enterprise 5th ed. May 2006 (Java EE specification). Available Online: http://jcp.org/en/jsr/ detail?id=244
37. JSR284 Java specification request 284: resource consumption management API January 2009 Available Online: http://jcp.org/en/jsr/detail?id=284
38. M. Kim, M. Viswanathan, S. Kannan, I. Lee, and O. Sokolsky Java-MaC: a run-time assurance approach for java programs Formal Methods in System Design October 2004 129 155
39. S.T. King, G.W. Dunlap, and P.M. Chen Operating system support for virtual machines USENIX annual technical conference, general track 2003 USENIX 71 84
40. P. Kumar J2EE security for servlets, EJBs, and web services September 2003 Prentice Hall
41. N. Leavitt Is cloud computing really ready for prime time? Computer 42 January 2009 15 20
42. G.C. Necula, and P. Lee The design and implementation of a certifying compiler Proceedings of the ACM SIGPLAN conference on programming language design and Implementation (SIGPLAN'98) June 1998 333 344 (Pubitemid 128454809)
43. S. Oaks Java Security May 2001 O'Reilly
44. OSGi OSGi service platform core specification June 2009 Available Online: http://www.osgi.org/Release4/HomePage
45. N. Parlavantzas, G. Coulson, and G. Blair A resource adaptation framework for reflective middleware Proceedings of the 2nd international workshop on reflective and adaptive middleware (located with ACM/IFIP/USENIX middleware'03) June 2003
46. P. Parrend, and S. Frenot Security benchmarks of OSGi platforms: toward hardened OSGi Software- Practice & Experience 39 April 2009 471 499
47. D. Piliptchouk Java vs.NET security December 2008 O'Reilly
48. M. Pistoia, N. Nagaratnam, L. Koved, and A. Nadalin Enterprise JavaTM security: building secure J2EETM applications February 2004 Addison Wesley
49. D.W. Price, A. Rudys, and D.S. Wallach Garbage collector memory accounting in language-based systems Proceedings of the 2003 IEEE symposium on security and privacy (SP'03) May 2003 263 274
50. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds Proceedings of the 16th ACM conference on computer and communications security (CCS'09) November 2009 199 212
51. A. Rudys, and D.S. Wallach Termination in language-based systems ACM Transactions on Information and System Security 5 May 2002 138 168
52. F.B. Schneider Enforceable security policies ACM Transactions on Information and System Security 3 1 February 2000 30 50
53. K. Sun, Y. Li, M. Hogstrom, and Y. Chen Sizing multi-space in heap for application isolation Proceedings of the 2006 21st ACM SIGPLAN symposium on object-oriented programming systems, languages, and applications (OOPSLA'06) October 2006 647 648 (Pubitemid 46729336)
54. H. Takabi, J.B.D. Joshi, and G.-J. Ahn Security and privacy challenges in cloud computing environments IEEE Security and Privacy 8 December 2010 24 31
55. The Economist, and October Clash of the clouds The Economist 2009 Online version available. URL: http://www.economist.com/displaystory.cfm?story-id= 14637206
56. Úlfar Erlingsson, and F.B. Schneider SASI enforcement of security policies: a retrospective Proceedings of the workshop on new security paradigms (NSPW'99) September 1999 87 95
57. L. Vaquero, L. Rodero-Merino, J. Caceres, and M. Lindner A break in the clouds: towards a cloud definition ACM Computer Communication Review 39 1 2009 50 55
58. C. Vecchiola, X. Chu, and R. Buyya Aneka: a software platform for.NET-based cloud computing Advances in parallel computing Vol. 18 January 2010 IOS Press 267 298
59. J. Viega Cloud computing and the common man Computer Aug 2009 106 108
60. J. Viega, J. Bloch, and P. Chandra Applying aspect-oriented programming to security Cutter IT 14 February 2001 31 39 (Pubitemid 33683812)
61. C.D. Weissman, and S. Bobrowski The design of the force.com multitenant internet application development platform Proceedings of the 5th SIGMOD international conference on management of data (SIGMOD'09) June 2009 889 896
62. S.G. Yi, Y. Deng, H. Yu, X. He, K. Beznosov, and K. Cooper Applying aspect-orientation in designing security systems: a case study Proceedings of the 16th international conference of software engineering and knowledge engineering (SEKE'04) June 2004 360 365