Security framework for virtualised infrastructure services provisioned on-demand

Proceedings - 2011 3rd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2011

Volumn , Issue , 2011, Pages 698-704

  Ngo, Canh ^a   Membrey, Peter ^b   Demchenko, Yuri ^a   De Laat, Cees ^a  

^a UNIVERSITY OF AMSTERDAM   (Netherlands)

^b HONG KONG POLYTECHNIC UNIVERSITY   (Hong Kong)

Author keywords

Cloud computing; Dynamic access control infrastructure; Infrastructure virtualisation; On demand infrastructure services provisioning; Security context management; Security infrastrutcure bootstrapping

Indexed keywords

DYNAMIC ACCESS CONTROL INFRASTRUCTURE; INFRASTRUCTURE SERVICES; SECURITY CONTEXT; SECURITY INFRASTRUTCURE BOOTSTRAPPING; VIRTUALISATION;

ACCESS CONTROL; DISTRIBUTED DATABASE SYSTEMS; WEB SERVICES;

CLOUD COMPUTING;

EID: 84857157177     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CloudCom.2011.108     Document Type: Conference Paper

References (32)

1. NIST SP 800-145, "A NIST definition of Cloud computing."
2. NIST SP 500-291, "NIST Cloud Computing Standards Roadmap," NIST, NIST SP 500-291, Jul. 2011.
3. "OGF ISOD-RG," Infrastructure Services On-Demand Provisioning Research Group. [Online]. Available: http://www.ogf.org/gf/group-info/view.php? group=ISOD-RG.
4. OASIS IDCloud TC, "OASIS Identity in the Cloud TC." [Online]. Available: http://wiki.oasis-open.org/id-cloud/.
5. H. Takabi, J. B. D. Joshi, and G.-J. Ahn, "Security and Privacy Challenges in Cloud Computing Environments," IEEE Security & Privacy Magazine, vol. 8, no. 6, pp. 24-31, Nov. 2010.
6. D. Catteddu, and G. Hogben, "Cloud Computing Risk Assessment," ENISA, Nov. 2009.
7. GEYSERS Project, "GEYSERS - Generalised Architecture for Dynamic Infrastructure Services," 2010. [Online]. Available: http://geysers.eu/.
8. "Security Guidance for Critical Areas of Focus in Cloud Computing," Cloud Security Alliance, v2.1, Dec. 2009.
9. NIST SP 800-144, "Guidelines on Security and Privacy in Public Cloud Computing," NIST, NIST800-144, Jan. 2011.
10. J. M. A. Calero, N. Edwards, J. Kirschnick, L. Wilcock, and M. Wray, "Toward a Multi-Tenancy Authorization System for Cloud Services," IEEE Security & Privacy Magazine, vol. 8, no. 6, pp. 48-55, Nov. 2010.
11. K. M. Khan and Q. Malluhi, "Establishing Trust in Cloud Computing," IT Professional, vol. 12, no. 5, pp. 20-27, Sep. 2010.
12. M. Blaze et al., "Dynamic Trust Management," Computer, vol. 42, no. 2, pp. 44-52, Feb. 2009.
13. L. M. Vaquero, L. Rodero-Merino, J. Caceres, and M. Lindner, "A break in the clouds," ACM SIGCOMM Computer Communication Review, vol. 39, no. 1, p. 50, Dec. 2008.
14. Y. Demchenko, C. Ngo, and C. de Laat, "Access control infrastructure for on-demand provisioned virtualised infrastructure services," in 2011 International Conference on Collaboration Technologies and Systems (CTS), Philadelphia, PA, USA, 2011, pp. 466-475.
15. Y. Demchenko, C. de Laat, D. R. Lopez, and J. A. Garcia-Espin, "Security Services Lifecycle Management in On-Demand Infrastructure Services Provisioning," in 2010 IEEE Second International Conference on Cloud Computing Technology and Science, Indianapolis, IN, USA, 2010, pp. 644-650.
16. H. Li and M. Singhal, "Trust Management in Distributed Systems," Computer, vol. 40, no. 2, pp. 45-53, Feb. 2007.
17. A. Abdul-Rahman and S. Hailes, "A distributed trust model," in Proceedings of the 1997 workshop on New security paradigms -NSPW '97, Langdale, Cumbria, United Kingdom, 1997, pp. 48-60.
18. Y. Demchenko, C. Ngo, T. Wlodarczyk, Z. Ziegler, C. Rong, and C. de Laat, "Security Infrastructure for On-demand Provisioned Cloud Infrastructure Services," in The 3rd IEEE International Conference on Cloud Computing Technology and Science (CloudCom2011), Athens, Greece, 2011.
19. "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0, OASIS Standard," OASIS, SAML, Mar. 2005.
20. OASIS, "XACML 2.0 Core: eXtensible Access Control Markup Language (XACML) Version 2.0." 01-Feb-2005.
21. Phosphorus Project, Deliverable D4.3.1, "GAAA Toolkit pluggable components and XACML policy profile for ONRP," Deliverable D4.3.1, Sep. 2008.
22. D. O. Defense, "Trusted Computer System Evaluation Criteria," Dec. 1985.
23. D. Fisher, J. M. McCune, and A. D. Andrews, "Trust and Trusted Computing Platforms," CMU/SEI-2011-TN-005, Jan. 2011.
24. "Intel Hardware Technologies to Secure Clouds." [Online]. Available: http://www.intel.com/content/www/us/en/enterprisesecurity/processors- with-built-in-cloud-security.html.
25. "Intel Cloud Builders Guide for Enhancing Server Platform Security with VMWare." [Online]. Available: http://www.intel.com/Assets/PDF/general/ icb-ra-cloud-computing-VMware-TCP.pdf.
26. E. Brickell, J. Camenisch, and L. Chen, "Direct anonymous attestation," in Proceedings of the 11th ACM conference on Computer and communications security - CCS '04, Washington DC, USA, 2004, p. 132.
27. Y. Demchenko, L. Gommans, and C. de Laat, "Extending usercontrolled security domain with TPM/TCG in Grid-based virtual collaborative environment," in 2007 International Symposium on Collaborative Technologies and Systems, Orlando, FL, USA, 2007, pp. 57-65.
28. B. Parno, "The Trusted Platform Module (TPM) and Sealed Storage," Jun. 2007.
29. "FuseSource Open Source SOA products," FUSESource SOA, 2011. [Online]. Available: http://fusesource.com/products/.
30. "Trusted Computing Group (TCG)." [Online]. Available: https://www.trustedcomputinggroup.org/home.
31. "SunXACML Library 2.x," Sun's XACML Implementation. [Online]. Available: http://sunxacml.sourceforge.net/.
32. "OpenSAML library 2.x." [Online]. Available: http://www.opensaml.org/