Validating cloud infrastructure changes by cloud audits

Proceedings - 2012 IEEE 8th World Congress on Services, SERVICES 2012

Volumn , Issue , 2012, Pages 377-384

  Doelitzscher, Frank ^a   Fischer, Christian ^a   Moskal, Denis ^a   Reich, Christoph ^a   Knahl, Martin ^a   Clarke, Nathan ^b  

^a FURTWANGEN UNIVERSITY   (Germany)

^b UNIVERSITY OF PLYMOUTH   (United Kingdom)

Author keywords

cloud audit; cloud computing; cloud security

Indexed keywords

AUDIT REPORTS; AUDIT SYSTEMS; CLOUD PROVIDERS; COMPUTING INFRASTRUCTURES; OR-NETWORKS; SECURITY AUDIT; VIRTUAL INFRASTRUCTURES; VIRTUAL MACHINES;

AUTONOMOUS AGENTS; CLOUD COMPUTING;

MANAGEMENT;

EID: 84867276671     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SERVICES.2012.12     Document Type: Conference Paper

References (22)

1. L. Vaquero, L. Rodero-Merino, and D. Moran, "Locking the sky: a survey on iaas cloud security," Computing, vol. 91, pp. 93-118, 2011.
2. Business Insider, "Inside Amazon's Cloud Disaster," http://www.businessinsider.com/amazon-outage-enters-its-second-day-lots-of- sites-still-down-2011-4, 04 2011.
3. B. Insider, "Amazon's Cloud Crash Disaster Permanently Destroyed Many Customers' Data," http://www.businessinsider.com/amazon-lost-data- 2011-4, 04 2011.
4. T. Hoff. (2011, 04) The big list of articles on the amazon outage. http://highscalability.com/blog/2011/4/25/the-big-list-of-articles-on-the- amazon-outage.html.
5. A. W. Services. (2011, 04) Summary of the amazon ec2 and amazon rds service disruption in the us east region. http://aws.amazon.com/de/message/ 65648/.
6. Federal Office for Information Security (BSI). IT-Grundschutz Catalogues. https://www.bsi.bund.de/EN/Topics/ITGrundschutz/itgrundschutz node.html.
7. F. O. for Information Security (BSI), "Eckpunktepapier Sicherheitsempfehlungen fr Cloud Computing Anbieter," Tech. Rep., 2011.
8. L. Li, L. Xu, J. Li, and C. Zhang, "Study on the third-party audit in cloud storage service," in Cloud and Service Computing (CSC), 2011 International Conference on, dec. 2011, pp. 220 -227.
9. C. Wang, Q. Wang, K. Ren, and W. Lou, "Privacy-Preserving Public Auditing for Data Storage Security in Cloud Computing," in INFOCOM, 2010 Proceedings IEEE, march 2010, pp. 1 -9.
10. Y. Zhu, G. Ahn, H. Hu, S. Yau, H. An, and S. Chen, "Dynamic Audit Services for Outsourced Storages in Clouds," Services Computing, IEEE Transactions on, vol. PP, no. 99, p. 1, 2011.
11. J. Wei, X. Zhang, G. Ammons, V. Bala, and P. Ning, "Managing security of virtual machine images in a cloud environment," in Proceedings of the 2009 ACM workshop on Cloud computing security, ser. CCSW '09. New York, NY, USA: ACM, 2009, pp. 91-96. [Online]. Available: http://doi.acm.org/10.1145/ 1655008.1655021
12. Andreas Antonopoulos, "Securing Virtualized Infrastructure: From Static Security to Virtual Shields," Nemertes Research, Tech. Rep., 2007.
13. C.-L. Lui, T.-C. Fu, and T.-Y. Cheung, "Agent-based network intrusion detection system using data mining approaches," in Information Technology and Applications, 2005. ICITA 2005. Third International Conference on, vol. 1, july 2005, pp. 131-136 vol.1.
14. M. Chirumamilla and B. Ramamurthy, "Agent based intrusion detection and response system for wireless lans," in Communications, 2003. ICC '03. IEEE International Conference on, vol. 1, May 2003, pp. 492-496.
15. D. Dasgupta, F. Gonzalez, K. Yallapu, J. Gomez, and R. Yarramsettii, "Cids: An agent-based intrusion detection system," Computers & Security, vol. 24, no. 5, pp. 387-398, 2005. [Online]. Available: http://www.sciencedirect.com/science/article/pii/S0167404805000179
16. C. Krgel and M. A. Based, "Sparta - a mobile agent based intrusion detection system," in Proceedings of the IFIP conference on network security. Kluwer Academic Publishers, 2001.
17. J. Balasubramaniyan, J. Garcia-Fernandez, D. Isacoff, E. Spafford, and D. Zamboni, "An architecture for intrusion detection using autonomous agents," in Computer Security Applications Conference, 1998, Proceedings., 14th Annual, dec 1998, pp. 13-24.
18. F. Dölitzscher, C. Reich, and A. Sulistio, "Designing cloud services adhering to government privacy laws," in CIT, 2010, pp. 930-935.
19. F. Doelitzscher, C. Reich, M. Knahl, and N. Clarke, "Incident detection for cloud environments," in Proceedings, no. 978-1-61208-174-8, 2011, pp. 100-105, iSBN: 978-1-61208-174-8. [Online]. Available: http://www.thinkmind.org/index.php?view=article&articleid= emerging-2011-5-30-40134
20. Cloud Security Alliance, "Top Threats to Cloud Computing V1.0," 2010. [Online]. Available: https://cloudsecurityalliance.org/topthreats.html
21. F. Dölitzscher, C. Reich, M. Knahl, and N. Clarke, "An autonomous agent based incident detection system for cloud environments," in CloudCom, 2011, pp. 197-204.
22. J. Cucurull, R. Mart, G. Navarro-Arribas, S. Robles, B. Overeinder, and J. Borrell, "Agent mobility architecture based on ieee-fipa standards," Computer Communications, vol. 32, no. 4, pp. 712-729, 2009.