Building trust and compliance in the cloud for services

Annual SRII Global Conference, SRII

Volumn , Issue , 2012, Pages 379-390

  Yeluri, Raghu ^a   Castro Leon, Enrique ^a   Harmon, Robert R ^b   Greene, James ^a  

^a INTEL CORPORATION   (United States)

^b PORTLAND STATE UNIVERSITY   (United States)

Author keywords

Cloud computing; Hardware root of trust; Security; Trusted computing chain

Indexed keywords

ANTI VIRUS; IT ORGANIZATIONS; KEY SYSTEM COMPONENTS; MALWARES; MULTI TENANTS; MULTIPLE APPLICATIONS; PERCEIVED RISK; PHYSICAL BARRIERS; PHYSICAL ISOLATION; RESOURCE UTILIZATIONS; SECURITY; SECURITY CONTROLS; SOFTWARE VENDORS; TRUSTED COMPUTING;

CLOUD COMPUTING; FIRMWARE; HARDWARE; VIRTUAL REALITY;

COMPUTER CRIME;

EID: 84870806304     PISSN: 21660778     EISSN: 21660786     Source Type: Conference Proceeding    
DOI: 10.1109/SRII.2012.49     Document Type: Conference Paper

References (30)

1. Amazon Web Services, 'Overview of Security Processes', August 2010.
2. Barros, A. and Kylau, U., "Service Delivery Framework - An Architectural Strategy for Next-Generation Service Delivery in Business Network, Proceedings of the 2011 Annual SRII Global Conference, pp. 47-37, 2011.
3. Demirkan, H., Harmon, R.R., Goul, M., "A Service Oriented Web Application Framework, " IEEE IT Professional, Vol. 13, no. 5, 15- 21, 2011.
4. Curry S., Darbyshire J, Fisher Douglas, et al., "RSA Security Brief", March 2010.
5. Cloud Security Alliance, 'Security Guidance for Critical Areas of Focus in Cloud Computing, v2.1', 2009.
6. Cloud Security Alliance Group, "CSA-GRC Stack, " Tool kit and whitepaper, 2010. Retrieved January 2012 from: www.cloudsecurityalliance.org/ grcstack.html.
7. Castro-Leon, E., Golden, B., Yeluri, R., Gomez, M., Sheridan, C., Creating the Infrastructure for Cloud Computing, Intel Press, 2011.
8. Federal Trade Commission, "FACTA Disposal Rule goes into Effect June 1, 2005", FTC news release, June 1, 2005. Retrieved February 15, 2012 from: www.ftc.gov/opa/2005/06/disposal.shtm.
9. Intel Corporation. "Intel TXT, " white paper, 2012, Retrieved February 17, 2012 from: http://www.intel.com/technology/security/downloads/ archoverview.pdf.
10. Gadia, S., "Cloud Computing: An Auditor's Perspective, " ISACA Journal, Vol. 6, 2009. Retrieved February 20, 2012 from: www.isaca.org/Journal/ Past-Issues/2009/Volume-6/Pages/Cloud-Computing-An-Auditor-s-Perspective1.aspx.
11. Kang, K., Strong, R., Fang, H., Chen, T., Rhodes, J., Zhou, R., "Complex service management in a hybrid cloud, " Proceedings of the 2011 Annual SRII Global Conference, 34-46, 2011.
12. Khan, K.M, Malluhi, Q., Establishing Trust in Cloud Computing, IEEE IT Professional, Vol. 12-5, 20-27, September/October 2010.
13. NIST, "Recommended Security Controls for Information Systems, " NIST Special Publication 800-31-1, National Institute of Standards and Technology, 2005.
14. NIST, "Recommended Security Controls for Federal Information Systems and Organizations, " NIST Special Publication 800-53, revision3, 2010.
15. NIST, "Guide for Applying the Risk Management Framework to Federal Information Systems, " Special Publication 800-37, 2010.
16. NIST, "Guidelines for Media Sanitization, Computer Security, " Special Publication 800-88, 2008.
17. Orrin, S., "Building Trust and Compliance in the Cloud, " 2011 Information Security and Risk Management Conference, ISACA, Session 241, 2011.
18. Trusted Computing Group, "Cloud Computing and Security - A Natural Match, " whitepaper, April 2010. Retrieved February 24, 2012 from: www.trustedcomputinggroup.org/resources/cloud-computing-and-security-a-natural- match.
19. Halton, W., "Security Issues and Solutions in Cloud Computing, " research paper, 2010. Retrieved from: http://wolfhalton.info/2010/06/25/ security-issues-and-solutionsincloud-computing/.
20. Ristenpart, T., Tromer, E., Shacham, H., Savage, S., "Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds, " CCS'09, Chicago, Illinois, 2009.
21. Securities and Exchange Commission, Final Rule: Retention of Records Relevant to Audits and Reviews, Securities and Exchange Commission, January 1, 2003. Retrieved February 2012 from: http://www.sec.gov/rules/final/33-8180.htm.
22. Valeri, L., Somers, G., Robinson, R., Graux, H., Dumortier, J., Handbook of Legal Procedures of Computer and Network Misuse in EU Countries, RAND Corporation, 2006. Retrieved February 2012 from: http://www.rand.org/pubs/ technical-reports/2006/RAND-TR337.pdf.
23. Wesam, D., Takouna, I., Meinel, C., "Infrastructure as a Service Security: Challenges and solutions, " 7th International Conference on Informatics and Systems, 1-8, 2010.
24. Wikipedia, "Cloud computing security" Retrieved February 2012 from: http://en.wikipedia.org/wiki/Cloud-computing-security.
25. Yeluri, R, and Moreau, D., "Building Trust and Compliance in the Cloud", VMworld, 201l.
26. Kaufman, L.M., Potter, B., "Can Public-Cloud Security Meet Its Unique Challenges?" IEEE Security & Privacy, July/August 2010.
27. Weinberg, N, "Gartner: Private Clouds are a Last Resort, " Network World, October 19, 2011. Retrieved February 25, 2012 from: http://www.networkworld.com/news/2011/101911-gartner-privatecloud-252151.html.
28. Mao, W., "Attestation as a Service-Local Attestation for Cloud Security vs. Remote Attestation for Grid Security, " EMC Community Network, Retrieved February 25, 2012 from https://community.emc.com/blogs/WenboMao/2010/ 04/25/attestation-as-a-service-local-attestation-for-cloud-security-vs- remoteattestation-for-grid-security.
29. Mell, P., Grance, T., "The NIST Definition of Cloud Computing, " NIST Special Publication 800-145, September 2011.
30. Yeluri R, and Greene J., "Services Security in the Cloud", Intel Technology Journal, End to End Mobile Cloud, Volume 16, Issue 3, 2012.