Trustworthy geographically fenced hybrid clouds [big ideas paper]

Proceedings of the 15th International Middleware Conference, Middleware 2014

Volumn , Issue , 2014, Pages 37-48

  Jayaram, K R ^a   Safford, David ^a   Sharma, Upendra ^a   Naik, Vijay ^a   Pendarakis, Dimitrios ^a   Tao, Shu ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Attestation; Geographic fencing; Integrity management

Indexed keywords

APPLICATION PROGRAMS; BRIDGES; C (PROGRAMMING LANGUAGE); COMPUTER HARDWARE; INFORMATION MANAGEMENT; INFRASTRUCTURE AS A SERVICE (IAAS); MIDDLEWARE; SPECIFICATION LANGUAGES;

ATTESTATION; CLOUD COMPUTING INFRASTRUCTURES; GEOGRAPHIC BOUNDARIES; GEOGRAPHIC FENCING; INTEGRITY MANAGEMENT; INTEGRITY MEASUREMENT; OFF-THE-SHELF HARDWARES; PROPOSED ARCHITECTURES;

TRUSTED COMPUTING;

EID: 84920378718     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2663165.2666091     Document Type: Conference Paper

References (31)

1. ARM. ARM TrustZone Technology, 2014. http://www. arm. com/products/processors/ technologies/ trustzone/ index. php.
2. S. Arora, C. Lund, R. Motwani, M. Sudan, and M. Szegedy. Proof verification and the hardness of approximation problems. J. ACM, 45(3):501-555, May 1998.
3. J. Bacon, D. Evans, D. M. Eyers, M. Migliavacca, P. Pietzuch, and B. Shand. Enforcing end-to-end application security in the cloud (big ideas paper). In Proceedings of the ACM/IFIP/USENIX 11th International Conference on Middleware, Middleware '10, pages 293-312, Berlin, Heidelberg, 2010. Springer-Verlag.
4. S. Berger, R. Cáceres, K. A. Goldman, R. Perez, R. Sailer, and L. van Doorn. vtpm: Virtualizing the trusted platform module. In Proceedings of the 15th Conference on USENIX Security Symposium-Volume 15, USENIX-SS'06, Berkeley, CA, USA, 2006. USENIX Association.
5. B. Braun, A. J. Feldman, Z. Ren, S. Setty, A. J. Blumberg, and M. Walfish. Verifying computations with state. In Proceedings of the Twenty-Fourth ACM Symposium on Operating Systems Principles, SOSP '13, pages 341-357, New York, NY, USA, 2013. ACM.
6. I. Damgard, M. Geisler, and M. Kroigard. Homomorphic encryption and secure comparison. Int. J. Appl. Cryptol., 1(1):22-31, Feb. 2008.
7. EU Framework 6-OpenTC Project. Open Trusted Computing, 2009. http://www. itas. kit. edu/pub/v/ 2009/ kuua09a. pdf .
8. EU Framework 7-TClouds Project. Trustworthy Clouds Privacy and Resilience for Internet-scale Critical Infrastructure, 2013. http://www. tclouds-project. eu/index. php/ published-results/ public-deliverables.
9. Forrester. Hybrid Cloud Future: What It Looks Like And How To Get There, 2012. http:// resources. idgenterprise. com/ original/ AST-0082679 Hybrid Cloud Future. pdf .
10. W. Futral and J. Greene. Intel Trusted Execution Technology for Server Platforms, 2014. http://www. intel. com/ content/dam/www/public/ us/ en/documents/ white-papers/ trusted-execution-technology-security-paper. pdf .
11. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A virtual machine-based platform for trusted computing. In Proceedings of the Nineteenth ACM Symposium on Operating Systems Principles, SOSP '03, pages 193-206, New York, NY, USA, 2003. ACM.
12. B. Hindman, A. Konwinski, M. Zaharia, A. Ghodsi, A. D. Joseph, R. Katz, S. Shenker, and I. Stoica. Mesos: A platform for fine-grained resource sharing in the data center. In Proceedings of the 8th USENIX Conference on Networked Systems Design and Implementation, NSDI'11, pages 295-308, Berkeley, CA, USA, 2011. USENIX Association.
13. C. Millard. Cloud Computing Law. Oxford University Press, 2013.
14. D. Muthukumaran, A. Sawani, J. Schiffman, B. M. Jung, and T. Jaeger. Measuring integrity on mobile phone systems. In Proceedings of the 13th ACM Symposium on Access Control Models and Technologies, SACMAT '08, pages 155-164, New York, NY, USA, 2008. ACM.
15. NIST and U. S. Department of Commerce. Security and Privacy Controls for Federal Information Systems and Organizations, 2013. http:// nvlpubs. nist. gov/ nistpubs/SpecialPublications/ NIST. SP. 800-53r4. pdf .
16. OpenStack. OpenStack Architecture, 2014. http://docs. openstack. org/ training-guides/ content/ module001-ch004-openstack-architecture. html .
17. Pivotal/VMWare Inc. Cloud Foundry Application Platform-as-a-Service, 2014. http:// cloudfoundry. org/ index. html.
18. R. Marques and P. Verissimo. Method for securing a computing device with a trusted platform module, 2012. http://www. google. com/patents/US20120151223.
19. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and implementation of a tcg-based integrity measurement architecture. In Proceedings of the 13th Conference on USENIX Security Symposium-Volume 13, SSYM'04, pages 16-16, Berkeley, CA, USA, 2004. USENIX Association.
20. N. Santos, K. P. Gummadi, and R. Rodrigues. Towards trusted cloud computing. In Proceedings of the 2009 Conference on Hot Topics in Cloud Computing, HotCloud'09, Berkeley, CA, USA, 2009. USENIX Association.
21. S. Saroiu and A. Wolman. I am a sensor, and i approve this message. In Proceedings of the Eleventh Workshop on Mobile Computing Systems Applications, HotMobile '10, pages 37-42, New York, NY, USA, 2010. ACM.
22. J. Schiffman, T. Moyer, C. Shal, T. Jaeger, and P. McDaniel. Justifying integrity using a virtual machine verifier. In Proceedings of the 2009 Computer Security and Applications Conference, ACSAC'09, 2009.
23. J. Schiffman, T. Moyer, H. Vijayakumar, T. Jaeger, and P. McDaniel. Seeding clouds with trust anchors. In Proceedings of the 2010 ACM Workshop on Cloud Computing Security Workshop, CCSW '10, pages 43-46, New York, NY, USA, 2010. ACM.
24. M. Schwarzkopf, A. Konwinski, M. Abd-El-Malek, and J. Wilkes. Omega: Flexible, scalable schedulers for large compute clusters. In Proceedings of the 8th ACM European Conference on Computer Systems, EuroSys '13, pages 351-364, New York, NY, USA, 2013. ACM.
25. Trusted Computing Group. Trusted Boot, 2014. http://www. trustedcomputinggroup. org/ resources/ trusted boot.
26. Trusted Computing Group. Trusted Computing Group Web Portal, 2014. http://www. trustedcomputinggroup. org .
27. Trusted Computing Group". Trusted Platform Module Specification, 2014. http://www. trustedcomputinggroup. org/ resources/tpm main specification.
28. U. K. Cabinet Office. CloudStore and G-Cloud Framework, 2013. https://www. gov. uk/how-to-use-cloudstore.
29. V. Vu, S. Setty, A. J. Blumberg, and M. Walfish. A hybrid architecture for interactive verifiable computation. In Proceedings of the 2013 IEEE Symposium on Security and Privacy, SP '13, pages 223-237, Washington, DC, USA, 2013. IEEE Computer Society.
30. R. Wilkins and B. Richardson. UEFI Secure Boot in Modern Computer Security Solutions, 2013. http://www. uefi. org/ sites/ default/ files/ resources/ UEFI Secure Boot in Modern Computer Security Solutions 2013. pdf .
31. R. Yeluri and E. Castro-Leon. Building the Infrastructure for Cloud Security A Solutions View. Apress Inc., 2014.