Trust mechanisms for cloud computing

Journal of Cloud Computing

Volumn 2, Issue 1, 2013, Pages

  Huang, Jingwei ^a   Nicol, David M ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Attribute certification; Cloud audit; Cloud computing; Evidence based trust; Formal accreditation; Policy based trust; QoS; Reputation; SLA; Transparency based trust; Trust; Trust mechanisms

Indexed keywords

CLOUD COMPUTING; QUALITY OF SERVICE;

ATTRIBUTE CERTIFICATION; CLOUD AUDITS; EVIDENCE-BASED; POLICY-BASED; REPUTATION; TRUST; TRUST MECHANISM;

TRUSTED COMPUTING;

EID: 84926427038     PISSN: None     EISSN: 2192113X     Source Type: Journal    
DOI: 10.1186/2192-113X-2-9     Document Type: Article

References (38)

1. Michael B (2009) In clouds shall we trust? IEEE Security and Privacy 7(5):3-3. http://dx.doi.org/ 10.1109/MSP.2009.124
2. Everett C (2009) Cloud computing: A question of trust. Computer Fraud Security 2009(6):5-7. http://dx.doi.org/10.1016/S1361-3723(09)70071-5
3. Garrison G, Kim S, Wakefield RL (2012) Success factors for deploying cloud computing. Commun ACM 55(9):62-68. http://doi.acm.org/10.1145/2330667.2330685
4. Ghosh A, Arce I (2010) Guest editors' introduction: In cloud computing we trust-but should we? Secur Privacy, IEEE 8(6):14-16. doi:10.1109/MSP.2010.177
5. Habib S, Hauke S, Ries S, Muhlhauser M (2012) Trust as a facilitator in cloud computing: a survey. J Cloud Comput Adv Syst Appl 1(1):19. doi:10.1186/2192-113X-1-19, http://www. journalofcloudcomputing.com/content/1/1/19
6. Khan K, Malluhi Q (2010) Establishing trust in cloud computing. IT Prof 12(5):20-27. doi:10.1109/MITP.2010.128
7. Michael B, Dinolt G (2010) Establishing trust in cloud computing. IANewsletter 13(2):4-8. http: //iac.dtic.mil/iatac/download/Vol13_No2.pdf
8. Park J, Spetka E, Rasheed H, Ratazzi P, Han K (2012) Near-real-time cloud auditing for rapid response. In: 26th International conference on advanced information networking and applications workshops (WAINA), pp 1252-1257. doi:10.1109/WAINA.2012.78
9. Pearson S (2011) Toward accountability in the cloud. Internet Comput IEEE 15(4):64-69. doi:10.1109/MIC.2011.98
10. Takabi H, Joshi J, Ahn G (2010) Security and privacy challenges in cloud computing environments. Secur Privacy IEEE 8(6):24-31. doi:10.1109/MSP.2010.186
11. Abawajy J (2011) Establishing trust in hybrid cloud computing environments. In: Proceedings of the 2011 IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications, IEEE Computer Society, Washington, DC, USA, TRUSTCOM '11, pp 118-125. doi:10.1109/TrustCom.2011.18, http://dx.doi.org/10.1109/TrustCom.2011.18
12. Haq IU, Alnemr R, Paschke A, Schikuta E, Boley H, Meinel C (2010) Distributed trust management for validating sla choreographies. In: Wieder P, Yahyapour R, Ziegler W (eds) Grids and serviceoriented architectures for service level agreements, Springer US, pp 45-55. http://dx.doi.org/10. 1007/978-1-4419-7320-7_5
13. Pawar P, Rajarajan M, Nair S, Zisman A (2012) Trust model for optimized cloud services. In: Dimitrakos T, Moona R, Patel D, McKnight D (eds) Trust Management VI, IFIP Advances in Information and Communication Technology, vol 374, Springer Berlin Heidelberg, pp 97-112. http://dx.doi.org/10.1007/978-3-642-29852-3_7
14. NIST (2011) NIST cloud computing standards roadmap, NIST CCSRWG-092, first edition. NIST. http://www.nist.gov/itl/cloud/upload/NIST_SP-500-291_Jul5A.pdf
15. Blomqvist K (1997) The many faces of trust. Scand J Manage 13(3):271-286
16. Mayer R, Davis J, Schoorman F (1995) An integrative model of organizational trust: Past, present, and future. Acad Manage Rev 20(3):709-734
17. Huang J, Nicol D (2010) A formal-semantics-based calculus of trust. Internet Comput IEEE 14(5):38-46. doi:10.1109/MIC.2010.83
18. Shaoham Y (1987) Temporal logics in ai: Semantical and ontological considerations. Artif Intell 33:89-104
19. Huang J, Fox MS (2006) An ontology of trust: formal semantics and transitivity. In: Proceedings of the ICEC'06, ACM, New York, NY, USA, ICEC '06, pp 259-270. http://doi.acm.org/10.1145/ 1151454.1151499, http://dl.acm.org/ft_gateway.cfm?id=1151499
20. Hwang K, Kulkareni S, Hu Y (2009) Cloud security with virtualized defense and reputation-based trust mangement. In: Dependable, Autonomic and Secure Computing, 2009. DASC '09. Eighth IEEE International Conference on, pp 717-722. doi:10.1109/DASC.2009.149
21. CSA (2011) STAR (security, trust and assurance registry) program. Cloud Security Alliance. https: //cloudsecurityalliance.org/star/. accessed on 16 Oct. 2012
22. CSA (2011) Security guidance for critical areas of focus in cloud computing v3.0. Cloud Security Alliance. www.cloudsecurityalliance.org/guidance/csaguide.v3.0.pdf
23. CSA (2011) CSA: Security, trust and assurance registry. Cloud Security Alliance. https:// cloudsecurityalliance.org/research/initiatives/star-registry/, accessed on 16 Oct. 2012
24. Knode R (2009) Digital trust in the cloud. CSC. COM. http://assets1.csc.com/lef/downloads/ Digital_Trust_in_the_Cloud.pdf
25. CSC (2011) Cloudtrust protocol (CTP). Cloud Security Alliance. https://cloudsecurityalliance.org/ research/ctp/. accessed on 16 Oct. 2012
26. Knode R, Egan D (2010) Digital trust in the cloud-A precis for the CloudTrust protocol (V2.0). CSC https://cloudsecurityalliance.org/wp-content/uploads/2011/05/cloudtrustprotocolprecis_ 073010.pdf
27. RSA (2011) RSA establishes cloud trust authority to accelerate cloud adoption. RSA. http://www. rsa.com/press_release.aspx?id=11320
28. EMC (2011) Proof, not promises: Creating the trusted cloud. EMC. http://www.emc.com/emc-plus/ rsa-thought-leadership/cloud/resources.htm
29. ISO (2005) ISO/IEC 27001:2005 information technology-security techniques-information security management systems-requirements. ISO. http://www.iso.org/iso/catalogue_detail?csnumber=42103. accessed on 16 Oct. 2012
30. AICPA. (2010) SSAE 16. AICPA. http://www.aicpa.org/Research/Standards/AuditAttest/Pages/ SSAE.aspx. accessed on 16 Oct. 2012
31. IAASB (2009) ISAE 3402. International Auditing and Assurance Standards Board. http://www.ifac. org/sites/default/files/downloads/b014-2010-iaasb-handbook-isae-3402.pdf. accessed on 16 Oct. 2012
32. IGTF (2010) Guidelines for auditing grid cas version 1.0. IGTF. http://www.ogf.org/documents/ GFD.169.pdf
33. Maurer UM (1996) Modelling a public-key infrastructure. In: ESORICS '96: Proceedings of the 4th European symposium on research in computer security. Springer-Verlag, London, pp 325-350
34. Cooper D, Santesson S, Farrell S, Boeyen S, Housley R, Polk W (2008) Internet x.509 public key infrastructure certificate and certificate revocation list (CRL) profile. IETF. http://www.ietf.org/rfc/ rfc5280.txt
35. Huang J, Nicol D (2009) Implicit trust, certificate policies and formal semantics of PKI. Tech. rep., Information Trust Institute, University of Illinois at Urbana-Champaign
36. Ziegler CN, Lausen G (2005) Propagation models for trust and distrust in social networks. Inf Syst Front 7(4-5):337-358. doi:http://dx.doi.org/10.1007/s10796-005-4807-3
37. Farrell S, Housley R, Turner S (2010) An internet attribute certificate profile for authorization. IETF. http://www.ietf.org/rfc/rfc5755.txt
38. Enomaly Inc. (2010) SportCloud: Global market for cloud capacity. Enomaly Inc. http://spotcloud. com, accessed on 18 Jan. 2013