Towards self-protective multi-cloud applications: MUSA-A holistic framework to support the security-intelligent lifecycle management of multi-cloud applications

CLOSER 2015 - 5th International Conference on Cloud Computing and Services Science, Proceedings

Volumn , Issue , 2015, Pages 551-558

  Rios, Erkuden ^a   Iturbe, Eider ^a   Orue Echevarria, Leire ^a   Rak, Massimiliano ^b   Casola, Valentina ^c  

^a TECNALIA RESEARCH AND INNOVATION   (Spain)

^b SECOND UNIVERSITY OF NAPLES   (Italy)

^c UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

Cloud SLAs; DevOps; Distributed Deployment; Multi cloud; QoSec; Security by design

Indexed keywords

CLOUD COMPUTING;

DEVELOPMENT AND OPERATIONS; DEVOPS; DISTRIBUTED APPLICATIONS; DISTRIBUTED DEPLOYMENT; INDIVIDUAL COMPONENTS; LIFE-CYCLE MANAGEMENT; MULTI-CLOUDS; QOSEC;

LIFE CYCLE;

EID: 84969792687     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.5220/0005492905510558     Document Type: Conference Paper

References (43)

1. A4Cloud Project. (2014). Accountability For Cloud and Other Future Internet Services. Retrieved from Accountability For Cloud and Other Future Internet Services.: www.a4cloud.eu/
2. AgileManifesto. (2001, February 17). Manifiesto for Agile Development. Retrieved December 8, 2013, from Manifiesto for Agile Development: http://agilemanifesto.org/
3. Almorsy, M., Grundy, J., & Ibrahim, A. S. (2011) Collaboration-based cloud computing security management framework. IEEE International Conference on Cloud Computing (CLOUD) (pp. 364-371). IEEE
4. Antonescu, A.-F., Robinson, P., & Braun, T. (2012) Dynamic Topology Orchestration for Distributed Cloud-Based Applications. NCCA, (pp. 116-223)
5. Apache. (2012). Apache jclouds. Retrieved April 2014, from Apache jclouds: http://jclouds.apache.org/
6. ARTIST Consortium. (2012). ARTIST Projec . Retrieved April 15th, 2014, from ARTIST Project: http://www.artist-pro-ject.eu/ARTIST
7. Consortium. (2013, September). Deliverable 7.2.1. Cloud services modelling and performance analysis framework. Retrieved April 2014, from Deliverable 7.2.1. Cloud services modelling and performance analysis framework: http://www.artistproject.eu/sites/default/files/D7.2.1%20Cloud%20serv ices%20modeling%20and%20performance%20analysi s%20framework-M12-30092013.pdf
8. ARTIST Consortium. (2013, September). Deliverable D4.3.1 Dissemination report. Retrieved April 2014, from Deliverable D4.3.1 Dissemination report: http://www.artistproject.eu/sites/default/files/D4.3.1%20Dissemination%20report-M12-01102013.pdf
9. Bitcurrent cloud computing survey. (2011). Bitcurrent cloud computing survey 2011. Bitcurrent cloud computing survey 2011
10. Bohli, J. et al. (2013). Security and Privacy Enhancing Multi-Cloud Architectures. Cloud Security Alliance. (2014). Cloud Controls Matrix
11. Retrieved April 2014, from Cloud Controls Matrix: https://cloudsecurityalliance.org/research/ccm
12. Cloud Data Protection Cert. (2013). Cloud Data Protection Cert. Retrieved April 2014, from Cloud Data Protection Cert: http://clouddataprotection.org/cert
13. CloudML project. (2013). Model-based provisioning and deployment of cloud based systems. CloudML project
14. Retrieved April 2014, from Model-based provisioning and deployment of cloud based systems. CloudML project: http://cloudml.org
15. CUMULUS project. (n.d.). Certification infrastrUcture for MUlti-Layer cloUd Services. Retrieved from Certification infrastrUcture for MUlti-Layer cloUd Services: http://cumulus-project.eu/
16. Dekker, M., & Hogben, G. (2011). Survey and analysis of security parameters in cloud SLAs across the European public sector. Retrieved April 2014, from Survey and analysis of security parameters in cloud SLAs across the European public sector: http://www.enisa.europa.eu/activities/Resilience-and-CIIP/cloud-computing/survey-and-analysis-ofsecurity-parameters-in-cloud-slas-across-theeuropean-public-sector
17. Expert Group Report. European Commission, I. S. (2010) The Future of Cloud Computing: Opportunities for European Cloud Computing Beyond 2010
18. Ferry, N. et al. (2013). Towards model-driven provisioning, deployment, monitoring, and adaptation of multi-cloud systems. CLOUD 2013: IEEE 6th International Conference on Cloud Computing, (pp. 887-894)
19. Ferry, N., Chauve, F., Rossini, A., Morin, B., & Solberg, A. (2013). Managing multi-cloud systems with the CloudML framework. NordiCloud'13: 2nd Nordic Symposium on Cloud Computing & Internet Technologies. Oslo, Normay
20. Gartner. (n.d.). Gartner IT Glossary-Runtime Application Self-Protection (RASP). Retrieved April 2014, from http://www.gartner.com/it-glossary/runtime-application-self-protection-rasp (Retrieved April 2014)
21. Hubbard, D., & Sutton, M. (2010). Top Threats to Cloud Computing V1. 0. Cloud Secuirty Alliance
22. IDC Cloud research. (2013, September). IDC Cloud research. Retrieved March 2014, from IDC Cloud research: http://www.idc.com/getdoc.jsp?containerId=prUS2429.8013ISO/IEC 17826:2012. (2012). ISO/IEC 17826:2012
23. Information technology-Cloud Data Management Interface (CDMI) ISO/IEC 27001. (n.d.). ISO/IEC 27001 Information Technology-Security Techniques-Information Security management Systems-requirements
24. Kandukuri, B., Paturi, V. R., & Rakshit, A. (2009). Cloud security issues. SCC'09. IEEE International Conference on Services Computing, 2009., (pp. 517-520)
25. Kreizman, G., & Robertson, B. (n.d.). Incorporating Security into the Enterprise Architecture Process
26. Retrieved April 2014, from Incorporating Security into the Enterprise Architecture Process: http://www.gartner.com/DisplayDocument?ref=g-search&id=488575
27. Luna, J., et al. (2013). Negotiating and Brokering Cloud Resources based on Security Level Agreements. CLOSER 2013, (pp. 533-541)
28. Mell, P., & Grance, T. (2010). The NIST definition of cloud computing. In ACM (Ed.), Communications of the ACM, 53, no. 6, p. 50
29. Miller, P. (2013, September). Sector RoadMap: Multicloud management in 2013. ModaClouds consortium. (2013, September). Deliverable 4.2.1 MODACloudML development-Initial version. Retrieved April 2014, from Deliverable 4.2.1
30. MODACloudML development-Initial version: http://www.modaclouds.eu/wpcontent/uploads/2012/09/MODAClouds-D4.2.1-MODACloudMLDevelopmentInitialVersion.pdf
31. NIST 800-53r4. (2013). 291 NIST Security and Privacy Controls for Federal Information Systems and Organizations. Retrieved April 2014, from 291 NIST Security and Privacy Controls for Federal Information Systems and Organizations: nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S P.800-53r4.pdf
32. NIST SP500. (2010). 291 NIST Cloud Computing Standards Roadmap. Retrieved April 2014, from 291
33. NIST Cloud Computing Standards Roadmap: http://www.nist.gov/itl/cloud/upload/NIST-SP-500-291-Version-2-2013-June18-FINAL.pdf
34. North Bridge in partnership with GigaOM Research. (2013). The future of cloud computing, 3rd annual survey 2013. Retrieved March 2014, from The future of cloud computing, 3rd annual survey 2013: http://www.northbridge.com/2013-cloud-computingsurvey
35. OASIS. (2013). Topology and Orchestration Specification for Cloud Applications Standard. Retrieved April 2014, from TOSCA standard by OASIS: www.oasisopen.org/committees/tc-home.php?wg-abbrev=tosca
36. PaaSage Consortium. (2014, April 30). Deliverable D2.1.2: CloudML Implementation Documentation (First version). Retrieved from Deliverable D2.1.2: CloudML Implementation Documentation (First version): http://www.paasage.eu/images/documents/paasage-d2.1.2-final.pdf
37. REMICS Consortium. (2012). Deliverable 4.1. PIM4Cloud. Retrieved March 2014, from Deliverable 4.1 PIM4Cloud: http://www.remics.eu/system/files/REMICS-D4.1-V2.0-LowResolution.pdf
38. Seaclouds consortium. (2013). Seaclouds project. Seamless adaptive multi-cloud management of service-based applications. Retrieved from Seaclouds project. Seamless adaptive multi-cloud management of service-based applications: http://www.seacloudsproject.eu/project.html
39. SPECS Project. (2014). Secure Provisioning of Cloud Services based on SLA management. Retrieved from Secure Provisioning of Cloud Services based on SLA management: http://specs-project.eu/Symantec.
40. (2013). Choosing a Cloud Hosting Provider with Confidence. Retrieved April 2014, from Choosing a Cloud Hosting Provider with Confidence: http://www.itwhitepapers.com/content20287
41. Vukolić, M. (2010). The Byzantine empire in the intercloud. 41(3), 105-111
42. Waidner, M. (2009, November). Cloud computing and security. Lecture Univ. Stuttgart (November 2009) Retrieved from Cloud computing and security. Lecture Univ. Stuttgart (November 2009)
43. Wikipedia ITS. (2014). Intelligent Transport Systems and Services (ITS) Factory Wiki. Retrieved April 2014, from Intelligent Transport Systems and Services (ITS) Factory Wiki: http://wiki.itsfactory.fi/index.php/ITS-Factory-Developer-Wiki