Per-service security sla: A new model for security management in clouds

Proceedings - 25th IEEE International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE 2016

Volumn , Issue , 2016, Pages 83-88

  Casola, Valentina ^a   De Benedictis, Alessandra ^a   Modic, Jolanda ^b   Rak, Massimiliano ^c   Villano, Umberto ^d  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^b XLAB   (Slovenia)

^c SECOND UNIVERSITY OF NAPLES   (Italy)

^d UNIVERSITY OF SANNIO   (Italy)

Author keywords

Cloud security; Per service SLA; Security service level agreement

Indexed keywords

DISTRIBUTED DATABASE SYSTEMS; NETWORK ARCHITECTURE; QUALITY OF SERVICE;

AUTOMATIC IMPLEMENTATION; CLOUD SECURITIES; CLOUD SERVICE PROVIDERS; PER-SERVICE SLA; SECURITY MANAGEMENT; SECURITY SERVICES; SERVICE CHARACTERISTICS; SERVICE LEVEL AGREEMENT (SLAS);

SALES;

EID: 84983801984     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WETICE.2016.27     Document Type: Conference Paper

References (19)

1. European Commission-C-SIG (Cloud Select Industry Group) subgroup, "Cloud Service Level Agreement Standardisation Guidelines," June 26 2014.
2. A. Andrieux, K. Czajkowski, A. Dan, K. Keahey, H. Ludwig, T. Nakata, J. Pruyne, J. Rofrano, S. Tuecke, and M. Xu, "Web services agreement specification (WS-Agreement)," in Global Grid Forum. The Global Grid Forum (GGF), 2004.
3. A. Keller and H. Ludwig, "The WSLA framework: Specifying and monitoring service level agreements for web services," Journal of Network and Systems Management, vol. 11, no. 1, pp. 57-81, 2003.
4. M. Comuzzi, C. Kotsokalis, C. Rathfelder, W. Theilmann, U. Winkler, and G. Zacco, "A framework for multi-level SLA management," vol. 6275, pp. 187-196, 2010.
5. M. Rak, N. Suri, J. Luna, D. Petcu, V. Casola, and U. Villano, "Security as a service using an SLA-based approach via SPECS," in Proc. of CloudCom, 2013 IEEE 5th Int. Conf. on, vol. 2, Dec 2013, pp. 1-6.
6. F. Faniyi and R. Bahsoon, "A systematic review of service level management in the cloud," ACM Comput. Surv., vol. 48, no. 3, pp. 43:1-43:27, Dec. 2015.
7. G. Di Modica, O. Tomarchio, and L. Vita, "Dynamic SLAs management in service oriented environments," J. Syst. Softw., vol. 82, no. 5, pp. 759-771, May 2009.
8. A. Cuomo, G. Di Modica, S. Distefano, A. Puliafito, M. Rak, O. Tomarchio, S. Venticinque, and U. Villano, "An SLAbased broker for cloud infrastructures," Journal of Grid Computing, vol. 11, no. 1, pp. 1-25, 2013.
9. A. Dastjerdi and R. Buyya, "An autonomous reliability-aware negotiation strategy for cloud computing environments," in Cluster, Cloud and Grid Computing (CCGrid), 2012 12th IEEE/ACM International Symposium on, May 2012, pp. 284-291.
10. R. Nathuji, A. Kansal, and A. Ghaffarkhah, "Q-clouds: Managing performance interference effects for qos-aware clouds," in Eurosys 2010. Association for Computing Machinery, Inc., April 2010.
11. J. Sidhu and S. Singh, "Improved topsis method based trust evaluation framework for determining trustworthiness of cloud service providers," Journal of Grid Computing, pp. 1-25, 2016.
12. L. Wu and R. Buyya, Performance and Dependability in Service Computing: Concepts, Techniques and Research Directions. IGI Global, USA, 2011, ch. Service Level Agreement (SLA) in Utility Computing Systems.
13. N. Sfondrini, G. Motta, and L. You, "Service level agreement (sla) in public cloud environments: A survey on the current enterprises adoption," in Information Science and Technology (ICIST), 2015 5th International Conference on, April 2015, pp. 181-185.
14. NIST, "SP 800-53 Rev 4: Recommended Security and Privacy Controls for Federal Information Systems and Organizations," National Institute of Standards and Technology, Tech. Rep., 2013. [Online]. Available: http://nvlpubs.nist.gov/nistpubs/ SpecialPublications/NIST.SP.800-53r4.pdf
15. Cloud Security Alliance, "Cloud Control Matrix v3.0," https://cloudsecurityalliance.org/download/ cloud-controls-matrix-v3/.
16. M. Rak, U. Villano, V. Casola, and A. De Benedictis, "Slabased secure cloud application development: the specs framework," in Symbolic and Numeric Algorithms for Scientific Computing, 2015 17th International Symposium on, 2015.
17. V. Casola, A. De Benedictis, M. Rak, J. Modic, and M. Erascu, "Automatically enforcing security slas in the cloud," IEEE Transactions on Services Computing, vol. PP, no. 99, pp. 1-1, 2016.
18. A. De Benedictis, M. Rak, M. Turtur, and U. Villano, "Restbased sla management for cloud applications," in Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), 2015 IEEE 24th International Conference on, June 2015, pp. 93-98.
19. V. Casola, A. De Benedictis, and M. Rak, "Security monitoring in the cloud: An SLA-based approach," in Availability, Reliability and Security (ARES), 2015 10th International Conference on, Aug 2015, pp. 749-755.