Automatically Enforcing Security SLAs in the Cloud

IEEE Transactions on Services Computing

Volumn 10, Issue 5, 2017, Pages 741-755

  Casola, Valentina ^a   De Benedictis, Alessandra ^a   Eraşcu, Mǎdǎlina ^b   Modic, Jolanda ^c   Rak, Massimiliano ^d  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^b WEST UNIVERSITY OF TIMISOARA   (Romania)

^c XLAB   (Slovenia)

^d SECOND UNIVERSITY OF NAPLES   (Italy)

Author keywords

Cloud security; optimal resource allocation; security service level agreement

Indexed keywords

LIFE CYCLE; RESOURCE ALLOCATION;

CLOUD SECURITIES; LIFE-CYCLE MANAGEMENT; OPTIMAL RESOURCE ALLOCATION; RESOURCE ALLOCATION PROCESS; SECURITY COMPONENTS; SECURITY REQUIREMENTS; SECURITY SERVICES; SERVICE LEVEL OBJECTIVE;

SECURITY SYSTEMS;

EID: 85032265760     PISSN: 19391374     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSC.2016.2540630     Document Type: Article

References (29)

1. M. Dekker and G. Hogben, "Survey and analysis of security parameters in cloud SLAs across the european public sector," Tech. Rep., European Netork and Information Security Agency (ENISA), Deliverable 2011-12-19, 2011.
2. V. Casola, A. De Benedictis, and M. Rak. (2015). Accountability and Security in the Cloud. Cham: Springer, ch. On the Adoption of Security SLAs in the Cloud. [Online]. pp. 45-62. Available: http://dx.doi.org/10.1007/978-3-319-17199-9-2
3. National Institute of Standards and Technology. (2013). NIST Special Publication 800-53 Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations [Online]. Available: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r4.pdf
4. (2014). The CIRRUS project web site [Online]. Available: http://www.cirrus-project.eu
5. (2014). Cloud Security Alliance. Cloud Control Matrix v3.0 [Online]. Available: https://cloudsecurityalliance.org/download/cloud-controls-matrix-v3/
6. V. Casola, A. De Benedictis, and M. Rak, "Security monitoring in the cloud: An sla-based approach," in Proc. 10th Int. Conf. Availability, Rel. Security, Aug. 24-28 2015, pp. 749-755.
7. K. Bernsmed, M. G. Jaatun, P. H. Meland, and A. Undheim, "Security SLAs for federated cloud services," in Proc. 6th Int. Conf. Availability, Rel. Security, Aug. 22-26 2011, pp. 202-209.
8. (2014). The SPECS project web site [Online]. Available: http://www.specs-project.eu
9. (2014). The CUMULUS project web site [Online]. Available: http://www.cumulus-project.eu
10. (2014). The MUSA project web site [Online]. Available: http://www.musa-project.eu
11. A. Andrieux, K. Czajkowski, A. Dan, K. Keahey, H. Ludwig, T. Nakata, J. Pruyne, J. Rofrano, S. Tuecke, and M. Xu. (2007). Web services agreement specification (WS-Agreement) [Online]. Available: https://www.ogf.org/documents/GFD.107.pdf
12. J. Yu and R. Buyya, "A budget constrained scheduling of workflow applications on utility grids using genetic algorithms," in Proc. 1st Workshop Workflows Support Large-Scale Sci., Jun. 20 2006, pp. 1-10.
13. M. A. Rodriguez and R. Buyya, "Deadline based resource provisioning and scheduling algorithm for scientific workflows on clouds," IEEE Trans. Cloud Comput., vol. 2, no. 2, pp. 222-235, Apr.-Jun. 2014.
14. International Organization for Standardization. (2014). ISO/IEC NP 19086-1. Information Technology-Cloud Computing - Service Level Agreement (SLA) Framework and Technology - Part 1: Overview and Concepts [Online]. Available: http://www.iso.org/iso/home/store/catalogue-tc/catalogue-detail.htm?csn umber=67545
15. A. De Benedictis, M. Rak, M. Turtur, and U. Villano, "REST-based SLA Management for Cloud Applications," in Proc. 24th Int. Conf. Enabling Technol.: Infrastruct. Collaborative Enterprises, Jun. 15-17 2015, pp. 93-98.
16. M. Rak, N. Suri, J. Luna, D. Petcu, V. Casola, and U. Villano, "Security as a service using an SLA-based approach via SPECS," in Proc. 5th IEEE Int. Conf. Cloud Comput. Technol. Sci., Dec. 2-5 2013, vol. 2, pp. 1-6.
17. V. Casola, A. Mazzeo, N. Mazzocca, and V. Vittorini, "A policybased methodology for security evaluation: A security metric for public key infrastructures," J. Comput. Security, vol. 15, no. 2, pp. 197-229, 2007.
18. V. Casola, A. R. Fasolino, N. Mazzocca, and P. Tramontana, "A policy-based evaluation framework for quality and security in service oriented architectures," in Proc. IEEE Int. Conf. Web Serv., Jul. 9-13 2007, pp. 1181-1190.
19. A. Taha, R. Trapero, J. Luna, and N. Suri, "AHP-based quantitative approach for assessing and comparing cloud security," in Proc. 13th IEEE Int. Conf. Trust, Security Privacy Comput. Commun., Sep. 24-26 2014, pp. 391-399.
20. S. Nelson-Smith, Test-Driven Infrastructure with Chef. Sebastopol, CA, USA: O'Reilly Media, Inc., 2013.
21. J. Loope, Managing Infrastructure with Puppet. Sebastopol, CA, USA: O'Reilly Media, Inc., 2011.
22. K. Bernsmed, M. G. Jaatun, and A. Undheim, "Security in service level agreements for cloud computing," in Proc. 1st Int. Conf. Cloud Comput. Serv. Sci., May 7-9 2011, pp. 636-642.
23. The Contrail project web site [Online]. Available: http://www.contrail-project.eu
24. The SLASOI project web site [Online]. Available: http://sla-at-soi.eu/
25. The Optimis project web site [Online]. Available: http://www.optimis-project.eu
26. E. Badidi, "A cloud service broker for SLA-based SaaS provisioning," in Proc. Int. Conf. Inform. Soc., Jun. 24-26 2013, pp. 61-66.
27. B. Jennings and R. Stadler, "Resource management in clouds: Survey and research challenges," J. Netw. Syst. Manage., vol. 23, no. 3, pp. 567-619, 2015.
28. N. Bonvin, T. G. Papaioannou, and K. Aberer, "Autonomic SLAdriven provisioning for cloud applications," in Proc. 11th IEEE/ACM Int. Symp. Cluster, Cloud Grid Comput., May 23-26 2011, pp. 434-443.
29. B. Addis, D. Ardagna, B. Panicucci, and Z. Li, "Autonomic management of cloud service centers with availability guarantees," in Proc. 3rd Int. Conf. Cloud Comput., Jul. 5-10 2010, pp. 220-227.