SLA-Based continuous security assurance in multi-cloud devops

CEUR Workshop Proceedings

Volumn 1977, Issue , 2017, Pages 50-68

  Rios, Erkuden ^a   Rak, Massimiliano ^b   Iturbe, Eider ^a   Mallouli, Wissam ^c  

^a TECNALIA RESEARCH AND INNOVATION   (Spain)

^b SECOND UNIVERSITY OF NAPLES   (Italy)

^c Montimage   (France)

Author keywords

Cloud security controls; Cloud security SLA; Multi cloud monitoring; Multi cloud security; Security assurance; Security in DevOps

Indexed keywords

SECURITY OF DATA;

CLOUD SECURITIES; DEVELOPMENT AND OPERATIONS; MULTI-CLOUDS; SECURITY ASSURANCE; SECURITY IN DEVOPS; SECURITY INCIDENT; SECURITY REQUIREMENTS; SERVICE LEVEL AGREEMENTS;

SOFTWARE ENGINEERING;

EID: 85035242429     PISSN: 16130073     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (33)

1. Rightscale: Cloud computing trends: 2017 state of the cloud survey (2017) Available at: http://www.rightscale.com/blog/cloud-industry-insights/cloud-computing-Trends-2017-state-cloud-survey.
2. Deloitte: Measuring the economic impact of cloud computing in europe, smart number: 2014/0031 (2017) Available at: https://ec.europa.eu/digital-single-market/en/news/measuring-economic-impact-cloud-computing-europe.
3. Casola, V., De Benedictis, A., Modic, J., Rak, M., Villano, U.: Per-service security sla: A new model for security management in clouds. In: Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), 2016 IEEE 25th Interna-Tional Conference on, IEEE (2016) 83-88
4. Blasi, L., Brataas, G., Boniface, M., Butler, J., DAndria, F., Drescher, M., Jimenez, R., Krogmann, K., Kousiouris, G., Koller, B., Landi, G., Matera, F., Menychtas, A., Oberle, K., Phillips, S., Rea, L., Ro-mano, P., Symonds, M., Ziegler, W.: Cloud computing service level agreements-exploitation of research results (06 2013) Available at: http://ec.europa.eu/information society/newsroom/cf/dae/document.cfm?docid =2496.
5. SPECS project: Secure Provisioning of Cloud Services based on SLA management. FP7-ICT-2013.1.5 (2013-2016. Available at: www.specs-project.eu/)
6. SLALOM project: Service Level Agreement-Legal and Open Model (2015-2016. Available at: www.slalom-project.eu/)
7. SLA-READY project: Making Cloud SLAs readily usable in the EU private sector. (2015-2016. Available at: www.sla-ready.eu/)
8. Rios, E., Iturbe, E., Orue-Echevarria, L., Rak, M., Casola, V., et al.: Towards self-protective multi-cloud applications: Musa-A holistic framework to support the security-intelligent lifecycle management of multi-cloud applications. (2015)
9. MUSA project: Multi-cloud Secure Applications (2015-2017) Available at: http://www.musa-project.eu.
10. Forum, G.I.C.T.: Use cases and functional requirements for inter-cloud computing. In: Global Inter-Cloud Technology Forum, GICTF White Paper. (2010)
11. ISO/IEC: Iso/iec 20000-1:2011 information technology-service manage-ment-part 1: Service management system requirements (2011) Available at: https://www.iso.org/standard/51986.html.
12. ETSI: Interoperability and security in cloud computing, etsi sr 003 391 v2.0.0 (2015) Available at: http://csc.etsi.org/resources/WP3-Report/STF 486 WP3 Report-v2.0.0.pdf.
13. National Institute of Standards and Technology (NIST): Security and privacy controls for federal information systems and organizations. 800-53 (apr 2013) 1-460
14. Alliance, C.S.: Cloud security alliance, cloud controls matrix v3.0.1 (2016) https://cloudsecurityalliance.org/research/ccm/.
15. ISO/IEC: Iso/iec 27017:2015 information technology-security techniques-code of practice for information security controls based on iso/iec 27002 for cloud services (2015) Available at: https://www.iso.org/standard/43757.html.
16. Casola, V., De Benedictis, A., Rak, M., Modic, J., Erascu, M.: Automatically enforcing security slas in the cloud. IEEE Transactions on Services Computing (2016)
17. Andreieux, A.: Web services agreement specification (2007) Available at: https://www.ogf.org/documents/GFD.107.pdf.
18. Casola, V., Benedictis, A.D., Rak, M., Villano, U.: A security metric catalogue for cloud applications. In: Complex, Intelligent, and Software Intensive Systems-Proceedings of the 11th International Conference on Complex, Intelligent, and Software Intensive Systems (CISIS-2017), Torino, Italy, July 10-12, 2017. (2017) 854-863
19. Liu, H., Bu, F., Cai, H.: Sla-based service composition model with semantic sup-port. In: Services Computing Conference (APSCC), 2012 IEEE Asia-Pacific, IEEE (2012) 374-379
20. Zappatore, M., Longo, A., Bochicchio, M.A.: SLA composition in service networks. In: Proceedings of the 30th Annual ACM Symposium on Applied Computing-SAC '15, New York, New York, USA, ACM Press (2015) 1219-1224 Available at: http://dl.acm.org/citation.cfm?doid=2695664.2699490.
21. Rak, M.: Security assurance of (multi-) cloud application with security sla compo-sition. In: International Conference on Green, Pervasive, and Cloud Computing, Springer (2017) 786-799
22. Fatema, K., Emeakaroha, V.C., Healy, P.D., Morrison, J.P., Lynn, T.: A survey of Cloud monitoring tools: Taxonomy, capabilities and objectives. Journal of Parallel and Distributed Computing 74(10) (oct 2014) 2918-2933
23. Naser, A., Zolkipli, M.F., Anwar, S., Al-Hawawreh, M.S.: Present Status and Chal-lenges in Cloud Monitoring Framework: A Survey. In: 2016 European Intelligence and Security Informatics Conference (EISIC), IEEE (aug 2016) 201-201
24. Rak, M., Venticinque, S., Mhr, T., Echevarria, G., Esnal, G.: Cloud Application Monitoring: The mOSAIC Approach. In: 2011 IEEE Third International Confer-ence on Cloud Computing Technology and Science, IEEE (nov 2011) 758-763
25. Zeginis, C., Kritikos, K., Garefalakis, P., Konsolaki, K., Magoutis, K., Plexousakis, D.: Towards Cross-Layer Monitoring of Multi-Cloud Service-Based Applications. In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artifi-cial Intelligence and Lecture Notes in Bioinformatics). Volume 8135 LNCS. (2013) 188-195
26. Brogi, A., Ibrahim, A., Soldani, J., Carrasco, J., Cubo, J., Pimentel, E., D'Andria, F.: Seaclouds: A european project on seamless management of multi-cloud appli-cations. ACM SIGSOFT Software Engineering Notes 39(1) (2014) 1-4
27. SINTEF: Model-based provisioning and deployment of cloud-based systems (2013) Available at: http://cloudml.org.
28. Columbus, L.: Computerworld's 2015 forecast predicts security, cloud computing and analytics will lead it spending. Online at: http://www.forbes.com/sites/louiscolumbus/2014/11/26/computerworlds-2015-forecast-predicts-security-cloud-computing-And-Analytics-will-lead-it-spending/(2014)
29. Gartner, I.: Gartner it glossary devops. Gartner IT Glossary (2017) Available at: http://www.gartner.com/it-glossary/devops.
30. Afolaranmi, S.O., Moctezuma, L.E.G., Rak, M., Casola, V., Rios, E., Lastra, J.L.M.: Methodology to obtain the security controls in multi-cloud applications. In: Proceedings of the 6th International Conference on Cloud Computing and Services Science-Volume 1: CLOSER, , INSTICC, ScitePress (2016) 327-332
31. Openstack: Pacemaker cluster stack (2015) https://docs.openstack.org/ha-guide/controller-ha-pacemaker.html.
32. OASIS: extensible access control markup language (xacml) version 3.0 (2013) Available at: http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-os-en.html.
33. of Technology, T.U.: Intelligent transport systems and services (its) factory developer wiki (2014) Available at: http://wiki.itsfactory./index.php/ITS Factory Developer Wiki.