Dynamic security assurance in multi-cloud DevOps

2017 IEEE Conference on Communications and Network Security, CNS 2017

Volumn 2017-January, Issue , 2017, Pages 467-475

  Rios, Erkuden ^a   Iturbe, Eider ^a   Mallouli, Wissam ^b   Rak, Massimiliano ^c  

^a TECNALIA RESEARCH AND INNOVATION   (Spain)

^b Montimage   (France)

^c SECOND UNIVERSITY OF NAPLES   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

SAFETY ENGINEERING;

APPLICATION SECURITY; CLOUD SERVICE PROVIDERS; CORRECTIVE ACTIONS; DEVELOPMENT AND OPERATIONS; DEVELOPMENT PHASE; DYNAMIC SECURITY; OPERATION PHASE; SECURITY ASSURANCE;

NETWORK SECURITY;

EID: 85046674909     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CNS.2017.8228701     Document Type: Conference Paper

References (29)

1. Rightscale. (2017) Cloud computing trends: 2017 state of the cloud survey. [Online]. Available: http://www.rightscale.com/blog/cloudindustry- insights/cloud-computing-trends-2017-state-cloud-survey
2. Deloitte. (2017) Measuring the economic impact of cloud computing in europe, smart number: 2014/0031. [Online]. Available: https://ec.europa.eu/digital-single-market/en/news/measuringeconomic- impact-cloud-computing-europe
3. E. Rios, E. Iturbe, L. Orue-Echevarria, M. Rak, V. Casola et al., "Towards self-protective multi-cloud applications: Musa-a holistic framework to support the security-intelligent lifecycle management of multicloud applications," 2015.
4. M. E. project consortium. (2015) Multi-cloud secure applications. [Online]. Available: http://www.musa-project.eu
5. G. I.-C. T. Forum, "Use cases and functional requirements for inter-cloud computing," in Global Inter-Cloud Technology Forum, GICTF White Paper, 2010.
6. N. Grozev and R. Buyya, "Inter-cloud architectures and application brokering: taxonomy and survey," Software: Practice and Experience, vol. 44, no. 3, pp. 369-390, 2014.
7. A. J. Ferrer, F. Herná Ndez, J. Tordsson, E. Elmroth, A. Ali-Eldin, C. Zsigri, R. Sirvent, J. Guitart, R. M. Badia, K. Djemame et al., "Optimis: A holistic approach to cloud service provisioning," Future Generation Computer Systems, vol. 28, no. 1, pp. 66-77, 2012.
8. M. Rak, S. Venticinque, T. Mhr, G. Echevarria, and G. Esnal, "Cloud Application Monitoring: The mOSAIC Approach," in 2011 IEEE Third International Conference on Cloud Computing Technology and Science. IEEE, nov 2011, pp. 758-763. [Online].Availablehttp://www.scopus.com/inward/record.url?eid=2- s2.0-84857173913&partnerID=MN8TOARS http://ieeexplore.ieee.org/document/6133226/
9. M. E. project consortium. (2013) Model-driven approach for design and execution of applications on multiple clouds. [Online]. Available: http://www.modaclouds.eu
10. P. E. project consortium. (2013) A model-based cross-cloud development and deployment platform. [Online]. Available: http://www.paasage.eu
11. E. Kamateri, N. Loutas, D. Zeginis, J. Ahtes, F. DAndria, S. Bocconi, P. Gouvas, G. Ledakis, F. Ravagli, O. Lobunets et al., "Cloud4soa: A semantic-interoperability paas solution for multi-cloud platform management and portability," in European Conference on Service-Oriented and Cloud Computing. Springer, 2013, pp. 64-78.
12. D. Zeginis, F. D'andria, S. Bocconi, J. Gorronogoitia Cruz, O. Collell Martin, P. Gouvas, G. Ledakis, and K. A. Tarabanis, "A usercentric multi-paas application management solution for hybrid multicloud scenarios," Scalable Computing: Practice and Experience, vol. 14, no. 1, pp. 17-32, 2013.
13. D. Bernstein and D. Vij, "Intercloud security considerations," in Cloud Computing Technology and Science (CloudCom), 2010 IEEE Second International Conference on. IEEE, 2010, pp. 537-544.
14. J.-M. Bohli, N. Gruschka, M. Jensen, L. L. Iacono, and N. Marnau, "Security and privacy-enhancing multicloud architectures," IEEE Transactions on Dependable and Secure Computing, vol. 10, no. 4, pp. 212- 224, 2013.
15. K. Fatema, V. C. Emeakaroha, P. D. Healy, J. P. Morrison, and T. Lynn, "A survey of Cloud monitoring tools: Taxonomy, capabilities and objectives," Journal of Parallel and Distributed Computing, vol. 74, no. 10, pp. 2918-2933, oct 2014. [Online]. Available: http://dx.doi.org/10.1016/j.jpdc.2014.06.007 http://linkinghub.elsevier.com/retrieve/pii/S0743731514001099
16. A. Naser, M. F. Zolkipli, S. Anwar, and M. S. Al-Hawawreh, "Present Status and Challenges in Cloud Monitoring Framework: A Survey," in 2016 European Intelligence and Security Informatics Conference (EISIC). IEEE, aug 2016, pp. 201-201. [Online]. Available: http://ieeexplore.ieee.org/document/7870228/
17. C. Zeginis, K. Kritikos, P. Garefalakis, K. Konsolaki, K. Magoutis, and D. Plexousakis, "Towards Cross-Layer Monitoring of Multi-Cloud Service-Based Applications," in Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 2013, vol. 8135 LNCS, pp. 188-195. [Online]. Available: http://link.springer.com/10.1007/978-3-642-40651-5 16
18. N. Ferry, A. Rossini, F. Chauvel, B. Morin, and A. Solberg, "Towards model-driven provisioning, deployment, monitoring, and adaptation of multi-cloud systems," in Cloud Computing (CLOUD), 2013 IEEE Sixth International Conference on. IEEE, 2013, pp. 887-894.
19. SINTEF. (2013) Model-based provisioning and deployment of cloudbased systems. [Online]. Available: http://cloudml.org
20. C. Zeginis, K. Kritikos, P. Garefalakis, K. Konsolaki, K. Magoutis, and D. Plexousakis, "Towards cross-layer monitoring of multi-cloud servicebased applications," in European Conference on Service-Oriented and Cloud Computing. Springer, 2013, pp. 188-195.
21. A. Brogi, A. Ibrahim, J. Soldani, J. Carrasco, J. Cubo, E. Pimentel, and F. D'Andria, "Seaclouds: a european project on seamless management of multi-cloud applications," ACM SIGSOFT Software Engineering Notes, vol. 39, no. 1, pp. 1-4, 2014.
22. L. Columbus, "Computerworld's 2015 forecast predicts security, cloud computing and analytics will lead it spending," Online at http://www.forbes.com/sites/louiscolumbus/2014/11/26/computerworlds- 2015-forecast-predicts-security-cloud-computing-and-analytics-willlead- it-spending/, 2014.
23. S. E. project consortium. (2015) Secure provisioning of cloud services based on sla management. [Online]. Available: http://www.specsproject. eu/
24. I. Gartner, "Gartner it glossary devops," Gartner IT Glossary, 2017. [Online]. Available: http://www.gartner.com/it-glossary/devops
25. S. O. Afolaranmi, L. E. G. Moctezuma, M. Rak, V. Casola, E. Rios, and J. L. M. Lastra, "Methodology to obtain the security controls in multicloud applications," in Proceedings of the 6th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,, INSTICC. ScitePress, 2016, pp. 327-332.
26. V. Casola, A. D. Benedictis, M. Rak, and U. Villano, "A security metric catalogue for cloud applications," in Complex, Intelligent, and Software Intensive Systems - Proceedings of the 11th International Conference on Complex, Intelligent, and Software Intensive Systems (CISIS-2017), Torino, Italy, July 10-12, 2017, 2017, pp. 854-863. [Online]. Available: https://doi.org/10.1007/978-3-319-61566-0 81
27. Openstack. (2015) Pacemaker cluster stack. [Online]. Available: https://docs.openstack.org/ha-guide/controller-ha-pacemaker.html
28. OASIS. (2013) extensible access control markup language (xacml) version 3.0. [Online]. Available: http://docs.oasisopen. org/xacml/3.0/xacml-3.0-core-spec-os-en.html
29. National Institute of Standards and Technology (NIST), "Security and privacy controls for federal information systems and organizations," vol. 800-53, pp. 1-460, apr 2013. [Online]. Available: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800- 53r4.pdf