A Framework for the Attack Tolerance of Cloud Applications Based on Web Services - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Electronics Année : 2020

A Framework for the Attack Tolerance of Cloud Applications Based on Web Services

Georges Ouffoué
  • Fonction : Auteur
  • PersonId : 1088765
Fatiha Zaïdi
Ana R Cavalli
Huu Nghia Nguyen
  • Fonction : Auteur
  • PersonId : 1088766

Résumé

Information systems of companies and organizations are increasingly designed using web services that allow different applications written in different programming languages to communicate. These systems or some parts of them are often outsourced on the cloud, first to leverage the benefits of cloud platforms (e.g., scalability) and also to reduce operational costs of companies as well. However, web services as well as cloud platforms may be the target of attacks that alter their security, and the security of web services is not completely addressed. The solutions proposed in the literature are sometimes specific to certain types of attacks and they cannot ensure the attack tolerance of web services. Attack tolerance can be defined as the capability of a system to function properly with minimal degradation of performance, even if the presence of an attack is detected. As such, we claim that, to achieve attack tolerance, one should detect attacks by a continuous monitoring and mitigate the effects of these attacks by reliable reaction mechanisms. For this aim, an attack tolerance framework is proposed in this paper. This framework includes the risks analysis of attacks and is based on diversification and software reflection techniques. We applied this framework to cloud applications that are based on web services. After describing the core foundation of this approach, we express such cloud applications as choreographies of web services according to their distributed nature. The framework has been validated through an electronic voting system. The results of these experiments show the capability of the framework to ensure the required attack tolerance of cloud applications.
Fichier principal
Vignette du fichier
Version_final_paper_Electronics_journal.pdf (1.24 Mo) Télécharger le fichier
Origine : Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-03113828 , version 1 (18-01-2021)

Identifiants

Citer

Georges Ouffoué, Fatiha Zaïdi, Ana R Cavalli, Huu Nghia Nguyen. A Framework for the Attack Tolerance of Cloud Applications Based on Web Services. Electronics, 2020, 10 (1), pp.6. ⟨10.3390/electronics10010006⟩. ⟨hal-03113828⟩
51 Consultations
53 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More