C3S-TTP: A Trusted Third Party for Configuration Security in TOSCA-based Cloud Services - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Journal of Network and Systems Management Année : 2023

C3S-TTP: A Trusted Third Party for Configuration Security in TOSCA-based Cloud Services

Résumé

The large-scale deployment of cloud composite services distributed over heterogeneous environments poses new challenges in terms of security management. In particular, the migration of their resources is facilitated by recent advances in the area of virtualization techniques. This contributes to increase the dynamics of their configuration, and may induce vulnerabilities that could compromise the security of cloud resources, or even of the whole service. In addition, cloud providers may be reluctant to share precise information regarding the configuration of their infrastructures with cloud tenants that build and deploy cloud composite services. This makes the assessment of vulnerabilities difficult to be performed with only a partial view on the overall configuration. We therefore propose in this article an inter-cloud trusted third-party approach, called C3S-TTP, for supporting secure configurations in cloud composite services, more specifically during the migration of their resources. We describe the considered architecture, its main building blocks and their interactions based on an extended version of the TOSCA orchestration language. The trusted third party is capable to perform a precise and exhaustive vulnerability assessment, without requiring the cloud provider and the cloud tenant to share critical configuration information between each other. After designing and formalizing this third party solution, we perform large series of experiments based on a proof-of-concept prototype in order to quantify its benefits and limits.
Fichier principal
Vignette du fichier
Inter_Cloud_Trusted_Third_Party_Framework__JNSM_version_reviewers_comments_version_2_withoud_red_color_ (1).pdf (655.1 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04352233 , version 1 (19-12-2023)

Identifiants

Citer

Mohamed Oulaaffart, Rémi Badonnel, Olivier Festor. C3S-TTP: A Trusted Third Party for Configuration Security in TOSCA-based Cloud Services. Journal of Network and Systems Management, In press, ⟨10.1007/s10922-023-09792-7⟩. ⟨hal-04352233⟩
29 Consultations
10 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More