An advanced security-aware Cloud architecture

摘要: Nowadays, Cloud offers many interesting features such as on-demand and pay-as-you-go resources, but induces new security problems in case a company wants to outsource its critical services. But since Clouds are shared between multiple tenants, both applications execution environments need be secured consistently order avoid possible attacks from malicious tenants. Moreover, if large range of mechanisms can improve the security, configuration those guarantee global property remains an open problem. Nowadays solutions lack two key realize it: easy expression requirements actual enforcement requirements. This paper describes overall architecture providing experiment run demonstrate validity. Our solution includes language, distribution engine agent. The language eases definition properties required plug application into Cloud. computes sub-properties related different resources that must deployed coordinates agents associated provisioned resources. use-case addresses private hosting customer data implementation experiments show (authentication confidentiality) satisfied when is scheduled within virtual machines