A Monitoring and Audit Logging Architecture for Data Location Compliance in Federated Cloud Infrastructures

Massonet, Philippe; Naqvi, Syed; Ponsard, Christophe; Latanicki, Joseph; Rochwerger, Benny; Villari, Massimo

doi:10.1109/ipdps.2011.304

Cited by 65 publications

(32 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For instance, in A4CLOUD [9] project researchers are thriving to devise models that can help put in place the set of mechanisms to ensure that cloud providers are accountable for any SLA breach or a security incident that emanated a lax in their security. A federated cloud monitoring infrastructure is introduced by [21], to monitor where data is actually saved without compromising cloud isolation by collaborating among infrastructure provider, service provider and cloud consumers. As stated previously, CSA control matrix also emphasizes compliance and audit of the related objectives.…”

Section: Cloud Related Standards and Auditmentioning

confidence: 99%

Assurance of Security and Privacy Requirements for Cloud Deployment Models

Islam

Ouedraogo

Kalloniatis

et al. 2018

IEEE Trans. Cloud Comput.

View full text Add to dashboard Cite

Abstract-Despite of the several benefits of migrating enterprise critical assets to the Cloud, there are challenges specifically related to security and privacy. It is important that Cloud Users understand their security and privacy needs, based on their specific context and select cloud model best fit to support these needs. The literature provides works that focus on discussing security and privacy issues for cloud systems but such works do not provide a detailed methodological approach to elicit security and privacy requirements neither methods to select cloud deployment models based on satisfaction of these requirements by Cloud Service Providers. This work advances the current state of the art towards this direction. In particular, we consider requirements engineering concepts to elicit and analyze security and privacy requirements and their associated mechanisms using a conceptual framework and a systematic process. The work introduces assurance as evidence for satisfying the security and privacy requirements in terms of completeness and reportable of security incident through audit. This allows perspective cloud users to define their assurance requirements so that appropriate cloud models can be selected for a given context. To demonstrate our work, we present results from a real case study based on the Greek National Gazette.

show abstract

Section: Cloud Related Standards and Auditmentioning

confidence: 99%

Assurance of Security and Privacy Requirements for Cloud Deployment Models

Islam

Ouedraogo

Kalloniatis

et al. 2018

IEEE Trans. Cloud Comput.

View full text Add to dashboard Cite

show abstract

“…Many argued that the lack of influence on the placement of workflow or service components is a hindrance for the adoption of the technology [10], [11]. Even though performance and economical benefits of cloud computing are clear, potential users hesitate to deploy the technology because legal, privacy, efficiency and resilience aspects are completely out of their control.…”

Section: Related Workmentioning

confidence: 99%

“…The evaluations were carried out using the STEVIN Supercomputer Infrastructure at Ghent University 11 . The nodes are equipped with 2 Intel Xeon CPU E5-2680 v3 12-core processors and 32GB of physical memory.…”

Section: A Simulation Frameworkmentioning

confidence: 99%

Semantically Enhanced Mapping Algorithm for Affinity-Constrained Service Function Chain Requests

Bouten

Mijumbi

Serrat

et al. 2017

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Abstract-Network Function Virtualization (NFV) and Software Defined Networking (SDN) have been proposed to increase the cost-efficiency, flexibility and innovation in network service provisioning. This is achieved by leveraging IT virtualization techniques and combining them with programmable networks. By doing so, NFV and SDN are able to decouple the network functionality from the physical devices on which they are deployed. Service Function Chains (SFCs) composed out of Virtual Network Functions (VNFs) can now be deployed on top of the virtualized infrastructure to create new value-added services. Current NFV approaches are limited to mapping the different VNFs to the physical substrate subject to resource capacity constraints. They do not provide the possibility to define location requirements with a certain granularity and constraints on the colocation of VNFs and virtual edges. Nevertheless, many scenarios can be envisioned in which a Service Provider (SP) would like to attach placement constraints for efficiency, resilience, legislative, privacy and economic reasons. Therefore, we propose a set of affinity and anti-affinity constraints, which can be used by SPs to define such placement restrictions. Furthermore, a semantic SFC validation framework is proposed that allows the Virtual Network Function Infrastructure Provider (VNFInP) to check the validity of a set of constraints and provide feedback to the SPs. This allows the VNFInP to filter out any non-valid SFC requests before sending them to the mapping algorithm, significantly reducing the mapping time.

show abstract

“…Many argued that the lack of influence on the placement of workflow or service components is a hindrance for the adoption of the technology [14], [15]. Even though performance and economical benefits of cloud computing are clear, potential users hesitate to use the technology because legal, privacy, efficiency and resilience aspects are completely out of their control.…”

Section: Related Workmentioning

confidence: 99%

Semantic validation of affinity constrained service function chain requests

Bouten

Claeys

Mijumbi

et al. 2016

2016 IEEE NetSoft Conference and Workshops (NetSoft)

View full text Add to dashboard Cite

Abstract-Network Function Virtualization (NFV) has been proposed as a paradigm to increase the cost-efficiency, flexibility and innovation in network service provisioning. By leveraging IT virtualization techniques in combination with programmable networks, NFV is able to decouple network functionality from the physical devices on which they are deployed. This opens up new business opportunities for both Infrastructure Providers (InPs) as well as Service Providers (SPs), where the SP can request to deploy a chain of Virtual Network Functions (VNFs) on top of which its service can run. However, current NFV approaches lack the possibility for SPs to define location requirements and constraints on the mapping of virtual functions and paths onto physical hosts and links. Nevertheless, many scenarios can be envisioned in which the SP would like to attach placement constraints for efficiency, resilience, legislative, privacy and economic reasons. Therefore, we propose a set of affinity and anti-affinity constraints, which can be used by SPs to define such placement restrictions. This newfound ability to add constraints to Service Function Chain (SFC) requests also introduces an additional risk that SFCs with conflicting constraints are requested or automatically generated. Therefore, a framework is proposed that allows the InP to check the validity of a set of constraints and provide feedback to the SP. To achieve this, the SFC request and relevant information on the physical topology are modeled as an ontology of which the consistency can be checked using a semantic reasoner. Enabling semantic validation of SFC requests, eliminates inconsistent SFCs requests from being transferred to the embedding algorithm.

show abstract

A Monitoring and Audit Logging Architecture for Data Location Compliance in Federated Cloud Infrastructures

Cited by 65 publications

References 3 publications

Assurance of Security and Privacy Requirements for Cloud Deployment Models

Assurance of Security and Privacy Requirements for Cloud Deployment Models

Semantically Enhanced Mapping Algorithm for Affinity-Constrained Service Function Chain Requests

Semantic validation of affinity constrained service function chain requests

Contact Info

Product

Resources

About