An Architectural Model for Deploying Critical Infrastructure Services in the Cloud

Schöller, Marcus; Bless, Roland; Pallas, Frank; Horneber, Jens; Smith, Paul J.

doi:10.1109/cloudcom.2013.67

Cited by 7 publications

(5 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…V, we made use of a cloud architectural model that is targeted at supporting high-assurance critical infrastructure services. The model is described in detail in [11], and includes multiple views on a cloud architecture. A short top-down introduction to the layers of abstraction in the model and the management view is given here, as it is used in the subsequent sections.…”

Section: A Cloud Architectural Model For Critical Infrastructurementioning

confidence: 99%

Critical services in the cloud: Understanding security and resilience risks

Hecht

Smith

Schöller

2014

2014 6th International Workshop on Reliable Networks Design and Modeling (RNDM)

Self Cite

View full text Add to dashboard Cite

The promise of low costs, adaptation to customer load, and fast service roll-out has made cloud infrastructures a primary choice for many service providers. So far, this has been largely for end-user and enterprise services. Recently, the cloud paradigm is being considered by service providers of critical infrastructures. A prominent example of this is ETSI's Industry Specification Group (ISG) on Network Function Virtualization, which provides guidelines on how to move telecommunications services to the cloud. But other critical infrastructure providers are following closely. Common characteristics of critical infrastructure services, such as network functions, are their high requirements for service dependability and security. In this paper, we present a risk assessment method for assessing the risks of moving critical infrastructure services to the cloud. To achieve this, we have extended a well-established information security risk assessment process and developed an extensive cloud-specific fault and challenge catalogue.

show abstract

Section: A Cloud Architectural Model For Critical Infrastructurementioning

confidence: 99%

Critical services in the cloud: Understanding security and resilience risks

Hecht

Smith

Schöller

2014

2014 6th International Workshop on Reliable Networks Design and Modeling (RNDM)

Self Cite

View full text Add to dashboard Cite

show abstract

“…Our approach is related to autonomic monitoring systems that are based on the SECCRIT architecture model [7] and on an evidence-gathering model for assurance assessment in critical infrastructures hosted on top of Cloud environments (as introduced in [8]). Moreover, we found the concepts of Common Criteria for analysing and assessing application in preproduction phases.…”

Section: Related Workmentioning

confidence: 99%

A Multi-layer and MultiTenant Cloud Assurance Evaluation Methodology

Hudic¹,

Tauber²,

Lorünser³

et al. 2014

2014 IEEE 6th International Conference on Cloud Computing Technology and Science

View full text Add to dashboard Cite

Abstract-Data with high security requirements is being processed and stored with increasing frequency in the Cloud. To guarantee that the data is being dealt in a secure manner we investigate the applicability of Assurance methodologies. In a typical Cloud environment the setup of multiple layers and different stakeholders determines security properties of individual components that are used to compose Cloud applications. We present a methodology adapted from Common Criteria for aggregating information reflecting the security properties of individual constituent components of Cloud applications. This aggregated information is used to categorise overall application security in terms of Assurance Levels and to provide a continuous assurance level evaluation. It gives the service owner an overview of the security of his service, without requiring detailed manual analyses of log files.

show abstract

“…Before describing the approach in detail it is necessary to clarify the roles, concerns, and responsibilities of the involved stakeholders by using an architectural framework developed within the SECCRIT project [4], [5]. An analysis of existing architectural frameworks from the viewpoint of a CI service provider showed that most of them assume a rather monolithic role of the "Cloud Service Provider", whereas it is identified the need for applying a more precise role distinction of stakeholders in this context, motivated by liability questions.…”

Section: A Seccrit Architectural Frameworkmentioning

confidence: 99%

Towards corporate confidentiality preserving auditing mechanisms for Clouds

Bless

Flittner

2014

2014 IEEE 3rd International Conference on Cloud Networking (CloudNet)

Self Cite

View full text Add to dashboard Cite

IT services realized within cloud environments often suffer from a lack of transparency. On the one hand this opacity with respect to operational practices protects business secrets of a cloud provider. On the other hand, if services from critical infrastructures run within clouds this opacity becomes a severe problem, e.g., for a later root cause analysis in case of failures. This paper presents approaches for auditing the mapping of virtual resources to physical resources while preserving corporate confidentiality of the cloud providers. We also make sure that the resulting auditing information is useful for a later root cause analysis. Our research concludes that statistical binding and computational hiding commitment schemes are a suitable solution. Moreover, our approach enables a trusted third party to perform audits on behalf of tenants.

show abstract

An Architectural Model for Deploying Critical Infrastructure Services in the Cloud

Cited by 7 publications

References 6 publications

Critical services in the cloud: Understanding security and resilience risks

Critical services in the cloud: Understanding security and resilience risks

A Multi-layer and MultiTenant Cloud Assurance Evaluation Methodology

Towards corporate confidentiality preserving auditing mechanisms for Clouds

Contact Info

Product

Resources

About