Compliant Cloud Computing (C3): Architecture and Language Support for User-Driven Compliance Management in Clouds

Abstract

Abstract-Cloud computing represents a promising computing paradigm, where computational power is provided similar to utilities like water, electricity or gas. While most of the Cloud providers can guarantee some measurable non-functional performance metrics e.g., service availability or throughput, there is lack of adequate mechanisms for guaranteeing certifiable and auditable security, trust, and privacy of the applications and the data they process. This lack represents an obstacle for moving most business relevant applications into the Cloud. In this paper we devise a novel approach for compliance management in Clouds, which we termed Compliant Cloud Computing (C3). On one hand, we propose novel languages for specifying compliance requirements concerning security, privacy, and trust by leveraging domain specific languages and compliance level agreements. On the other hand, we propose the C3 middleware responsible for the deployment of certifiable and auditable applications, for provider selection in compliance with the user requirements, and for enactment and enforcement of compliance level agreements. We underpin our approach with a use case discussing various techniques necessary for achieving security, privacy, and trust in Clouds as for example data fragmentation among different protection domains or among different geographical regions.

Discussion the Urgency of Implementing Compliance Management Systems Guidelines Standard in China

“…Undeniably, many enterprises have taken shortcuts and made a fast buck, which are very lucky. But the problem is will such enterprises be always lucky [7,8,[11][12][13][14][15]. I don't think so, as these enterprises will sooner or later be punished by the law for their violations, with fines, decrease in business volume, closedown or suspension for rectification and even being put in prison coming along.…”

Cloud Armor: A Conclusion Work on Trust Management System

“…These layers keep up the cloud responsibility life cycle which comprises of seven stages including strategy arranging, sense and follow, logging, safe-keeping of logs, detailing and replaying, inspecting, and enhancing and redressing. Brandic [7] propose a novel approach for consistence administration in cloud conditions to build up trust between various gatherings. The approach is produced utilizing a unified design and uses consistent administration system to build up trust between cloud benefit clients and cloud specialist co-ops.…”

“…• Trust administration benefit -A trust administration benefit gives an interface amongst clients and cloud administrations for powerful trust administration .Trust administration is troublesome because of capricious number of clients and the dynamic way of distributed computing environment [7]. In this paper we examine a Reputation Based Trust administration for cloud administrations i.e.…”

“…Along these lines, clients don't know whether they can recognize a reliable cloud supplier just in view of its SLA. To bolster the clients in dependably distinguishing reliable cloud suppliers, a multi-faceted Trust Management (TM) framework design for a distributed computing marketplace [6] This framework gives intends to recognize the dependable cloud suppliers as far as various attribute(e.g., security, execution, consistence) surveyed by different sources and foundations of trust data Shoppers criticism is the great source to asses the trust value of cloud administrations [7], But in all actuality the cloud administrations are encounters the pernicious practices like intrigue assault or Sybil assault from their users [6], [8]. We recognize the accompanying top snags of the trust administration in cloud condition…”

Towards Self-Awareness in Cloud Markets: A Monitoring Methodology

“…A large body of research into the Cloud paradigm has yielded the technological development of Cloud infrastructures, such as development of the appropriate resource management models [10], [13], solutions for the energy efficient management of Clouds [1] as well as security and privacy solutions [7]. Yet, very little research exists on the development of appropriate market platforms in a similar way to other commodities like energy, stocks, and assets.…”