Monitoring and Reputation Mechanisms for Service Level Agreements

Rana, Omer F.; Warnier, Martijn; Quillinan, Thomas B.; Brazier, Frances M. T.

doi:10.1007/978-3-540-85485-2_10

Cited by 31 publications

(17 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Rana et al [22] monitor reputation from three points of view: Trusted Third Party, Trusted Module at Service Provider, and Model at Client Site. They introduce the figure of a trusted mediator to solve conflicts between parties.…”

Section: Related Workmentioning

confidence: 99%

Analysis of a trust model for SLA negotiation and enforcement in cloud markets

Macías

Guitart

2016

Future Generation Computer Systems

View full text Add to dashboard Cite

Online Reputation Systems help mitigate the information asymmetry between clients and providers in Cloud Computing Markets. However, those systems raise two main drawbacks: the disagreement for assuming the cost of ownership of such services and their vulnerability to reputation attacks from dishonest parties that want to increase their reputation. This article faces both problems by describing a decentralised (peer-topeer) trust model that does not require the intervention of a central entity to manage it. This model includes mechanisms to allow participants to avoid dishonest behaviour from other peers: each client statistically analyses the external reports about providers and updates the trustworthiness of the peers. The trustworthiness values will be used to negotiate prices in later transactions. The trust model is then incorporated in the Service-Level Agreement negotiation and enforcement processes, prioritising trusted clients over non-trusted clients to minimise the consequences of low Quality of Service in relation to the trust of the provider, and incentivise accurate trust reports from the clients. Finally, this article evaluates and discusses the validity of the trust model under different attacks from dishonest clients and providers.

show abstract

Section: Related Workmentioning

confidence: 99%

Analysis of a trust model for SLA negotiation and enforcement in cloud markets

Macías

Guitart

2016

Future Generation Computer Systems

View full text Add to dashboard Cite

show abstract

“…They discuss penalties or rewards for violating or satisfying an objective. Penalties can be imposed in the form of monetary compensation that is the current case in most public cloud service offerings or by means of reputation track mechanisms (Rana et al, 2008).…”

Section: Regulation Of Penaltiesmentioning

confidence: 99%

SERVICE LEVEL AGREEMENTS AS A SERVICE - Towards Security Risks Aware SLA Management

Stamou

Morin

Gâteau³

et al. 2012

Proceedings of the 2nd International Conference on Cloud Computing and Services Science

View full text Add to dashboard Cite

Abstract:Cloud computing has matured to become a valuable on demand alternative to traditional ownership models for the provisioning of services, platforms and infrastructure. However, this raises many issues for Governance, Risk and Compliance (GRC) and in particular in terms of Information Systems Security Risk Management (ISSRM). Considering such issues lack attention and knowledge, particularly for small and medium sized enterprises (SMEs), and that cloud computing Service Level Agreements (SLA) provide very limited support outside of basic Quality of Service (QoS) parameters, this paper argues that SLAs for cloud computing services should be more customer oriented and aware of security and risk management. A design is proposed where the SLA process, from context initialization to negotiation and agreement is decoupled from the actual cloud service provisioning and itself turned into a Service : SLA as a Service (SLAaaS). This should provide customers with much more customized and fine-grained agreements compared with the ones currently offered.

show abstract

“…After an agent owner has negotiated for resources and possibly paid for access, an agent owner expects the security manager to grant access as negotiated. Similar to monitoring of Service Level Agreements (SLA) a trusted third party module can be used to monitor and log the communication between client (agent) and service provider (host) [37].…”

Section: Security Managermentioning

confidence: 99%