Security-by-design in multi-cloud applications: An optimization approach

Casola, Valentina; Benedictis, Alessandra De; Rak, Massimiliano; Villano, Umberto

doi:10.1016/j.ins.2018.04.081

Cited by 24 publications

(11 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In particular, we present an overview of the body of knowledge found as a result of this review (considering the 88 finally selected primary studies). The primary studies were classified according to the research method used in the study, as defined in Hybrid Cloud (public vs. private) [44][45][46][47][48][49][50][51][52] IoT or physical nodes [53][54][55][56] Different cloud services from different cloud providers [8,17,26,29,31,34,[57][58][59][60][61][62][63][64][65][66][67][68][69][70][71][72][73] Multi-cloud in a broader sense [74][75][76] Federated Cloud Services [17,32,[77][78][79][80][81] Multi-cloud Services Communities [82] opinion pap...…”

Section: Overview Of the Slr Primary Studies Selectedmentioning

confidence: 99%

“…From the primary studies analysed, more than the 40% of them did not provide a specific definition of the term multi-cloud, using the term without specifying its actual meaning in the context of the work presented. From the ones which did provide such a definition or explanation (the references included in Table 6), most used the term multi-cloud [8,17,26,29,31,34,[57][58][59][60][61][62][63][64][65][66][67][68][69][70][71][72][73] for defining cloud services that were provided by different cloud services providers (29%). A significant number of these studies explicitly mentioned the lack of third-party services or any other intermediate layer providing federation mechanisms between these services [57,66].…”

Section: Meaning Of the Term Multi-cloud [Rq1] [Rq2]mentioning

confidence: 99%

See 1 more Smart Citation

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

et al. 2023

Self Cite

View full text Add to dashboard Cite

The evolution of Cloud Computing into a service utility, along with the pervasive adoption of the IoT paradigm, has promoted a significant growth in the need of computational and storage services. The traditional use of cloud services, focused on the consumption of one provider, is not valid anymore due to different shortcomings being the risk of vendor lock-in a critical. We are assisting to a change of paradigm, from the usage of a single cloud provider to the combination of multiple cloud service types, affecting the way in which applications are designed, developed, deployed and operated over such heterogeneous ecosystems. The result is an effective heterogeneity of architectures, methods, tools, and frameworks, copying with the multi-cloud application concept. The goal of this study is manifold. Firstly, it aims to characterize the multi-cloud concept from the application development perspective by reviewing existing definitions of multi-cloud native applications in the literature. Secondly, we set up the basis for the architectural characterization of these kind of applications. Finally, we highlight several open research issues drawn up from the analysis carried out. To achieve that, we have conducted a systematic literature review (SLR), where, a large set of primary studies published between 2011 and 2021 have been studied and classified. The in-depth analysis has revealed five main research trends for the improvement of the development and operation DevOps lifecycle of “multi-cloud native applications”. The paper finishes with directions for future work and research challenges to be addressed by the software community.

show abstract

Section: Overview Of the Slr Primary Studies Selectedmentioning

confidence: 99%

Section: Meaning Of the Term Multi-cloud [Rq1] [Rq2]mentioning

confidence: 99%

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

et al. 2023

Self Cite

View full text Add to dashboard Cite

show abstract

“… Implement Security as Code: Incorporate security practices early in the development cycle through security as code. Automate security scanning and compliance checking in CI/CD pipelines [17] .  Multi-Cloud Policy Enforcement: Leverage policyas-code tools such as OPA (Open Policy Agent) to enforce governance and compliance across cloud environments.…”

Section: E) Security Compliance and Governancementioning

confidence: 99%

Improving operational efficiency and productivity through the fusion of DevOps and SRE practices in multi-cloud operations

Perumal,

Chintale

2022

Int. J. Cloud Comput. Database Manage.

View full text Add to dashboard Cite

The exponential growth in cloud computing has led organizations to adopt multi-cloud environments, seeking to capitalize on the distinct advantages offered by various cloud service providers. However, this diversification brings significant complexities and challenges to managing cloud operations, particularly concerning operational efficiency and productivity. This study aims to explore and validate the integration of DevOps and Site Reliability Engineering (SRE) practices in mitigating these challenges and enhancing operational efficiency and productivity within multi-cloud environments. Addressing existing gaps in cloud operations management, this study employs a comprehensive methodology, which includes analyzing selected DevOps and SRE practices tailored to multi-cloud infrastructures. The criteria for practice selection are informed by their relevance and applicability to the multi-cloud context, aiming to provide a balanced overview of practical strategies. The findings reveal that the synergistic integration of DevOps and SRE practices leads to improved deployment frequency, reduced failure rates, heightened system reliability, and faster recovery times. These improvements are instrumental for organizations seeking to leverage the full potential of cloud computing while managing the inherent complexities of multi-cloud strategies. The practical implications of this study are manifold as it underscores the necessity of adopting a holistic approach to cloud operations management, highlighting the indispensable role of integrating DevOps and SRE practices to navigate the intricacies of multi-cloud environments effectively. Future research avenues may include longitudinal studies to assess the long-term impacts of these integrations on organizational agility and innovation.

show abstract

“…As it can be seen in the figure, there are three main possibilities when implementing a CPS infrastructure: the use of a Cloud Computing solution, a Fog Computing solution, or an Edge Computing solution. All these solutions are well-known infrastructures, which are not defined in depth herein since it is not within the scope of the work [Casola et al, 2018, Fernandez et al, 2016b. The decision made regarding the type of infrastructure to be supported by the CPS will depend on the requirements of the system.…”

Section: Infrastructure Layermentioning

confidence: 99%

Security Reference Architecture for Cyber-Physical Systems (CPS)

Moreno¹,

Rosado²,

Sánchez³

et al. 2021

jucs

View full text Add to dashboard Cite

Cyber-physical systems (CPS) are the next generation of engineered systems into which computing, communication, and control technologies are now being closely integrated. They play an increasingly important role in critical infrastructures, governments and everyday life. Security is crucial in CPS, but they were not, unfortunately, initially conceived as a secure environment, and if these security issues are to be incorporated, then security must be considered from the very beginning of the system design. One way in which to solve this problem is by having a global perspective, which can be achieved by employing a Reference Architecture (RA), since it is a high-level abstraction of a system that could be useful in the implementation of complex systems. It is widely accepted that adding elements in order to address many security factors (integrity, confidentiality, availability, etc.) and facilitate the definition of the security requirements of a Security Reference Architecture (SRA) is a good starting point when attempting to solve these kinds of cybersecurity problems and protect the system from the beginning of the development. An SRA makes it possible to define the key elements of a specific environment, thus allowing a better understanding of the inherent elements of the environments, while promoting the integration of security aspects and mechanisms. The present paper, therefore, presents the definition of an SRA for CPS by using UML models in an attempt to facilitate secure CPS implementations.

show abstract

Security-by-design in multi-cloud applications: An optimization approach

Cited by 24 publications

References 15 publications

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

Improving operational efficiency and productivity through the fusion of DevOps and SRE practices in multi-cloud operations

Security Reference Architecture for Cyber-Physical Systems (CPS)

Contact Info

Product

Resources

About

Security-by-design in multi-cloud applications: An optimization approach

Cited by 24 publications

References 15 publications

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

Understanding the challenges and novel architectural models of multi-cloud native applications – a systematic literature review

Improving operational efficiency and productivity through the fusion of DevOps and SRE practices in multi-cloud operations

Security Reference Architecture for Cyber-Physical&nbsp;Systems (CPS)

Contact Info

Product

Resources

About

Security Reference Architecture for Cyber-Physical Systems (CPS)