Toward security as a service: A trusted cloud service architecture with policy customization

【Author】 Huang, Chenlin; Chen, Wei; Yuan, Lu; Ding, Yan; Jian, Songlei; Tan, Yusong; Chen, Hua; Chen, Dan

【Source】JOURNAL OF PARALLEL AND DISTRIBUTED COMPUTING

【影响因子】4.542

【Abstract】With the rise of concerns over security and privacy in the cloud, the "security-on-demand" service mode dynamically provides cloud customers with trusted computing environments according to their specific security needs. Major challenges, however, remain to achieve this goal: (1) integrating an auditable, tamper-resistant trust-management mechanism into the cloud infrastructure and (2) building a protocol to guarantee the consistency of customers' policies during virtual machine (VM) migrations. This study develops a new security-on-demand framework called a "policy-customized trusted cloud service" (PC-TCS) architecture that comprises two core components: an attribute-based signature (ABS)-based remote-attestation scheme to achieve trusted remote attestation with customized security policies and an ABS- and blockchain-based VM-migration protocol to support policy-customized trusted migration. To prove the availability of this architecture, we implemented a PC-TCS prototype based on Xen Hypervisor, the results of which indicate that (1) PC-TCS can be integrated into cloud infrastructure as part of a trusted computing base; (2) cloud users can customize the security policies of computing environments and validate their enforcement throughout the service life-cycle with the support of PC-TCS; and (3) PC-TCS can support policy-customized remote attestation and policy-customized migration with a minimal impact on performance. (C) 2020 Elsevier Inc. All rights reserved.

【Keywords】Security on demand; Policy-customized; Trusted cloud service; Remote Attestation

【发表时间】2021 MAR

【收录时间】2022-01-02

【文献类型】

【主题类别】

--