NDLI: Giano: Toward Large Scale Access Security Management in Private Cloud

Please wait, while we are loading the content...

Giano: Toward Large Scale Access Security Management in Private Cloud

SPLM: Security Protection of Live Virtual Machine Migration in Cloud Computing

Fast, Private and Verifiable: Server-aided Approximate Similarity Computation over Large-Scale Datasets

Towards Secure and Fast Mapping of Genomic Sequences on Public Clouds

Lightweight Examination of DLL Environments in Virtual Machines to Detect Malware

A New Secure Index Supporting Efficient Index Updating and Similarity Search on Clouds

Privacy Preserving Distributed Permutation Test

Enabling Assured Deletion in the Cloud Storage by Overwriting

Another Compression Method for Homomorphic Ciphertexts

Decentralized Secure Data Sharing with Attribute-Based Encryption: A Resource Consumption Analysis

Cloud Storage Integrity Checking: Going from Theory to Practice

Dynamic Execution of Secure Queries over Homomorphic Encrypted Databases

Community-Based Secure Information and Resource Sharing in Azure Cloud IaaS

Giano: Toward Large Scale Access Security Management in Private Cloud

Content Provider	ACM Digital Library
Author	Wu, Ye
Abstract	Access control related problems and solutions are commonly taken for granted as the No.1 enterprise security concern. Today, as more and more companies shift their business to cloud, while blurring the boundary of information exchange and management, this inevitably introduces serious technical challenges and difficulties to the realm of access security management for loss of cognitive central control in some degree, thereby increasingly receiving more attentions and investigations on their original basis. Big internet companies such as Google, Facebook in the US., and Baidu in China, their IDCs consist of huge amount of physical servers and millions of virtual machines or containers, usually deemed as a profound private cloud. At meantime, doing daily jobs, hundreds and thousands of employees (most of them are engineers with different roles) demand to access multi-categorical resources in IDC frequently. For example, SREs may need to remotely logon production servers to configure environment or rectify system mistakes; RDs might logon by certain account associated to machines, initiating services to fulfill development work. Moreover, IDC is the place where tremendous applications are running dynamically and endlessly, among which they exchange information one another by accessing to data storage and computing services probably across domains. As a consequence, a very complicated topology based on accessing relationships is emerged due to interactions among massive people-devices-services. In order to solve such large-scale distributed access control centered problems, this apparently leads to a line of security technologies needing to be considered, including identity management, authentication methods, authorization models, auditing and reporting, regulatory compliance, tracing and forensic, domain isolation, intrusion detections, and even more the administration toolkits for security evaluation criteria. Toward designing and implementing this desired type of comprehensive security platform, while simultaneously circumventing relative reliable, scalable and performance issues in engineering, as is highly concerned in industrial-level products, it is really a daunting task if without developing appropriate abstraction on targets and innovative applicable theorem in depth, for reducing complexity and unifying mechanisms. In this talk, we just present such a real-world existing system developed by our team, namely Giano which embraces most aforementioned security techniques, already widely used for Baidu IDC operating management and integrated into many business products. Some important related theoretical work such as delegation logic, attribute-based authentication, proof-carrying authorization, et al. are about to be illustrated, with the focus on their applications in practice.
Starting Page	1
Ending Page	1
Page Count	1
File Format	PDF
ISBN	9781450342858
DOI	10.1145/2898445.2898458
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-05-30
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control Enterprise security Private cloud Identity management
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in