NDLI: Security audits of multi-tier virtual infrastructures in public infrastructure clouds

Please wait, while we are loading the content...

Authentication in the clouds: a framework and its application to mobile users

Venus: verification for untrusted cloud storage

Privacy preserving EHR system using attribute-based infrastructure

A new form of DOS attack in a cloud and its avoidance mechanism

First principles vulnerability assessment

Content oriented virtual domains for secure information sharing across organizations

Remote data checking for network coding-based distributed storage systems

Privacy preserving mapping schemes supporting comparison

Towards incident handling in the cloud: challenges and approaches

Security audits of multi-tier virtual infrastructures in public infrastructure clouds

Towards a discipline of mission-aware cloud computing

Seeding clouds with trust anchors

HengHa: data harvesting detection on hidden databases

Determinating timing channels in compute clouds

Security audits of multi-tier virtual infrastructures in public infrastructure clouds

Content Provider	ACM Digital Library
Author	Schunter, Matthias Probst, Christian W. Pendarakis, Dimitrios Bleikertz, Sören Eriksson, Konrad
Abstract	Cloud computing has gained remarkable popularity in the recent years by a wide spectrum of consumers, ranging from small start-ups to governments. However, its benefits in terms of flexibility, scalability, and low upfront investments, are shadowed by security challenges which inhibit its adoption. Managed through a web-services interface, users can configure highly flexible but complex cloud computing environments. Furthermore, users misconfiguring such cloud services poses a severe security risk that can lead to security incidents, e.g., erroneous exposure of services due to faulty network security configurations. In this article we present a novel approach in the security assessment of the end-user configuration of multi-tier architectures deployed on infrastructure clouds such as Amazon EC2. In order to perform this assessment for the currently deployed configuration, we automated the process of extracting the configuration using the Amazon API. In the assessment we focused on the reachability and vulnerability of services in the virtual infrastructure, and presented a way for the visualization and automated analysis based on reachability and attack graphs. We proposed a query and policy language for the analysis which can be used to obtain insights into the configuration and to specify desired and undesired configurations. We have implemented the security assessment in a prototype and evaluated it for practical scenarios. Our approach effectively allows to remediate today's security concerns through validation of configurations of complex cloud infrastructures.
Starting Page	93
Ending Page	102
Page Count	10
File Format	PDF
ISBN	9781450300896
DOI	10.1145/1866835.1866853
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2010-10-08
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Cloud computing Amazon ec2 Attack graphs Reachability
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in