NDLI: Virtual Resource Orchestration Constraints in Cloud Infrastructure as a Service

Please wait, while we are loading the content...

DBMask: Fine-Grained Access Control on Encrypted Relational Databases

StaDynA: Addressing the Problem of Dynamic Code Updates in the Security Analysis of Android Applications

Collecting, Analyzing and Responding to Enterprise Scale DNS Events

CoinParty: Secure Multi-Party Mixing of Bitcoins

Content Level Access Control for OpenStack Swift Storage

BigGate: Access Control Framework for Outsourced Key-Value Stores

Identifying and Understanding Self-Checksumming Defenses in Software

Aligning Security and Business Objectives for Process-Aware Information Systems

A Dynamic Approach to Detect Anomalous Queries on Relational Databases

Big Data Security and Privacy

Towards Server-side Repair for Erasure Coding-based Distributed Storage Systems

Tunably-Oblivious Memory: Generalizing ORAM to Enable Privacy-Efficiency Tradeoffs

Differentially-Private Mining of Moderately-Frequent High-Confidence Association Rules

Dimensions of Risk in Mobile Applications: A User Study

The BORG: Nanoprobing Binaries for Buffer Overreads

Pleco and Plectron -- Two Provably Secure Password Hashing Algorithms

Virtual Resource Orchestration Constraints in Cloud Infrastructure as a Service

Robust Fingerprinting for Relocatable Code

Password Meters and Generators on the Web: From Large-Scale Empirical Study to Getting It Right

Combining ORAM with PIR to Minimize Bandwidth Costs

HideM: Protecting the Contents of Userspace Memory in the Face of Disclosure Vulnerabilities

DetAnom: Detecting Anomalous Database Transactions by Insiders

SemaDroid: A Privacy-Aware Sensor Management Framework for Smartphones

How Your Phone Camera Can Be Used to Stealthily Spy on You: Transplantation Attacks against Android Camera Service

Secure Information and Resource Sharing in Cloud

Privacy-Preserving Scanning of Big Content for Sensitive Data Exposure with MapReduce

Software-Based Protection against Changeware

Database Fragmentation with Confidentiality Constraints: A Graph Search Approach

Can't You Hear Me Knocking: Identification of User Actions on Android Apps via Traffic Analysis

The Limits of the Trade-Off Between Query-Anonymity and Communication-Cost in Wireless Sensor Networks

On the Character of Phishing URLs: Accurate and Robust Statistical Learning Classifiers

One Thing Leads to Another: Credential Based Privilege Escalation

Distributed Search over Encrypted Big Data

Securing ARP From the Ground Up

Toward De-Anonymizing Bitcoin by Mapping Users Location

Epidemic Behavior of Negative Users in Online Social Sites

Rapid Screening of Transformed Data Leaks with Efficient Algorithms and Parallel Computing

Information Sharing and User Privacy in the Third-party Identity Management Landscape

Practical Exploit Generation for Intent Message Vulnerabilities in Android

A Network Security Game Model

CryptStream: Cryptographic Access Controls for Streaming Data

ABSS: An Attribute-based Sanitizable Signature for Integrity of Outsourced Database with Public Cloud

Virtual Resource Orchestration Constraints in Cloud Infrastructure as a Service

Content Provider	ACM Digital Library
Author	Krishnan, Ram Bijon, Khalid Sandhu, Ravi
Abstract	In an infrastructure as a service (IaaS) cloud, virtualized IT resources such as compute, storage and network are offered on demand by a cloud service provider (CSP) to its tenants (customers). A major problem for enterprise-scale tenants that typically obtain significant amount of resources from a CSP concerns orchestrating those resources in a secure manner. For instance, unlike configuring physical hardware, virtual resources in IaaS are configured using software, and hence prone to misconfigurations that can lead to critical security violations. Examples of such resource orchestration operations include creating virtual machines with appropriate operating system and software images depending on their purpose, creating networks, connecting virtual machines to networks, attaching a storage volume to a particular virtual machine, etc. In this paper, we propose attribute-based constraints specification and enforcement as a means to mitigate this issue. High-level constraints specified using attributes of virtual resources prevent resource orchestration operations that can lead to critical misconfigurations. Our model allows tenants to customize the attributes of their resources and specify fine-grained constraints. We further propose a constraint mining approach to automatically generate constraints once the tenants specify the attributes for virtual resources. We present our model, enforcement challenges, and its demonstration in OpenStack, the de facto open-source cloud IaaS software.
Starting Page	183
Ending Page	194
Page Count	12
File Format	PDF
ISBN	9781450331913
DOI	10.1145/2699026.2699112
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-03-02
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Configuration policy Security policy mining Constraints Cloud iaas
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in