NDLI: SNUAGE: an efficient platform-as-a-service security framework for the cloud

Content Provider	Springer Nature Link
Author	Itani, Wassim Kayssi, Ayman Chehab, Ali
Copyright Year	2012
Abstract	In this paper we present SNUAGE, a platform-as-a-service security framework for building secure and scalable multi-layered services based on the cloud computing model. SNUAGE ensures the authenticity, integrity, and confidentiality of data communication over the network links by creating a set of security associations between the data-bound components on the presentation layer and their respective data sources on the data persistence layer. SNUAGE encapsulates the security procedures, policies, and mechanisms in these security associations at the service development stage to form a collection of isolated and protected security domains. The secure communication among the entities in one security domain is governed and controlled by a standalone security processor and policy attached to this domain. This results into: (1) a safer data delivery mechanism that prevents security vulnerabilities in one domain from spreading to the other domains and controls the inter-domain information flow to protect the privacy of network data, (2) a reusable security framework that can be employed in existing platform-as-a-service environments and across diverse cloud computing service models, and (3) an increase in productivity and delivery of reliable and secure cloud computing services supported by a transparent programming model that relieves application developers from the intricate details of security programming. Last but not least, SNUAGE contributes to a major enhancement in the energy consumption and performance of supported cloud services by providing a suitable execution container in its protected security domains for a wide suite of energy- and performance-efficient cryptographic constructs such as those adopted by policy-driven and content-based security protocols. An energy analysis of the system shows, via real energy measurements, major savings in energy consumption on the consumer devices as well as on the cloud servers. Moreover, a sample implementation of the presented security framework is developed using Java and deployed and tested in a real cloud computing infrastructure using the Google App Engine service platform. Performance benchmarks show that the proposed framework provides a significant throughput enhancement compared to traditional network security protocols such as the Secure Sockets Layer and the Transport Layer Security protocols.
Starting Page	707
Ending Page	724
Page Count	18
File Format	PDF
ISSN	13867857
Journal	Cluster Computing
Volume Number	16
Issue Number	4
e-ISSN	15737543
Language	English
Publisher	Springer US
Publisher Date	2012-07-18
Publisher Place	Boston
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Cloud computing security Platform-as-a-Service security Data confidentiality Integrity Policy-based security Processor Architectures Operating Systems Computer Communication Networks
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Software Service Signature (S3) for authentication in cloud computing

Efficient public verification proof of retrievability scheme in cloud

A secure smart-work service model based OpenStack for Cloud computing

Software quality in the clouds: a cloud-based solution

A strengthening plan for enterprise information security based on cloud computing

Energy-efficient data replication in cloud computing datacenters

Ownership-guaranteed security framework for the private data in the entrusted management environment

Factors affecting the continuous use of cloud service: focused on security risks

Design a cloud storage platform for pervasive computing environments

SNUAGE: an efficient platform-as-a-service security framework for the cloud

Similar Documents

Software Service Signature (S3) for authentication in cloud computing

Efficient public verification proof of retrievability scheme in cloud

A secure smart-work service model based OpenStack for Cloud computing

Software quality in the clouds: a cloud-based solution

A strengthening plan for enterprise information security based on cloud computing

Energy-efficient data replication in cloud computing datacenters

Ownership-guaranteed security framework for the private data in the entrusted management environment

Factors affecting the continuous use of cloud service: focused on security risks

Design a cloud storage platform for pervasive computing environments

SNUAGE: an efficient platform-as-a-service security framework for the cloud