The term data security refers to the degree of resistance of protection given to information from unintended or unauthorized access. The core principles of information security remain the same -Confidentiality, Integrity and Availability also referred as CIA triad. With cloud adoption the confidential enterprise data is moved from organization premises to untrusted public network and due to this the attack surface has increased manifold. Several cloud computing platforms like OpenStack, Eucalyptus, Amazon EC2 offer users to build and configure public, hybrid and private clouds. While the traditional encryption based on PKI infrastructure still works in cloud scenario the management of public-private keys and trust certificates is difficult. The Identity based Public Key Cryptography (also referred as ID-PKC) overcomes this problem by using publicly identifiable information for generating the keys and works well with decentralized systems. The users can exchange information securely without having to manage any trust information. Another advantage is that access control (role based access control policy) information can be embedded into data unlike in PKI where it is handled by separate component or system. In OpenStack cloud platform the keystone service acts as identity service for authentication and authorization and has support for public key infrastructure for auth services. The proposed approach explains cloud security model using OpenStack cloud platform and analyzes its security architecture for data confidentiality. It provides a method to integrate ID-PKC schemes for securing data when in transit and storage and explains the key measures for safe guarding data. The proposed approach uses JPBC crypto library for key-pair generation based on IEEE standard(s) P1636.3 for assuring data confidentiality in public cloud environment.

No abstract

Cloud computing works on various service models like SaaS, PaaS, IaaS. The enterprises outsource data and computation to cloud and benefit from cloud computing unique attributes like abundant storage, network and compute. This paradigm also brings forth many challenges for data security and access control. Many organizations are choosing Cloud platforms for software development/testing, particularly teams based on agile software development need faster software integration. As cloud turns out to be cost-effective and performance intensive it remains as obvious choice for organizations.In this paper we provide an efficient model for software testing which leverages cloud environment and supports rigorous requirements of agile development model viz., continuous build integration and we provide an approach to run automation testcases easily (particularly User Interface automation testcases). The regression tests developed as part of software lifecycle can be executed either on-demand or selectively based on tags provided. The proposed model scales well to accommodate any number of testcases can be run flexibly. Surprisingly our model input is a single CSV (comma separated file) with test case information. The proposed model takes care of automatic segregation of the testcases into test suites and then executes them individually either parallel or serially based on configuration. We rely on Jenkins tool (an open source build management tool) for creating required jobs and scheduling.The proposed model of Tests execution is extremely useful in high demanding agile environments where feature development is many times faster than traditional water fall model. The approach also takes advantage of virtualized environment for tests execution compared to traditional hardware.

Consider a cloud deployment where the organizational network pertaining to a tenant having routers, switches sharing network telemetry data on regular basis. Among different ways of managing networks flow-based network monitoring is most sought after approach because of accuracy and economies of scale. In the event of host compromise the device credentials are revoked thereby disabling its ability to read future communications. Broadcast Encryption techniques having strong key revocation mechanism can be used in this context.Waters et. al [?] is one the broadcast encryption schemes which facilitate efficient sharing using small size keys and the related Attribute-Based Encryption scheme uses dual encryption technique and is capable of handling non-monotonous access structure again with small keys. In this paper we experiment with broadcast encryption and attribute based encryotion schemes with real-time network telemetry data and provide detailed analysis of performace. Though the original scheme provides smaller keys, few changes to the algorithm improves the performance and efficiency and makes it acceptable for large scale usage. We found the optimized scheme is 20% more performant than inital scheme.

Software development life cycle consists of various stages like requirements, design, implementation, testing and maintenance. In a typical enterprise level project number of testcases to be executed for each release would be in thousands. One known way of segregating the testcases is using component or module names and one can also classify them based on level of importance like unit testing, functional, sanity etc. With iterative development models like Agile, the release cycle is short and it is prudent to execute the testcase selectively majorly concentrating on impacting components.In this paper we provide a generic way to manage the tests and provide an efficient mechanism to run the tests selectively. In our approach we make use of well-known build management tool called Jenkins for running the tests on-demand. One unique benefit of our approach is that the input is a single commaseparated-value (CSV) file and it is very easy to add/modify existing tests. The tests are tagged using well known keywords (viz. database-layer, configuration, regression). When some particular tests need to be run, the user enters 'Tag' in the job parameter and testsuite will be generated dynamically.In this paper we also describe an end-to-end test management system that supports running selective tests with help of jobs created in Jenkins environment. The proposed model of Tests execution is highly useful in high demanding environments like agile software development model, Test driven development model where feature development is many times faster than traditional water fall model. The approach suggested in this paper makes optimum use of cloud resources by distributing the jobs, so this can be utilized specially for testing under virtualized environment.