The vulnerability of Cloud Computing Systems (CCSs) to Advanced Persistent Threats (APTs) is a significant concern to government and industry. We present a cloud architecture reference model that incorporates a wide range of security controls and best practices, and a cloud security assessment model-Cloud-Trust-that estimates high level security metrics to quantify the degree of confidentiality and integrity offered by a CCS or cloud service provider (CSP). Cloud-Trust is used to assess the security level of four multi-tenant IaaS cloud architectures equipped with alternative cloud security controls and to show the probability of CCS penetration (high value data compromise) is high if a minimal set of security controls are implemented. CCS penetration probability drops substantially if a cloud defense in depth security architecture is adopted that protects virtual machine (VM) images at rest, strengthens CSP and cloud tenant system administrator access controls, and which employs other network security controls to minimize cloud network surveillance and discovery of live VMs.

No abstract

No abstract

law enforcement users will be able to seamlessly and securely communicate over whatever local point of access is the best fit at any specific location, time, and situation. The second major theme dealt with being able to filter, prioritize, and make sense out of all the new data sent over this network. A common concern was the danger of information overload and how to manage and curate information to make it most useful for various areas of law enforcement, ranging from officers in the field to operations centers and public safety answering points. Specific needs in support of these themes included architectural development, developing guidance for agencies on acquiring, managing, and using new technologies, and conducting research and development on a range of technologies related to bringing about the future hybrid networks and information prioritization.

No abstract