No abstract

Cloud computing still one of the most hyped IT innovations. It envisages a world where components can be rapidly released, implemented, and scaled up and down providing an on-demand utility-like model of allocation and consumption. Moreover, Cloud Management Platform CMP is considered one of its typical components. It is a software product that deploys and manages a Cloud infrastructure. OpenStack, as the most widely adopted platform, has got more and more attention. It aims to be competitive compared to other platforms, like Amazon Web Services (AWS). Furthermore, the adoption of cloud solutions introduces security and privacy concerns. OpenStack is no exception, and security concerns are present in its lifecycle which makes its security analysis a crucial mission. Therefore, this paper firstly presents a state of the art of OpenStack components, sub-components, and their interaction. Then, it focuses principally on an analysis of the most common vulnerabilities affected by OpenStack. The analysis is based on ten years of security reports. Our work leads to have a good comprehension of the OpenStack project, identify its vulnerability trends, and characterize comprehensively its security issues.

No abstract