Design and implementation of cloud security defense system with software defined networking technologies

Sin-Fu, Lai; Su, Hui-Kai; Hsiao, Wen-Hsu; Chen, Kim-Joan

doi:10.1109/ictc.2016.7763488

Cited by 8 publications

(2 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The work in [6] proposes a two-three factor mutual authentication based biometrics, passwords and user-ide for client-cloud side, but these proposals do not consider the limited computation and storage at client devices. The work in [7] combines cloud computing with software defined network, proposing a security policy decision system to enhance the intrusion detection system, by using an SDN controller, Vswitch and VIDS to query a database and thus setting some defense mechanisms in cloud. However, that proposal is not designed for F2C nor for fog, and thus it does not provide security for communication and authentication on such scenarios.…”

Section: Related Workmentioning

confidence: 99%

Securing combined Fog-to-Cloud system Through SDN Approach

Kahvazadeh

Souza

Masip-Bruin

et al. 2017

Proceedings of the 4th Workshop on CrossCloud Infrastructures &Amp; Platforms - Crosscloud'17

View full text Add to dashboard Cite

Future IoT services execution may benefit from combining resources at cloud and at the edge. To that end, new architectures should be proposed to handle IoT services in a coordinated way at either the edge of the network, the cloud, or both. Reacting to that need, the Fog-to-Cloud concept has been recently proposed. A key aspect in the F2C design refers to security, since F2C raises security issues besides those yet unsolved in fog and cloud. Thus, we envision the need for new security strategies to handle all components in the F2C architecture. In this paper we propose an SDNbased (mater/slave) security architecture leveraging a centralized controller on the cloud, and distributed controllers at the edge of the network. We argue that the proposed architecture brings more security and privacy to the cloud users by reducing the distance between them and, therefore, reducing the risks of the so called man-in-the-middle attacks. The proposed security architecture is analyzed in some critical infrastructure scenarios in order to illustrate their potential benefits.

show abstract

Section: Related Workmentioning

confidence: 99%

Securing combined Fog-to-Cloud system Through SDN Approach

Kahvazadeh

Souza

Masip-Bruin

et al. 2017

Proceedings of the 4th Workshop on CrossCloud Infrastructures &Amp; Platforms - Crosscloud'17

View full text Add to dashboard Cite

show abstract

“…Users' data are kept in more than two data center for evading physical damage of data stored in the cloud data centers. In fact, it can be accessed from anywhere in the world [3]. Cloud provides more efficient data management to maintain the users' data.…”

Section: Introductionmentioning

confidence: 99%

Security Architecture for multi-Tenant Cloud Migration

Manikandasaran¹,

Raja²

2018

IJFCC

View full text Add to dashboard Cite

In today's competitive IT world Cloud Computing is the word rolling around in all activities of IT companies. Thus, everyone is transforming their infrastructure from legacy infrastructure to cloud computing which is very feasible, and Cost effective. Finally, it can scale up and scale down instantly on demand basis. When companies think about the cloud adoption, security is the biggest issue and data is stored in software defined environment. This paper addresses security parameters which need to be mainly considered for cloud migration. Cloud service provider is responsible for building fence around the underlying infrastructure i.e. Compute, network and storage. Security is the main controller for adopting the cloud environment. In Cloud computing, security issues are identified with different layers. In this paper, new architecture is proposed for achieving data confidentiality and data integrity in multitenant workload migration into cloud. This architecture ensures that tenant has secure relationship between source and destination data centers via staging area. This staging area has capability to migrate the workload in different hypervisors. Workload meets security guidelines through this migration process from beginning to end. IndexTerms-Cloud security, multitenant, data confidentiality, data migration, software defined functionalities (SDF).

show abstract