Next Generation Cloud Architectures

Giannoutakis, Konstantinos M.; Spanopoulos-Karalexidis, Minas; Papadopoulos, Christos K. Filelis -; Tzovaras, Dimitrios

doi:10.1007/978-3-030-41110-7_2

Cited by 5 publications

(3 citation statements)

References 21 publications

(23 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The OWASP “Top 10 Cloud Risks” [ 39 ], highlighted two issues revealed by the d-TM analysis method, “User Identity Federation” and “Infrastructure Security”. Furthermore, Denial-of-Service (DoS) attack and threats relating to identity management are also considered in [ 2 , 40 , 41 ]. The consequences of a cloud account takeover are even more difficult to trace and mitigate.…”

Section: Discussionmentioning

confidence: 99%

Data-Driven Threat Analysis for Ensuring Security in Cloud Enabled Systems

Alwaheidi

Islam

2022

Sensors

View full text Add to dashboard Cite

Cloud computing offers many benefits including business flexibility, scalability and cost savings but despite these benefits, there exist threats that require adequate attention for secure service delivery. Threats in a cloud-based system need to be considered from a holistic perspective that accounts for data, application, infrastructure and service, which can pose potential risks. Data certainly plays a critical role within the whole ecosystem and organisations should take account of and protect data from any potential threats. Due to the variation of data types, status, and location, understanding the potential security concerns in cloud-based infrastructures is more complex than in a traditional system. The existing threat modeling approaches lack the ability to analyse and prioritise data-related threats. The main contribution of the paper is a novel data-driven threat analysis (d-TM) approach for the cloud-based systems. The main motivation of d-TM is the integration of data from three levels of abstractions, i.e., management, control, and business and three phases, i.e., storage, process and transmittance, within each level. The d-TM provides a systematic flow of attack surface analysis from the user agent to the cloud service provider based on the threat layers in cloud computing. Finally, a cloud-based use case scenario was used to demonstrate the applicability of the proposed approach. The result shows that d-TM revealed four critical threats out of the seven threats based on the identified assets. The threats targeted management and business data in general, while targeting data in process and transit more specifically.

show abstract

Section: Discussionmentioning

confidence: 99%

Data-Driven Threat Analysis for Ensuring Security in Cloud Enabled Systems

Alwaheidi

Islam

2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Depending on the required level of availability and the relevance of characteristics related to the location, security, and privacy of information, there are different forms of implementation, usually framed in public or private clouds. More recently, hybrid cloud models (complementing private cloud services with public cloud services) and multi-cloud (using cloud services from different service providers) have become increasingly important to make infrastructures more adaptable to existing needs and services more resilient [5], [20], [21]. In the context of MEC [6], [22], and edge computing [17] in general, the aim is to bring centralized cloud functionalities to the edge so that customers can take advantage of the functionalities while benefiting from response times that are more appropriate to the characteristics of the services being implemented [23], [24].…”

Section: A Cloud Servicesmentioning

confidence: 99%

Automated Application Deployment on Multi-Access Edge Computing: A Survey

Santos,

Bernardino,

Correia

2023

IEEE Access

View full text Add to dashboard Cite

The advent of technologies such as 5G makes it possible to improve the availability and quality of existing services and introduce new ones, such as enhanced mobile broadband, IoT applications, augmented reality, mission-critical services, cloud gaming, or smart infrastructure. It is now possible to get faster responses to a wide range of requests, but the addition of more users and services can still make normal operation difficult due to network congestion, bandwidth limitations, scalability issues, service differentiation, or security concerns. To solve this problem, and to help meet Service Level Agreements (SLAs), some services must be brought closer to the user. The Multi-access Edge Computing (MEC) initiative is a step in this direction, enabling cloud-like services to be moved closer to the end user, providing lower access latencies. However, the dynamic nature of edge computing environments, and the mobility of users, require the implementation of automated service delivery processes that can adapt to environmental conditions, such as the use of optimal policies tailored to the scenario. This article surveys the research focused on MECs, particularly those that use automated deployment mechanisms, namely Infrastructure as Code (IaC) tools. Today, these tools play a key role in automated deployment mechanisms, especially for maintaining optimal policies, which is still under investigation. The result of this assessment has been the identification of the relevance of IaC to these processes and the identification of future research directions.

show abstract

“…IoT devices are very heterogeneous, ranging from very constrained sensors to heavier embedded systems, in order to deal with all the new and various business opportunities. For instance, some new use cases incorporate the Cloud-to-Thing Continuum [1] and increased virtualisation [2] for the smallest devices to make the IoT device simpler to code, more portable, easier to deploy and in the end cheaper to produce with increased efficiency for the ecosystem.…”

Section: Introductionmentioning

confidence: 99%

Nested compartmentalisation for constrained devices

Dejon

Gaber

Grimaud

2021

2021 8th International Conference on Future Internet of Things and Cloud (FiCloud)

View full text Add to dashboard Cite

This paper presents a framework and implementation guidelines to set up nested compartmentalisation in constrained devices. All memory spaces are protected by the Memory Protection Unit (MPU). Current MPU-based systems offer efficient memory protection but are mostly tied to the fixed permission model provided by their operating system, kernel, hypervisor or by code instrumentation. New use cases evolve with the rise of the Internet of Things (IoT) ecosystems where software components could benefit from locally and dynamically established permissions. This includes a temporary nested subspace with restricted memory access rights. Our framework integrates subspace creation and management for runtime dynamic changes of the permission model for any level of abstraction. Global security policies of fixed permission models are reflected in the software architecture and the implementation of the framework. We also demonstrate the feasibility of providing nested compartmentalisation by showing how to leverage the MPU features.

show abstract

Next Generation Cloud Architectures

Cited by 5 publications

References 21 publications

Data-Driven Threat Analysis for Ensuring Security in Cloud Enabled Systems

Data-Driven Threat Analysis for Ensuring Security in Cloud Enabled Systems

Automated Application Deployment on Multi-Access Edge Computing: A Survey

Nested compartmentalisation for constrained devices

Contact Info

Product

Resources

About