Security-as-a-Service in Multi-cloud and Federated Cloud Environments

Abstract

Abstract. The economic benefits of cloud computing are encouraging customers to bring complex applications and data into the cloud. However security remains the biggest barrier in the adoption of cloud, and with the advent of multi-cloud and federated clouds in practice security concerns are for applications and data in the cloud. This paper proposes security as a value added service, provisioned dynamically during deployment and operation management of an application in multi-cloud and federated clouds. This paper specifically considers a data protection and a host & application protection solution that are offered as a SaaS application, to validate the security services in a multi-cloud and federated cloud environment. This paper shares our experiences of validating these security services over a geographically distributed, large scale, multi-cloud and federated cloud infrastructure.

Multicloud service composition: A survey of current approaches and issues

“…From today's security solutions, we could mention the secure cloud storage, which is a cloud service responsible for protecting the data existing in some cloud models or other platforms. This solution gives the consumers access to control their sensitive information on the cloud, to always ensure their privacy . Another security solution is named the intelligent protection, which is also a cloud security service developed to ensure the security of servers and applications existing in the cloud infrastructures …”

“…This solution gives the consumers access to control their sensitive information on the cloud, to always ensure their privacy. 77 Another security solution is named the intelligent protection, which is also a cloud security service developed to ensure the security of servers and applications existing in the cloud infrastructures. 77 Protecting the private and critical information from loss or theft, facing control and privacy issues, guaranteeing data integrity and confidentiality, etc are some of the challenges involved while dealing with cloud services.…”

“…77 Another security solution is named the intelligent protection, which is also a cloud security service developed to ensure the security of servers and applications existing in the cloud infrastructures. 77 Protecting the private and critical information from loss or theft, facing control and privacy issues, guaranteeing data integrity and confidentiality, etc are some of the challenges involved while dealing with cloud services. 78 The issues surrounding security are serious in 1 single cloud as in a multicloud environment.…”

Secure Cloud Storage: A framework for Data Protection as a Service in the multi-cloud environment

“…Our proposed framework is different from these services in the sense that we provide a full life-cycle of data security management and maximize the flexibility of users in using the data encryption service. The closest works to ours are [16] and [17]. Specifically, with respect to the work in [16], our service is similar because both services target multi-cloud environments and provide several options for users to customize the services.…”

“…The difference, however, is that the security service in that work focuses on protecting the VM with firewalls and security tools while our focus is specifically on data encryption. On the other hand, while [17] shares the ideas with our work in providing data encryption as a service, the architecture and design principles of the two works are very different.…”