SMaRT

Abstract. The importance of cloud-based systems is increasing constantly as they become crucial for completing tasks in an effective and affordable manner. Yet, their use is affected by concerns about the security of the data and applications provisioned through them. Security certification provides a means of increasing confidence in such systems, by establishing that they fulfil certain security properties of interest. Certification processes involve security property assessments against specific threat models. These processes may be based on self-assessment, testing, inspection or runtime monitoring of security properties, and/or combinations of such methods (hybrid certification). One important question for all such processes is whether they actually deliver what they promise. This question is open at the moment and is the focus of our work. To address it, we have developed an approach that formalises certification processes, by translating them in the language of the Prism model-checker and uses Prism to verify properties of interest on the model of the certification process, under specific environmental assumptions.

show abstract

Multi-layered Monitoring and Adaptation

Guinea

Kecskeméti

Marconi

et al. 2011

Service-Oriented Computing

View full text Add to dashboard Cite

Abstract. Service-based applications have become more and more multilayered in nature, as we tend to build software as a service on top of infrastructure as a service. Most existing SOA monitoring and adaptation techniques address layer-specific issues. These techniques, if used in isolation, cannot deal with real-world domains, where changes in one layer often affect other layers, and information from multiple layers is essential in truly understanding problems and in developing comprehensive solutions. In this paper we propose a framework that integrates layer specific monitoring and adaptation techniques, and enables multi-layered control loops in service-based systems. The proposed approach is evaluated on a medical imaging procedure for Computed Tomography (CT) Scans, an eHealth scenario characterized by strong dependencies between the software layer and infrastructural resources.

show abstract

SMaRT

Abstract: This is the accepted version of the paper.This version of the publication may differ from the final published version. Permanent repository link

Cited by 7 publications

References 9 publications

Cloud-Based Systems Need Multi-Level Management

Cloud-Based Systems Need Multi-Level Management

Cloud Certification Process Validation Using Formal Methods

Multi-layered Monitoring and Adaptation

Contact Info

Product

Resources

About