Toward a Dynamic Trust Establishment approach for multi-provider Intercloud environment

Abstract

Abstract-In Cloud computing, the data are not only managed by the data owner but also by Cloud providers. Sophisticated Clouds collaboration scenarios require that these data objects can be accessed distributively among Cloud providers, while still being under the control of data owners. It brings security challenges for distributed authorization and trust management in which existing proposed schemes have not fully solved. In this paper, we propose a Dynamic Trust Establishment approach which can incorporate into Cloud provisioning life-cycles for the multi-provider Intercloud environment. It relies on attribute-based policies as the mechanism for trust evaluation and delegation. The paper also presents a practical implementation approach for attribute-based policies using Multi-type Interval Decision Diagrams which has advantage in term of evaluation complexity.

Towards Secure Inter-Cloud Architectures

“…In [9] a Secure Reference Architecture has been developed for the Cloud Computing using patterns. Some works have been very detailed in proposing trust, identity management, authorization and authentication solutions for securing the Inter-Cloud [3,4,18,20]; however, these security approaches are also mixed with special components, technologies and long descriptions of protocols and specifications, which make their proposals too rigid and harder to implement in legacy designs or in ongoing Inter-Cloud developments. No effort to define a holistic view of the federated inter-Cloud system has been proposed.…”

Open Cloud eXchange (OCX): Architecture and Functional Components

“…We consider it as candidate platform for OCX TTP implementation that can also integrate solutions proposed in the research work by the University of Kent [20] and also integrate the authors' earlier works on trust establishment trust based policy evaluation [29] and trust bootstrapping protocol [30].…”

“…The intended solution will review the solutions being developed by the ABFAB WG at IETF [27,31], works by the University of Kent [20] and the University of Amsterdam [29,30].…”

The GEYSERS optical testbed: A platform for the integration, validation and demonstration of cloud-based infrastructure services

“…FEDERICA Error! Reference source not found., OFELIA [30] or GENI Error! Reference source not found..…”

“…It will also be valid for experimenting with the new dynamic trust management and scalable access control policy deployment initially proposed in the GEYSERS project [30]. Further research is being conducted on the SLA based infrastructure resources provisioning following the initial results presented in [27].…”