Cloud Security with Virtualized Defense and Reputation-Based Trust Mangement

• Published in: 2009 Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing pp. 717 - 722
• Main Authors: Kai Hwang, Kulkareni, S., Yue Hu
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01-12-2009
• Subjects: and cloud computing services; Application software; Cloud computing; Conference management; Costs; data centers; Data privacy; Data security; Internet clouds; network security; Production facilities; Protection; reputation system; USA Councils; virtualization; Web and internet services
• ISBN: 9781424454204; 9780769539294; 0769539297; 1424454204
• DOI: 10.1109/DASC.2009.149

Internet clouds work as service factories built around Web-scale data centers. The elastic cloud resources and huge datasets processed are subject to security breaches, privacy abuses, and copyright violations. Provisioned cloud resources on-demand are especially vulnerable to cyber attacks. The cloud platforms built by Google, IBM, and Amazon all reveal this weaknesses. We propose a new approach to integrating virtual clusters, security-reinforced data centers, and trusted data accesses guided by reputation systems. A hierarchy of P2P reputation systems is suggested to protect clouds and data centers at the site level and to safeguard the data objects at the file-access level. Different security countermeasures are suggested to protect cloud service models: IaaS, PaaS, and SaaS, currently implemented by Amazon, IBM, and Google, respectively.