Skip to Main content Skip to Navigation
Conference papers

Towards Automating Security Enhancement for Cloud Services

Abstract : Cloud infrastructures provide new facilities (elasticity, load balancing, easy integration) to build and maintain elaborated services built from multiple resources in a flexible manner. The changes that continuously affect these services, in particular the migration of resources amongst such cloud infrastructures, induce configuration changes. These latter may generate new vulnerabilities that can compromise the confidentiality, integrity and availability of services. Our approach aims at automating the security enhancement of cloud composite services during the migration of their elementary resources. In that context, it first relies on investigating to what extent orchestration languages can be extended to support such automation. It then requires the design of a framework enabling security automation, in order to adapt and complement the configuration of these elementary resources. This includes specifying dedicated algorithms for selecting adequate security mechanisms before, during and after the migration of one or several resources composing an elaborated service. Finally, it should exploit the complementary of endogenous and exogenous mechanisms for supporting such security enhancement.
Document type :
Conference papers
Complete list of metadata

https://hal.inria.fr/hal-03454868
Contributor : Mohamed Oulaaffart Connect in order to contact the contributor
Submitted on : Monday, November 29, 2021 - 2:01:58 PM
Last modification on : Thursday, January 13, 2022 - 6:30:42 PM

File

Towards Automating Security En...
Files produced by the author(s)

Identifiers

  • HAL Id : hal-03454868, version 1

Collections

Citation

Mohamed Oulaaffart, Remi Badonnel, Olivier Festor. Towards Automating Security Enhancement for Cloud Services. IFIP/IEEE International Symposium on Integrated Network Management (IM), May 2021, Lyon / Virtuel, France. ⟨hal-03454868⟩

Share

Metrics

Les métriques sont temporairement indisponibles