Modeling time, probability, and configuration constraints for continuous cloud service certification
El Ioini N
MetadataShow full item record
Cloud computing proposes a paradigm shift where resources and services are allocated, provisioned, and accessed at runtime and on demand. New business opportunities emerge for service providers and their customers, at a price of an increased uncertainty on how their data are managed and their applications operate once stored/deployed in the cloud. This scenario calls for assurance solutions that formally assess the working of the cloud and its services/processes. Current assurance techniques increasingly rely on model-based verification, but fall short to provide sound checks on the validity and correctness of their assessment over time. The approach in this paper aims to close this gap catching unexpected behaviors emerging when a verified service is deployed in the target cloud. We focus on certification-based assurance techniques, which provide customers with verifiable and formal evidence on the behavior of cloud services/processes. We present a trustworthy cloud certification scheme based on the continuous verification of model correctness against real and synthetic service execution traces, according to time, probability, and configuration constraints, and attack flows. We test the effectiveness of our approach in a real scenario involving ATOS SA eHealth application deployed on top of open source IaaS OpenStack.
Showing items related by title, author, creator and subject.
Ardagna CA; Asal R; Damiani E; Dimitrakos T; El Ioini N; Pahl C (2018)Performance and dependability levels of cloud-based computations are difficult to guarantee by-design due to segregation of visibility and control between applications, data owners, and cloud providers. Lack of predictability ...
Ardagna CA; Asal R; Damiani E; El Ioini N; Pahl C; Dimitrakos T (IEEE, 2016)Unpredictability of cloud computing due to segregation of visibility and control between applications, data owners, and cloud providers increases tenants’ uncertainty when using cloud services. Adaptation techniques become ...
Sartor M; Orzes G; Di Mauro C; Ebrahimpour M; Nassimbeni G (2016)Social Accountability 8000 (SA8000) was one of the first auditable social standards aimed at promoting labor rights for workers around the world. This certification is currently considered the most important in the field ...