Self-adaptive authorisation in OpenStack cloud platform

DA SILVA, Carlos Da Silva, DINIZ, Thomás, CACHO, Nelio and LEMOS, Rogério de (2018). Self-adaptive authorisation in OpenStack cloud platform. Journal of Internet Services and Applications, 9 (19).

[img]
Preview
PDF
DaSilva-SelfAdaptiveAuthorisation(VoR).pdf - Published Version
Creative Commons Attribution.

Download (2MB) | Preview
Official URL: https://jisajournal.springeropen.com/articles/10.1...
Open Access URL: https://jisajournal.springeropen.com/track/pdf/10.... (Published version)
Link to published version:: https://doi.org/10.1186/s13174-018-0090-7
Related URLs:

    Abstract

    Although major advances have been made in protection of cloud platforms against malicious attacks, little has been done regarding the protection of these platforms against insider threats. This paper looks into this challenge by introducing self-adaptation as a mechanism to handle insider threats in cloud platforms, and this will be demonstrated in the context of OpenStack. OpenStack is a popular cloud platform that relies on Keystone, its identity management component, for controlling access to its resources. The use of self-adaptation for handling insider threats has been motivated by the fact that self-adaptation has been shown to be quite effective in dealing with uncertainty in a wide range of applications. Insider threats have become a major cause for concern since legitimate, though malicious, users might have access, in case of theft, to a large amount of information. The key contribution of this paper is the definition of an architectural solution that incorporates self-adaptation into OpenStack Keystone in order to handle insider threats. For that, we have identified and analysed several insider threats scenarios in the context of the OpenStack cloud platform, and have developed a prototype that was used for experimenting and evaluating the impact of these scenarios upon the self-adaptive authorisation system for the cloud platforms.

    Item Type: Article
    Uncontrolled Keywords: 08 Information and Computing Sciences
    Identification Number: https://doi.org/10.1186/s13174-018-0090-7
    SWORD Depositor: Symplectic Elements
    Depositing User: Symplectic Elements
    Date Deposited: 10 Dec 2019 11:16
    Last Modified: 10 Dec 2019 11:16
    URI: http://shura.shu.ac.uk/id/eprint/25228

    Actions (login required)

    View Item View Item

    Downloads

    Downloads per month over past year

    View more statistics