Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Implementing trust in cloud infrastructures

: Neisse, Ricardo; Holling, Dominik; Pretschner, Alexander


IEEE Computer Society; Association for Computing Machinery -ACM-:
11th IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing, CCGrid 2011. Proceedings : 23-26 May 2011, Newport Beach, CA
Los Alamitos, Calif.: IEEE Computer Society Press, 2011
ISBN: 978-0-7695-4395-6
ISBN: 978-1-4577-0129-0
International Symposium on Cluster, Cloud and Grid Computing (CCGrid) <11, 2011, Newport Beach/Calif.>
Conference Paper
Fraunhofer IESE ()
cloud computing; security; trusted computing

Today's cloud computing infrastructures usually require customers who transfer data into the cloud to trust the providers of the cloud infrastructure. Not every customer is willing to grant this trust without justification. It should be possible to detect that at least the configuration of the cloud infrastructure -- as provided in the form of a hyper visor and administrative domain software -- has not been changed without the customer's consent. We present a system that enables periodical and necessity-driven integrity measurements and remote attestations of vital parts of cloud computing infrastructures. Building on the analysis of several relevant attack scenarios, our system is implemented on top of the Xen Cloud Platform and makes use of trusted computing technology to provide security guarantees. We evaluate both security and performance of this system. We show how our system attests the integrity of a cloud infrastructure and detects all changes performed by system administrators in a typical software configuration, even in the presence of a simulated denial-of-service attack.