Identity and Access Management as Security-as-a-Service from Clouds

Deepak Sharma, C. A. Dhote, Manish M. Potey

Procedia Computer Science · 2016 · 62 citations · 3 references

DOIFull text

Open access

Concepts

TL;DR

Security‑as‑a‑service delivers security via cloud, and Identity and Access Management (IAM) in this model handles authentication, authorization, identity administration, and audit, ensuring correct access to protected cloud resources and providing the benefits of SECaaS. The study discusses relevant standards and technologies for secure cloud user access. A proof‑of‑concept IAM‑as‑a‑service was implemented and evaluated.

Abstract

In Security-as-a-service model the focus is on security delivered as cloud services; i.e. security provided through the cloud instead of on premise security solutions. Identity and Access Management (IAM) focuses on authentication, authorization, administration of Identities and audit. Its primary concern is verification of identity of entity and grating correct level of access for resources which are protected in the cloud environment. The IAM implemented as the cloud service can benefit the user with all the advantages offered by Security-as-a-service (SECaaS). We have implemented a proof-of-concept (POC) of IAM-aaS which is also evaluated. The relevant standards and technologies are also discussed for providing secure access to cloud users.

References

3