Maryland Shared Open Access Repository (USMAI Consortium) · 2009 · 99 citations · 3 references
ComputingCloud ComputingComputer ScienceCloud InfrastructureCloud SecurityComputer SecurityCloud Computing ManagementCloud Infrastructure DesignCloud Resource ManagementCloud Risk ManagementCloud VirtualizationVirtualization SecurityCloud Security Risk ManagementContinuous MonitoringDatacenter VirtualizationSecure Cloud ArchitectureService ProviderSituational Awareness SystemsVirtual Infrastructure ManagementVirtual Infrastructure Monitoring
Cloud computing places an organization’s sensitive data in the control of a third party, introducing a significant level of risk on the privacy and security of the data. We propose a new management and security model for cloud computing called the Private Virtual Infrastructure (PVI) that shares the responsibility of security in cloud computing between the service provider and client, decreasing the risk exposure to both. The PVI datacenter is under control of the information owner while the cloud fabric is under control of the service provider. A cloud Locator Bot pre-measures the cloud for security properties, securely provisions the datacenter in the cloud, and provides situational awareness through continuous monitoring of the cloud security. PVI and Locator Bot provide the tools that organizations require to maintain control of their information in the cloud and realize the benefits of cloud computing.
3
Above the Clouds: A Berkeley View of Cloud Computing
Michael Armbrust, Armando Fox, Rean Griffith et al. · UC Berkeley · 2009 · 5.7K citations
vTPM: virtualizing the trusted platform module
Stefan Berger, Ramón Cáceres, Kenneth Goldman et al. · 2006 · 519 citations
Stefan Berger, Ramón Cáceres, Dimitrios Pendarakis et al. · ACM SIGOPS Operating Systems Review · 2008 · 141 citations