cloud_at_work:work_programme:work_programme_2010:security_policies

A Generic Framework for Enforcing Security Policies

  • PUB Master Student: Cristina Basescu (INRIA Master Internship)
  • PUB Advisor: Catalin Leordeanu, Alexandru Costan
  • INRIA Advisor: Alexandra Carpen-Amarie

Description

Recently there is a great need to provide an adequate security level in Cloud Environments which are vulnerable to various attacks. Denial of Service attacks and other malicious activities, especially when focusing on the data management components of the systems, may greatly endanger the Clouds and also degrade their performance. This project proposed a generic security management framework allowing providers of Cloud data management systems to define and enforce complex security policies. This novel security framework was designed to detect and stop a large array of attacks through an expressive policy description language. We show that we can achieve this goal of providing a secure environment for data management without a significant overhead through the integration with the BlobSeer data management system and complex attack scenarios.


Page Tools