Software Architectures for Self-protection in IaaS Clouds
Software Architectures for Self-protection in IaaS Clouds
复制标题
IaaS 云中自我保护的软件架构
DOI：
10.1007/978-3-319-47474-8_21
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Samuel Kounev
中科院分区：
文献类型：
--
作者：
K. R. Jayaram;Aleksandar Milenkoski;Samuel Kounev
在本章中，我们将重点介绍IaaS云中自我保护的软件体系结构。IaaS云，尤其是混合云正变得越来越流行，因为开发人员和企业需要动态增加/减少计算资源的使用，以快速适应市场力量和客户需求，降低成本，并提高容错能力。然而，企业采用公共IaaS和混合云的速度慢于预期，因为当前的混合云基础架构没有提供可扩展的高效机制来防止软件篡改和配置错误，并确保执行混合应用程序工作负载的软件堆栈的可信性和完整性；或者通过确保远程数据和计算不会跨越指定的地理边界来执行政府隐私和审计法规。我们讨论了在IaaS基础设施中集成入侵检测系统的最新研究，以及基于硬件的完整性验证和地理围栏，以解决上述问题。
In this chapter, we focus on software architectures for self-protection in IaaS clouds. IaaS clouds, especially hybrid clouds, are becoming increasingly popular because of the need for developers and enterprises to dynamically increase/decrease their use of computing resources to adapt quickly to market forces and customer demands, reduce costs, and increase fault tolerance. However, the adoption of public IaaS and hybrid clouds by enterprises is slower than expected because the current hybrid cloud infrastructures do not provide scalable and efficient mechanisms to prevent software tampering and configuration errors and ensure the trustworthiness and integrity of the software stack executing a hybrid application workload; or to enforce governmental privacy and audit regulations by ensuring that remote data and computation do not cross specified geographic boundaries. We discuss the recent research on integrating intrusion detection systems in IaaS infrastructures, as well as hardware-rooted integrity verification and geographic fencing to address the concerns outlined above.
适用于服务器平台的英特尔® 可信执行技术
DOI：
--
发表时间：
2013
期刊：
Apress
影响因子：
--
作者：
William Futral;James Greene
通讯作者：
James Greene