CSR: Small: Cloud Security on Demand

云计算提供了许多好处，包括便利、整合、兼容性和降低成本。然而，安全性是一个主要问题，因为云资源是与其他可能敌对的用户共享的。本研究的目标是为按需安全定义一个框架：云客户可以请求他们需要的安全，云提供商可以将这些安全请求映射到适当的安全服务器。由于客户有不同的安全需求，因此研究了一系列威胁模型以及具有不同安全功能的服务器。研究贡献包括(1)测量云服务器安全功能的新策略，以及(2)收集服务器执行客户请求的安全策略的运行时信任证据的新软硬件机制。(3)设计用于收集和报告服务器安全功能的安全协议给云管理软件，以及(4)使用模型检查和其他工具验证这些协议的硬件-软件安全验证方法。(5)云服务器的新型可操作模式？可以与客户请求匹配的安全属性由新的信任监视和策略实施模块实现。(6)设计了虚拟机安全迁移的硬件机制和迁移协议，以提高云安全性。这项工作的广泛影响包括为客户提供更大的云计算安全性，允许云提供商使用不同的安全服务器架构来区分其产品的安全配置，支持定制和可验证安全性的规范和配置，并为调查云环境中的安全硬件和软件架构提供研究平台。

Cloud computing provides many benefits including convenience, consolidation, compatibility, and cost-reduction. However, security is a major concern, since cloud resources are shared with other users who may be adversarial. The goal of this research is to define a framework for security-on-demand: cloud customers can request the security they need and cloud providers can map these security requests to the appropriate secure servers. Since customers have different security needs, a range of threat models is explored together with servers with different security capabilities. Research contributions include (1) new strategies for measuring cloud server security capabilities, and (2) new hardware-software mechanisms for collecting runtime trust evidence that a server is enforcing a customer's requested security policy. (3) Secure protocols are designed for collecting and reporting server security capabilities to cloud management software, as well as (4) a hardware-software security verification methodology to verify these protocols, using model checking and other tools. (5) Novel actionable models of cloud servers? security properties that can be matched to customers' requests are implemented by new trust monitoring and policy enforcement modules. Also, (6) hardware mechanisms and migration protocols for secure Virtual Machine migration to improve cloud security are designed. The broader impact of this work includes providing greater security in cloud computing for customers, allowing cloud providers to differentiate their offerings with security provisioning using different secure server architectures, enabling the specification and provisioning of customized and verifiable security, and providing a research platform for investigating secure hardware and software architecture in a cloud environment.