TWC: Frontier: Collaborative: Rethinking Security in the Era of Cloud Computing

迁移到云计算至少有两个关键特征，为租户服务的计算机安全带来了重大飞跃的机会。 首先，计算云提供了一个通用的软件、硬件和管理基础，用于推出交叉服务环境，这些服务环境一直抵制以一次一个服务的方式进行增量部署。 其次，计算云为提供商提供了一个广阔的视野，可以看到前所未有的租户服务多样性。 这个研究项目利用这些功能来开发新的方法来解决计算机安全中的一系列基本问题。 通过与行业利益相关者召开Cloud Security Horizons峰会，该项目进一步寻求为云计算的行业方向做出贡献，并获得他们的信息。该项目解决的特定长期安全挑战包括安全传输，授权，用户和软件身份验证，安全监控和事件分析。 此外，由于现代云没有足够的可扩展性来支持设想的功能，该项目正在构建云软件平台，使这项研究在实践中取得成果所需的灵活性，可扩展性和安全性。

There are at least two key features of the move to cloud computing that introduce the opportunity for significant leaps forward in computer security for tenant services. First, a compute cloud provides a common software, hardware and management basis for rolling out cross-cutting services en masse that have resisted incremental deployment in a one-service-at-a-time fashion. Second, compute clouds offer providers a broad view of activity across an unprecedented diversity of tenant services. This research project leverages these features to develop new approaches to a wide array of fundamental problems in computer security. By convening Cloud Security Horizons summits with industry stakeholders, this project further seeks to both contribute to industry directions in cloud computing and to be informed by them.Particular longstanding security challenges addressed in this project include secure transport, authorization, user and software authentication, security monitoring, and incident analysis. Moreover, since modern clouds are not sufficiently extensible to support the envisioned capabilities, this project is constructing cloud software platforms that enable the flexibility, extensibility and security needed for this research to come to fruition in practice.