TWC: Frontier: Collaborative: Rethinking Security in the Era of Cloud Computing

向云计算的转变至少有两个关键特征，它们为租户服务的计算机安全带来了重大飞跃的机会。首先，计算云提供了一个通用的软件、硬件和管理基础，用于集体推出横向服务，而这些服务一直不愿以一次一项服务的方式进行增量部署。其次，计算云为提供商提供了前所未有的多样化租户服务活动的广泛视角。这项研究项目利用这些特征来开发新的方法来解决计算机安全中的一系列基本问题。通过与行业利益相关方召开云安全地平线峰会，该项目进一步寻求为云计算行业方向做出贡献，并从他们那里获得信息。该项目解决的长期安全挑战包括安全传输、授权、用户和软件身份验证、安全监控和事件分析。此外，由于现代云的可扩展性不足以支持设想的功能，该项目正在构建云软件平台，以使这项研究在实践中实现所需的灵活性、可扩展性和安全性。

There are at least two key features of the move to cloud computing that introduce the opportunity for significant leaps forward in computer security for tenant services. First, a compute cloud provides a common software, hardware and management basis for rolling out cross-cutting services en masse that have resisted incremental deployment in a one-service-at-a-time fashion. Second, compute clouds offer providers a broad view of activity across an unprecedented diversity of tenant services. This research project leverages these features to develop new approaches to a wide array of fundamental problems in computer security. By convening Cloud Security Horizons summits with industry stakeholders, this project further seeks to both contribute to industry directions in cloud computing and to be informed by them.Particular longstanding security challenges addressed in this project include secure transport, authorization, user and software authentication, security monitoring, and incident analysis. Moreover, since modern clouds are not sufficiently extensible to support the envisioned capabilities, this project is constructing cloud software platforms that enable the flexibility, extensibility and security needed for this research to come to fruition in practice.