Browsing by Author "Ortiz, Antonio M."
Now showing 1 - 2 of 2
Results Per Page
Sort Options
Item Self-protecting multi-cloud applications(Institute of Electrical and Electronics Engineers Inc., 2015-12-03) Ortiz, Antonio M.; Rios, Erkuden; Mallouli, Wissam; Iturbe, Eider; De Oca, Edgardo Montes; CIBERSEC&DLTThe rise and variety of cloud services and their growing availability has enabled the creation of multi-cloud applications that take advantage of cloud service combinations. These applications need to avoid security breaches and preserve data integrity and user privacy in the whole service composition. The MUSA framework arises as a global solution to support the security of the whole multi-cloud application lifecycle by providing advanced monitoring and security assurance mechanisms in multi-cloud environments. The MUSA security assurance platform will be offered as Software as a Service and will include monitoring, enforcement, and notification services to make the multi-cloud applications more secure than ever, ensuring the satisfaction of all the involved actors.Item SLA-Driven Monitoring of Multi-cloud Application Components Using the MUSA Framework(Institute of Electrical and Electronics Engineers Inc., 2016-11-23) Rios, Erkuden; Mallouli, Wissam; Rak, Massimiliano; Casola, Valentina; Ortiz, Antonio M.; CIBERSEC&DLTThe applications that rely on the combined use of multiple independent clouds pose a challenge to the control of their security. The difficulty of this task resides on the lack of insight on the cloud providers security measures, plus the need to simultaneously monitor the behaviour of multipleindividual components deployed in different clouds. This paper presents the SLA-driven monitoring of multi-cloud application security compliance. In this approach, the application security levels, controls and metrics are specified at design time in the Service Level Agreement (SLA) creation process and continuously monitored at runtime once the application components are deployed over the multi-cloud. The security monitoring is based on the Montimage Monitoring Tool (MMT), that combines Deep Packet Inspection (DPI) and data mining techniques to collect and analyse measurements at both network and application component levels for a holistic assurance.