Market‐inspired framework for securing assets in cloud computing environments. (7th June 2022)

• Record Type: Journal Article
• Authors: Tziakouris, Giannis; Mera‐Gómez, Carlos; Ramírez, Francisco; Bahsoon, Rami; Buyya, Rajkumar
• Is Part Of: Software, practice & experience. Volume 52:Number 9(2022)
• Page Start: 2005
• Page End: 2025
• Publication Date: 2022-06-07
• Subjects: assets -- cloud computing -- market‐based -- security -- self‐adaptation; Computer software -- Periodicals; Computer programming -- Periodicals; Computer programs -- Periodicals; 005.3
• DOI: 10.1002/spe.3113
• Languages: English
• ISSNs: 0038-0644

Abstract

Abstract: Self‐adaptive security methods have been extensively leveraged for securing software systems and users from runtime threats in online and elastic environments, such as the cloud. The existing solutions treat security as an aggregated quality by enforcing "one service for all" without considering the explicit security requirements of each asset or the costs associated with security. Dealing with the security of assets in ultra‐large environments calls for rethinking the way we select and compose services—considering not only the services but the underlying supporting computational resources in the process. We motivate the need for an asset‐centric, self‐adaptive security framework that selects and allocates services and underlying resources in the cloud. The solution leverages learning algorithms and market‐inspired approaches to dynamically manage changes in the runtime security goals/requirements of assets with the provision of suitable services and resources, while catering for monetary and computational constraints. The proposed framework aims to inform the self‐adaptive security efforts of security researchers and practitioners operating in dynamic large‐scale environments, such as the Cloud. To illustrate the utility of the proposed framework it is evaluated using simulation on an application based scenario, involving cloud‐based storage and security services.