中国IDC产业年度大典云计算及应用安全上ppt课件.ppt

《中国IDC产业年度大典云计算及应用安全上ppt课件.ppt》由会员分享，可在线阅读，更多相关《中国IDC产业年度大典云计算及应用安全上ppt课件.ppt（12页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、Computer ScienceAssuring Runtime Service Integrity in Cloud Systems 1/22Ting YuDepartment of Computer ScienceNorth Carolina State UniversityComputer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Cloud Computing Internet-based computingShared resources provided on demandBasic computing r

2、esourcesVirtual computing environment:CPU,memory,storage,networkingComplicated servicesSoftware as a service(SaaS),Service-oriented architecture(SOA)High level services:data processing,data management,auditing,web services,2Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Multi-Te

3、nant Cloud SystemsPlatform for Software as a Service(SaaS)3/22P3P2P1P2P3P3P1UserPortalf1f2f3f4f1f2f3Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Multi-Tenant Cloud Systems(cont.)BenefitsMore powerful services in a cost-effective wayApplicationsDataflow processing huge amounts

4、of datareal-time processing and analysisEwork traffic monitoring,sensor data analysis,scientific data processingE-commerce4/22 4Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Dataflow Processing ApplicationsDataflowData processing componentData tuplediService provider5/22P3P2P1P

5、2P3P3P1UserPortalf1f2f3f4f1f2f3di,f1(di),f2(f1(di),f3(f2(f1(di),f3(f2(f1(di),di,5Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Service Integrity Attack6/22P3P2P1P2P3P3P1UserPortalf1f2f3f4f1f2f3di,f1(di),f0(f1(di),f3(f0(f1(di),f3(f0(f1(di),di,Problems with multi-tenant cloud sys

6、temsService providers come from different security domainsNot all data processing components are trustworthyComputer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Security ConcernsCommunication securityInformation passed through the InternetEasy to addressIsolationInterference among ten

7、antsConfidentialityNot trust third party to access dataIntegrityNot trust the result of servicesFocus of this work7/22Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Previous WorkDistributed dataflow processingfocuses on resource and performance management issues.usually assumes

8、that all data processing components are trustworthyTrust management in distributed systemsDistributed messaging systems Haeberlen,et al.SOSP 2007Pub-sub overlay Srivatsa,et al.,CCS 2005Virtualized datacenters Berger,et al.,SIGOPS 2008None of them addressed secure and scalable dataflow processing in

9、multi-tenant cloud systems8/22 8Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Previous Work(cont.)Byzantine fault-tolerance in Wide area networks Amir,et al.,DSN 2006Generally has scalability issuesSecurity in SOAWS-Security v1.1 Oasis,2006Focuses on integrity and confidentiali

10、ty of web service messages through encryption and authenticationAttacks can go beyond messaging security9/22 9Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Challenges10/22Cannot install special hardware or software on third-party service providersRequired by existing hardware a

11、nd software based attestation techniques Scalable runtime integrity assuranceComputer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么Our FocusPractical runtime service integrity assurance for large-scale multi-tenant cloud systems without assuming a trusted entity at third-party service

12、providers Without requiring application modifications11/2211Computer Science在日常生活中，随处都可以看到浪费粮食的现象。也许你并未意识到自己在浪费，也许你认为浪费这一点点算不了什么AssumptionsAssumptionsThird-party component providers could be maliciousThe portal and users are trustedPKI is deployed in advanceFor any service functions,#of good components#of bad components12/2212