Paper Details

The infrastructure cloud (IaaS) service model offers improved resource flexibility and availability, wheretenants – insulated from the minutiae of hardware maintenance – rent computing resources to deploy and operatecomplex systems. Large-scale services running on IaaS platforms demonstrate the viability of this model; nevertheless,many organizations operating on sensitive data avoid migrating operations to IaaS platforms due to security concerns.In this paper, we describe a framework for data and operation security in IaaS, consisting of protocols for a trustedlaunch of virtual machines and domain-based storage protection. We continue with an extensive theoretical analysis withproofs about protocol resistance against attacks in the defined threat model. The protocols allow trust to be establishedby remotely attesting host platform configuration prior to launching guest virtual machines and ensure confidentiality ofdata in remote storage, with encryption keys maintained outside of the IaaS domain. Presented experimental resultsdemonstrate the validity and efficiency of the proposed protocols. The framework prototype was implemented on a testbed operating a public electronic health record system, showing that the proposed protocols can be integrated intoexisting cloud environments.

HATTARKI POOJA, PREETI, “Providing User Security Guarantee in Public Infrastructure clouds”, International Journal of Advance Engineering and Research Development (IJAERD), Vol. 5, Issue 2, pp. 491-493, February 2018.