Skip to Main content Skip to Navigation
Conference papers

Expression and Enforcement of Security Policy for Virtual Resource Allocation in IaaS Cloud

yanhuang Li 1, 2, 3 Nora Cuppens-Boulahia 1, 2 Jean-Michel Crom 3 Frédéric Cuppens 1, 2 Vincent Frey 3 
Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance
Abstract : Many research works focus on the adoption of cloud infrastructure as a service (IaaS), where virtual machines (VM) are deployed on multiple cloud service providers (CSP). In terms of virtual resource allocation driven by security requirements, most of proposals take the aspect of cloud service customer (CSC) into account but do not address such requirements from CSP. Besides, it is a shared understanding that using a formal policy model to support the expression of security requirements can drastically ease the cloud resource management and conflict resolution. To address these theoretical limitations, our work is based on a formal model that applies organization-based access control (OrBAC) policy to IaaS resource allocation. In this paper, we first integrate the attribute-based security requirements in service level agreement (SLA) contract. After transformation, the security requirements are expressed by OrBAC rules and these rules are considered together with other non-security demands during the enforcement of resource allocation. We have implemented a prototype for VM scheduling in OpenStack-based multi-cloud environment and evaluated its performance.
Document type :
Conference papers
Complete list of metadata

Cited literature [24 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Wednesday, September 21, 2016 - 10:53:28 AM
Last modification on : Monday, March 14, 2022 - 11:08:13 AM
Long-term archiving on: : Thursday, December 22, 2016 - 1:08:42 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



yanhuang Li, Nora Cuppens-Boulahia, Jean-Michel Crom, Frédéric Cuppens, Vincent Frey. Expression and Enforcement of Security Policy for Virtual Resource Allocation in IaaS Cloud. 31st IFIP International Information Security and Privacy Conference (SEC), May 2016, Ghent, Belgium. pp.105-118, ⟨10.1007/978-3-319-33630-5_8⟩. ⟨hal-01369546⟩



Record views


Files downloads