Skip to Main content Skip to Navigation
New interface
Reports (Research report)

Building Safe PaaS Clouds: a Survey on Security in Multitenant Software Platforms

Abstract : This paper surveys the risks brought by multitenancy in software platforms, along with the most prominent solutions proposed to address them. A multitenant platform hosts and executes software from several users (tenants). The platform must ensure that no malicious or faulty code from any tenant can interfere with the normal execution of other users' code or with the platform itself. This security requirement is specially relevant in Platform-as-a-Service (PaaS) clouds. PaaS clouds offer an execution environment based on some software platform. Unless PaaS systems are deemed as safe environments users will be reluctant to trust them to run any relevant application. This requires to take into account how multitenancy is handled by the software platform used as the basis of the PaaS offer. This survey focuses on two technologies that are or will be the platform-of-choice in many PaaS clouds: Java and .NET. We describe the security mechanisms they provide, study their limitations as multitenant platforms and analyze the research works that try to solve those limitations. We include in this analysis some standard container technologies (such as Enterprise Java Beans) that can be used to standardize the hosting environment of PaaS clouds. Also we include a brief discussion of Operating Systems (OSs) traditional security capacities and why OSs are unlikely to be chosen as the basis of PaaS offers. Finally, we describe some research initiatives that reinforce security by monitoring the execution of untrusted code, whose results can be of interest in multitenant systems.
Document type :
Reports (Research report)
Complete list of metadata

Cited literature [4 references]  Display  Hide  Download
Contributor : Adrian Muresan Connect in order to contact the contributor
Submitted on : Friday, January 6, 2012 - 11:51:27 AM
Last modification on : Friday, November 18, 2022 - 9:25:31 AM
Long-term archiving on: : Monday, November 19, 2012 - 12:45:20 PM


Files produced by the author(s)


  • HAL Id : hal-00657306, version 1



Luis Rodero-Merino, Luis Vaquero, Eddy Caron, Frédéric Desprez, Adrian Muresan. Building Safe PaaS Clouds: a Survey on Security in Multitenant Software Platforms. [Research Report] RR-7838, INRIA. 2011, pp.31. ⟨hal-00657306⟩



Record views


Files downloads