Skip to Main content Skip to Navigation
Conference papers

Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds

Abstract : As today’s cloud providers strive to attract customers with better services and less downtime in a highly competitive market, they increasingly rely on remote administrators including those from third party providers for fulfilling regular maintenance tasks. In such a scenario, the privileges granted for remote administrators to complete their assigned tasks may allow an attacker with stolen credentials of an administrator, or a dishonest remote administrator, to pose severe insider threats to both the cloud tenants and provider. In this paper, we take the first step towards understanding and mitigating such a threat. Specifically, we model the maintenance task assignments and their corresponding security impact due to privilege escalation. We then mitigate such impact through optimizing the task assignments with respect to given constraints. The simulation results demonstrate the effectiveness of our solution in various situations.
Document type :
Conference papers
Complete list of metadata

Cited literature [32 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Thursday, December 13, 2018 - 4:03:24 PM
Last modification on : Friday, November 22, 2019 - 2:52:02 PM
Long-term archiving on: : Thursday, March 14, 2019 - 4:10:19 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Nawaf Alhebaishi, Lingyu Wang, Sushil Jajodia, Anoop Singhal. Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds. 32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2018, Bergamo, Italy. pp.3-20, ⟨10.1007/978-3-319-95729-6_1⟩. ⟨hal-01954402⟩



Record views


Files downloads