Skip to Main content Skip to Navigation
Conference papers

Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds

Abstract : As today’s cloud providers strive to attract customers with better services and less downtime in a highly competitive market, they increasingly rely on remote administrators including those from third party providers for fulfilling regular maintenance tasks. In such a scenario, the privileges granted for remote administrators to complete their assigned tasks may allow an attacker with stolen credentials of an administrator, or a dishonest remote administrator, to pose severe insider threats to both the cloud tenants and provider. In this paper, we take the first step towards understanding and mitigating such a threat. Specifically, we model the maintenance task assignments and their corresponding security impact due to privilege escalation. We then mitigate such impact through optimizing the task assignments with respect to given constraints. The simulation results demonstrate the effectiveness of our solution in various situations.
Document type :
Conference papers
Complete list of metadata

Cited literature [32 references]  Display  Hide  Download

https://hal.inria.fr/hal-01954402
Contributor : Hal Ifip <>
Submitted on : Thursday, December 13, 2018 - 4:03:24 PM
Last modification on : Friday, November 22, 2019 - 2:52:02 PM
Long-term archiving on: : Thursday, March 14, 2019 - 4:10:19 PM

File

470961_1_En_1_Chapter.pdf
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Nawaf Alhebaishi, Lingyu Wang, Sushil Jajodia, Anoop Singhal. Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds. 32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2018, Bergamo, Italy. pp.3-20, ⟨10.1007/978-3-319-95729-6_1⟩. ⟨hal-01954402⟩

Share

Metrics

Record views

102

Files downloads

15