Skip to Main content Skip to Navigation
Conference papers

Attack tolerance for services-based applications in the cloud

Abstract : Web services allow the communication of heterogeneous systems and are particularly suitable for building cloud applications. Furthermore, such applications must verify some static properties, but also tolerate attacks at runtime to ensure service continuity. To achieve this, in this paper we propose an attack tolerance framework that includes the risks of attacks. After describing the foundation of this framework, we propose expressing cloud applications as choreographies of services that take into account their distributed nature. Then, we extended the framework to introduce choreography verification by incorporating monitoring (passive tests) and reaction mechanisms. These techniques are validated through relevant experiments. As a result, our framework ensures the required attack tolerance of such cloud applications.
Complete list of metadata

Cited literature [19 references]  Display  Hide  Download

https://hal.inria.fr/hal-02526356
Contributor : Hal Ifip <>
Submitted on : Tuesday, March 31, 2020 - 3:14:25 PM
Last modification on : Friday, October 9, 2020 - 8:38:12 AM

File

 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2022-01-01

Please log in to resquest access to the document

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Georges Ouffoué, Fatiha Zaïdi, Ana Cavalli. Attack tolerance for services-based applications in the cloud. ICTSS 2019: 31st IFIP International Conference on Testing Software and Systems, Oct 2019, Paris, France. pp.242-258, ⟨10.1007/978-3-030-31280-0_15⟩. ⟨hal-02526356⟩

Share

Metrics

Record views

118