Conference Papers Year : 2022

CMSec: A Vulnerability Prevention Tool for Supporting Migrations in Cloud Composite Services

Abstract

The growing maturity of orchestration languages, such as the Topology and Orchestration Specification for Cloud Applications (TOSCA) language, and the continuous improvement of virtualization techniques contribute to the large-scale deployment of cloud composite services based on multiple resources that may be hosted over different cloud service providers. The resources composing these services may be subject to migrations, either live or offline, in order to cope with performance objectives, such as load balancing, latency minimization, and energy savings. However, these migrations may induce changes affecting the configurations of migrated resources. In particular, these changes may lead to vulnerabilities, that may compromise the security of resources, or even the security of the whole cloud service. This demonstration showcases a vulnerability prevention tool, called CMSec, for supporting the resource migrations of TOSCA-based cloud composite services by considering OVAL vulnerability descriptions together with verification techniques. Based on two main scenarios, we will expose how the CMSec tool is able to detect vulnerable configurations prior to resource migrations, and to suggest corrective operations for remediating them.
Fichier principal
Vignette du fichier
Demo_paper_CloudNet__Version_camera_ready.pdf (241.17 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03886094 , version 1 (06-12-2022)
hal-03886094 , version 2 (09-12-2022)

Identifiers

  • HAL Id : hal-03886094 , version 2

Cite

Mohamed Oulaaffart, Rémi Badonnel, Olivier Festor. CMSec: A Vulnerability Prevention Tool for Supporting Migrations in Cloud Composite Services. CloudNet 2022 - IEEE International Conference on Cloud Networking, Nov 2022, Paris, France. ⟨hal-03886094v2⟩
75 View
88 Download

Share

More