CMSec: A Vulnerability Prevention Tool for Supporting Migrations in Cloud Composite Services - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

CMSec: A Vulnerability Prevention Tool for Supporting Migrations in Cloud Composite Services

Résumé

The growing maturity of orchestration languages, such as the Topology and Orchestration Specification for Cloud Applications (TOSCA) language, and the continuous improvement of virtualization techniques contribute to the large-scale deployment of cloud composite services based on multiple resources that may be hosted over different cloud service providers. The resources composing these services may be subject to migrations, either live or offline, in order to cope with performance objectives, such as load balancing, latency minimization, and energy savings. However, these migrations may induce changes affecting the configurations of migrated resources. In particular, these changes may lead to vulnerabilities, that may compromise the security of resources, or even the security of the whole cloud service. This demonstration showcases a vulnerability prevention tool, called CMSec, for supporting the resource migrations of TOSCA-based cloud composite services by considering OVAL vulnerability descriptions together with verification techniques. Based on two main scenarios, we will expose how the CMSec tool is able to detect vulnerable configurations prior to resource migrations, and to suggest corrective operations for remediating them.
Fichier principal
Vignette du fichier
Demo_paper_CloudNet__Version_camera_ready_.pdf (240.91 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03886094 , version 1 (06-12-2022)
hal-03886094 , version 2 (09-12-2022)

Identifiants

  • HAL Id : hal-03886094 , version 1

Citer

Mohamed Oulaaffart, Rémi Badonnel, Olivier Festor. CMSec: A Vulnerability Prevention Tool for Supporting Migrations in Cloud Composite Services. IEEE International Conference on Cloud Networking (CloudNet), Nov 2022, Paris, France. ⟨hal-03886094v1⟩
42 Consultations
43 Téléchargements

Partager

Gmail Facebook X LinkedIn More