A joint paper between IT Innovation and QinetiQ was presented today at the 3rd IEEE International Conference on Cloud Computing. The paper presents a Platform-as-a-Service infrastructure that combines semantic security risk management tools with dynamic web service policy frameworks to support the mitigation of security threats throughout the lifecycle of a service-oriented application deployed within the cloud.
The platform addresses the need to model security requirements, dynamically provision and configure security services and link operational security events to vulnerabilities and impact assessments at the business level. The platform has been evaluated using a collaborative engineering design scenario and a proof-of-concept deployed at a multi-tenant cloud as part of the UK CFMS project. The work is being further enhanced in the SERSCIS project.
Boniface, M., Surridge, M., Hall-May, M., Bertram, S. and Briscombe, N. (2010) On-Demand Dynamic Security for Risk-Based Secure Collaboration in Clouds. In: IEEE International Conference on Cloud Computing 2010, July 2010, Miami, FL, USA.
Recent Comments