A scalable and dynamic application-level secure communication framework for inter-cloud services

Ali Sajjad, Muttukrishnan Rajarajan, Andrea Zisman, Theo Dimitrakos
2015 Future generations computer systems  
Most of the current cloud computing platforms offer Infrastructure as a Service (IaaS) model, which aims to provision basic virtualized computing resources as on-demand and dynamic services. Nevertheless, a single cloud does not have limitless resources to offer to its users, hence the notion of an Inter-Cloud environment where a cloud can use the infrastructure resources of other clouds. However, there is no common framework in existence that allows the service owners to seamlessly provision
more » ... en some basic services across multiple cloud service providers, albeit not due to any inherent incompatibility or proprietary nature of the foundation technologies on which these cloud platforms is built. In this paper we present a novel solution which aims to cover a gap in a subsection of this problem domain. Our solution offers a security architecture that enables service owners to provision a dynamic and service-oriented secure virtual private network on top of multiple cloud IaaS providers. It does this by leveraging the scalability, robustness and flexibility of peer-to-peer overlay techniques to eliminate the manual configuration, key management and peer churn problems encountered in setting up the secure communication channels dynamically, between different components of a typical service that is deployed on multiple clouds. We present the implementation details of our solution as well as experimental results carried out on two commercial clouds. Ali Sajjad received the BE degree from National University of Sciences and Technology, Pakistan, in 2003 and ME degree from Kyung Hee University, South Korea, in 2006. He is currently a PhD student in the School of Engineering and Mathematical Sciences at City University London, UK. His research interests are in the areas of applied cryptography and network security, with a current focus on secure communication and data services in cloud computing.
doi:10.1016/j.future.2015.01.018 fatcat:fhvvi63rdnd4zo7ydoqkurluuu