Bicaku, Ani and Balaban, Silvia and Tauber, Markus and Hudic, Aleksandre and Mauthe, Andreas Ulrich and Hutchison, David (2016) Harmonized monitoring for high assurance clouds. In: 2016 IEEE International Conference on Cloud Engineering Workshop (IC2EW) :. IEEE, pp. 118-123. ISBN 9781509019618
Monitoring_Paper_New_Template.pdf - Accepted Version
Available under License Creative Commons Attribution.
Download (1MB)
Abstract
Due to a lack of transparency in cloud based services well-defined security levels cannot be assured within current cloud infrastructures. Hence sectors with stringent security requirements hesitate to migrate their services to the cloud. This applies especially when considering services where high security requirements are combined with legal constraints. To tackle this challenge this paper presents an extension to our existing work on assurance methodologies in cloud based environments by investigating how current state of the art monitoring solutions can be used to support assurance throughout the entire infrastructure. A case study is used in which monitoring information representing a set of relevant security properties is being collected. As result, we propose that a combination of existing tools should be used to harmonize existing monitoring artifacts. We describe and evaluate an Evidence Gathering Mechanism (EGM) that provides this harmonization and show how this can support assurance. This can also underpin legal proceedings from an evidence law perspective.