Name
Title | ||
|---|---|---|
Cloud Services Gateway: A Tool for Exposing Private Services to the Public Cloud with Fine-grained Control |
Abstract | ||
|---|---|---|
By enabling users to allocate computing resources on demand, cheaply, and in an elastic manner, Cloud Computing has made large computation resources available to small and medium size organizations. However, using the Cloud requires users to place their computations, data, or both in a shared data center own by an outsider. This sharing has raised many security concerns. Such concerns are much apparent with use cases like health informatics, where the security of the information is critical and imposed by government regulations. We propose a hybrid approach to solve this problem, where only computations are moved to the public domains while keeping the data within the private network, and computations may access data through a set of services that expose data following the Principle of Least Privilege. Such architectures will, however, require computations in the cloud to connect to the local network that holds the data, and the obvious solution: that is opening up ports in the organizational firewall could potentially create security loopholes. As an alternative, we propose Cloud Services Gateway (CSG), which enable users to selectively expose their private services that reside inside a firewall to outside clients while maintaining fine grained control. This paper motivates hybrid Cloud architectures and presents the architecture and design decisions of Cloud Services Gateway. |
Year | DOI | Venue |
|---|---|---|
2012 | 10.1109/IPDPSW.2012.276 | Parallel and Distributed Processing Symposium Workshops & PhD Forum |
Keywords | Field | DocType |
public cloud,fine-grained control,cloud computing,local network,shared data,security concern,security loophole,cloud services gateway,hybrid cloud architecture,exposing private services,hybrid approach,organizational firewall,private network,security,servers,logic gates,computer architecture,principle of least privilege,information security,software architecture,resource allocation | Computer security,Computer science,Computer network,Cloud computing security,Distributed computing,Services computing,Principle of least privilege,Parallel computing,Default gateway,Data center,Cloud testing,Single-chip Cloud Computer,Cloud computing | Conference |
ISSN | ISBN | Citations |
2164-7062 | 978-1-4673-0974-5 | 1 |
PageRank | References | Authors |
0.36 | 5 | 6 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Srinath Perera | 1 | 332 | 32.23 |
| Rajika Kumarasiri | 2 | 13 | 1.32 |
| Supun Kamburugamuva | 3 | 1 | 0.36 |
| Senaka Fernando | 4 | 20 | 4.36 |
| Sanjiva Weerawarana | 5 | 1339 | 146.44 |
| Paul Fremantle | 6 | 169 | 14.83 |