英语论文网

Reputation Isolation (Fate-sharing). Cloud stakeholders' activities and behaviors affect each other's reputation. For instance, in Amazon EC2's IP addresses blacklisting incident, if a monitoring agent was attached to each VM instances and a correlation system existed on the underlying layer, the cloud provider could differentiate instances that had activities suspicious to spamming among others.

Incident Handling. Incidents happen in different layers of the cloud model and each layer may be operated by different authorities. Handling an incident needs not only cooperation among all authorities, but also policies and procedures for mitigating the incident. These policies and procedures should be introduced in the security monitoring solution. Stakeholders and authorities will apply these guidelines to handle the incident in the best fashion and decrease the degradation of services. Defining policies and procedures is the challenging part. As an example, a cloud customer should have access to log files which contain any traces of the incident. However, privacy of other customers must be protected. Additionally, investigation of one cloud customer should not affect the performance of other customers. One real case is about the FBI raid on two data centers in Texas. In this investigation, they powered off the whole data center.

Data lock-in. In case of a major security breach in the cloud infrastructure, customers should be able to migrate to another cloud infrastructure smoothly. A complete monitoring solution should check the compatibility of cloud service interfaces with standard interface to make sure that the migration will happen as it supposed to be.

Data deletion. File deletion has been a concern in all distributed systems, but it became more challenging in the cloud computing. Monitoring mechanisms, which have been used to track data location, are also useful in the file deletion challenge. In other words, same marking and tracking mechanisms can be used for hierarchical multi-label data marking. Therefore, cloud providers can keep track of data among all backup files and distributed storage.

Mutual audit-ability. Stakeholders need to be sure of each other's trustworthiness. A collaborative monitoring mechanism in each cloud layer is crucial for this purpose. These collaborative mechanisms should communicate through a common interface among layers.

Evaluation of Mechanisms againstThreats

Considering extracted threat specifications and new security challenges, we try to find weaknesses in existing mechanisms. By identifying weaknesses and their features, it becomes possible to find proper monitoring techniques in order to fulfill security monitoring requirements in the cloud computing model. Commercial clouds are one of the types of closed environment. On the other hand, monitoring mechanisms should be changed in order to fulfill requirements in the new model. Lack of ecosystems for monitoring solution providers is a major obstacle in the way to develop new solutions for new challenges.

New concepts behind the cloud computing impose constrains on monitoring mechanisms. Part of these constrains are not applicable to existing monitoring mechanisms. On-demand acc本论文由英语论文网提供整理，提供论文代写，英语论文代写，代写论文，代写英语论文，代写留学生论文，代写英文论文，留学生论文代写相关核心关键词搜索。