Skip to Main content Skip to Navigation

Security for Virtualized Distributed Systems : from Modelization to Deployment

Arnaud Lefray 1, 2 
Abstract : This Thesis deals with security for virtualized distributed environments such as Clouds. In these environments, a client can access resources or services (compute, storage, etc.) on-demand without prior knowledge of the infrastructure underneath. These services are low-cost due to the mutualization of resources. As a result, the clients share a common infrastructure. However, the concentration of businesses and critical data makes Clouds more attractive for malicious users, especially when considering new attack vectors between tenants.Nowadays, Cloud providers offer default security or security by design which does not fit tenants' custom needs. This gap allows for multiple attacks (data thieft, malicious usage, etc.)In this Thesis, we propose a user-centric approach where a tenant models both its security needs as high-level properties and its virtualized application. These security objectives are based on a new logic dedicated to expressing system-based information flow properties. Then, we propose security-aware algorithm to automatically deploy the application and enforce the security properties. The enforcement can be realized by taking into account shared resources during placement decision and/or through the configuration of existing security mechanisms.
Complete list of metadata

Cited literature [139 references]  Display  Hide  Download
Contributor : ABES STAR :  Contact
Submitted on : Tuesday, November 17, 2015 - 12:22:09 PM
Last modification on : Thursday, May 12, 2022 - 5:08:02 PM
Long-term archiving on: : Thursday, February 18, 2016 - 2:10:51 PM


Version validated by the jury (STAR)


  • HAL Id : tel-01229874, version 1


Arnaud Lefray. Security for Virtualized Distributed Systems : from Modelization to Deployment. Modeling and Simulation. Ecole normale supérieure de lyon - ENS LYON, 2015. English. ⟨NNT : 2015ENSL1032⟩. ⟨tel-01229874⟩



Record views


Files downloads