Skip to Main content Skip to Navigation
Theses

Security for Virtualized Distributed Systems : from Modelization to Deployment

Arnaud Lefray 1, 2
Abstract : This Thesis deals with security for virtualized distributed environments such as Clouds. In these environments, a client can access resources or services (compute, storage, etc.) on-demand without prior knowledge of the infrastructure underneath. These services are low-cost due to the mutualization of resources. As a result, the clients share a common infrastructure. However, the concentration of businesses and critical data makes Clouds more attractive for malicious users, especially when considering new attack vectors between tenants.Nowadays, Cloud providers offer default security or security by design which does not fit tenants' custom needs. This gap allows for multiple attacks (data thieft, malicious usage, etc.)In this Thesis, we propose a user-centric approach where a tenant models both its security needs as high-level properties and its virtualized application. These security objectives are based on a new logic dedicated to expressing system-based information flow properties. Then, we propose security-aware algorithm to automatically deploy the application and enforce the security properties. The enforcement can be realized by taking into account shared resources during placement decision and/or through the configuration of existing security mechanisms.
Complete list of metadatas

Cited literature [139 references]  Display  Hide  Download

https://tel.archives-ouvertes.fr/tel-01229874
Contributor : Abes Star :  Contact
Submitted on : Tuesday, November 17, 2015 - 12:22:09 PM
Last modification on : Monday, May 4, 2020 - 11:40:07 AM
Long-term archiving on: : Thursday, February 18, 2016 - 2:10:51 PM

File

LEFRAY_Arnaud_2015ENSL1032_The...
Version validated by the jury (STAR)

Identifiers

  • HAL Id : tel-01229874, version 1

Citation

Arnaud Lefray. Security for Virtualized Distributed Systems : from Modelization to Deployment. Modeling and Simulation. Ecole normale supérieure de lyon - ENS LYON, 2015. English. ⟨NNT : 2015ENSL1032⟩. ⟨tel-01229874⟩

Share

Metrics

Record views

995

Files downloads

2767