Rethinking Security in the Era of Cloud Computing
IEEE Cloud computing has emerged as a dominant platform for computing forthe foreseeable future, resulting in an ongoing disruption to the waywe build and deploy software. This disruption offers a rareopportunity to integrate new approaches to computer security. In thispaper we outline a vision of security in this new era of cloudcomputing, laying out an argument for how the aggregating effect ofcloud computing and the role of cloud providers as trust anchors cansignificantly benefit computing security. We advocate for new cloudservices that take as a primary goal the security of cloud tenants andillustrate several examples that might help solve ``holy-grail''problems such as password security, trust management, server defense,and practical trustworthy computing via attested code identity. Tomotivate additional research on such cloud-as-partner mechanisms, weenumerate a number of challenging concrete open problems faced bycloud customers today.
Aikat, J; Akella, A; Chase, JS; Juels, A; Reiter, M; Ristenpart, T; Sekar, V; Swift, M
Electronic International Standard Serial Number (EISSN)
International Standard Serial Number (ISSN)
Digital Object Identifier (DOI)