Rethinking Security in the Era of Cloud Computing

Published

Journal Article

IEEE Cloud computing has emerged as a dominant platform for computing forthe foreseeable future, resulting in an ongoing disruption to the waywe build and deploy software. This disruption offers a rareopportunity to integrate new approaches to computer security. In thispaper we outline a vision of security in this new era of cloudcomputing, laying out an argument for how the aggregating effect ofcloud computing and the role of cloud providers as trust anchors cansignificantly benefit computing security. We advocate for new cloudservices that take as a primary goal the security of cloud tenants andillustrate several examples that might help solve ``holy-grail''problems such as password security, trust management, server defense,and practical trustworthy computing via attested code identity. Tomotivate additional research on such cloud-as-partner mechanisms, weenumerate a number of challenging concrete open problems faced bycloud customers today.

Full Text

Duke Authors

Cited Authors

  • Aikat, J; Akella, A; Chase, JS; Juels, A; Reiter, M; Ristenpart, T; Sekar, V; Swift, M

Published Date

  • June 16, 2017

Published In

Electronic International Standard Serial Number (EISSN)

  • 1558-4046

International Standard Serial Number (ISSN)

  • 1540-7993

Digital Object Identifier (DOI)

  • 10.1109/MSP.2017.265092803

Citation Source

  • Scopus