An Overview of Cloud Auditing Support for OpenStack
Channel: OpenInfra Foundation
Date: 2014-05-13

An Overview of Cloud Auditing Support for OpenStack features Rob Basham, Gordon Chung, Matt Rutkowski and Brad Topol of IBM. 

A key feature of any Cloud infrastructure is to provide auditing capabilities for compliance with security, operational and business processes. In this talk we provide an overview of the recent enhancements made in OpenStack projects to support API and security auditing using the DMTF Cloud Auditing Data Federation (CADF) standard. We will describe how auditing is seamlessly enabled for Nova, Glance, Swift, Cinder, Neutron and Keystone and illustrate what is audited, where it is stored, what the records contain and how this supports compliance. We will finish by presenting some possible future directions such as extending the use of CADF beyond audit to facilitate event correlation and federation across multiple tiers.