Environments is currently an extremely active research area. More specifically, malicious behaviors targeting largescale Cloud data repositories (e.g. Denial of Service attacks) may drastically degrade the overall performance of such systems and cannot be detected by typical authentication mechanisms. In this paper we propose a generic security management framework allowing providers of Cloud data management systems to define and enforce complex security policies. This security framework is designed to detect and stop a large array of attacks defined through an expressive policy description language and to be easily interfaced with various data management systems. We show that we can efficiently protect a data storage system by evaluating our security framework on top of the BlobSeer data management platform. We evaluate the benefits of preventing a DoS attack targeted towards BlobSeer through experiments performed on the Grid'5000 testbed.
In REF the authors proposed a generic security management framework allowing providers of cloud data management systems to define and enforce complex security policies.
Managing Data Access on Clouds: A Generic Framework for Enforcing Security Policies
2011 IEEE International Conference on Advanced Information Networking and Applications
2011 IEEE International Conference on Advanced Information Networking and Applications
Computer Science