@inproceedings{610c2b038b7b41edbfb0f8f9abdc037f,
title = "A certification technique for cloud security adaptation",
abstract = "Unpredictability of cloud computing due to segregation of visibility and control between applications, data owners, and cloud providers increases tenants' uncertainty when using cloud services. Adaptation techniques become fundamental to provide a reliable cloud-based infrastructure with definite behavior, which preserves a stable quality of service for tenants. Existing adaptation techniques mostly focus on performance properties and are based on unverifiable evidence, which is collected in an untrusted way. In this paper, we propose a security-oriented adaptation technique for the cloud, based on evidence collected by means of a reliable certification process. Our approach adapts the cloud to maintain stable security properties over time, by continuously verifying certificate validity. It uses the output of verification activities to index a feature model, where equivalent configurations are used as the basis for adaptation. We also provide an analysis of the approach on British Telecommunications (BT) premises.",
keywords = "Adaptive cloud, Certification, Feature models",
author = "Ardagna, \{Claudio A.\} and Rasool Asal and Ernesto Damiani and \{El Ioini\}, Nabil and Claus Pahl and Theo Dimitrakos",
note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; 2016 IEEE International Conference on Services Computing, SCC 2016 ; Conference date: 27-06-2016 Through 02-07-2016",
year = "2016",
month = aug,
day = "31",
doi = "10.1109/SCC.2016.49",
language = "British English",
series = "Proceedings - 2016 IEEE International Conference on Services Computing, SCC 2016",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "324--331",
editor = "Jia Zhang and Miller, \{John A.\} and Xiaofei Xu",
booktitle = "Proceedings - 2016 IEEE International Conference on Services Computing, SCC 2016",
address = "United States",
}