A Semi-Automatic and Trustworthy Scheme for Continuous Cloud Service Certification

Marco Anisetti, Claudio Agostino Ardagna, Ernesto Damiani, Filippo Gaudenzi

Research output: Contribution to journalArticlepeer-review

37 Scopus citations

Abstract

Traditional assurance solutions for software-based systems rely on static verification techniques and assume continuous availability of trusted third parties. With the advent of cloud computing, these solutions become ineffective since services/applications are flexible, dynamic, and change at runtime, at high rates. Although several assurance approaches have been defined, cloud requires a step-change moving current assurance techniques to fully embrace the cloud peculiarities. In this paper, we provide a rigorous and adaptive assurance technique based on certification, towards the definition of a transparent and trusted cloud ecosystem. It aims to increase the confidence of cloud customers that every piece of the cloud (from its infrastructure to hosted applications) behaves as expected and according to their requirements. We first present a test-based certification scheme proving non-functional properties of cloud-based services. The scheme is driven by non-functional requirements defined by the certification authority and by a model of the service under certification. We then define an automatic approach to verification of consistency between requirements and models, which is at the basis of the chain of trust supported by the certification scheme. We also present a continuous certificate life cycle management process including both certificate issuing and its adaptation to address contextual changes. Finally, we describe our certification framework and an experimental evaluation of its performance, quality, applicability, and practical usability in a real industrial scenario, which considers Engineering Ingegneria Informatica S.p.A. ENGpay online payment system.

Original languageBritish English
Article number7831357
Pages (from-to)30-43
Number of pages14
JournalIEEE Transactions on Services Computing
Volume13
Issue number1
DOIs
StatePublished - 1 Jan 2020

Keywords

  • Certification and testing
  • cloud
  • model-based verification of services
  • quality assurance

Fingerprint

Dive into the research topics of 'A Semi-Automatic and Trustworthy Scheme for Continuous Cloud Service Certification'. Together they form a unique fingerprint.

Cite this