Building More Reliable Cloud Services The CUMULUS Project

Transcription

1 Building More Reliable Cloud Services The CUMULUS Project Antonio Álvarez Romero London, 17 th June

2 Table of contents Motivations Goals to be achieved What is CUMULUS? Application scenario: Smart Lightning Recap 2

3 Table of contents Motivations Cloud computing definition Cloud computing strengths Cloud computing drawbacks The problem of security Goals to be achieved What is CUMULUS? Application scenario: Smart Lightning Recap 3

4 Motivations Cloud computing definition Let s reflect on the definition of cloud computing A technology that allows to offer services by means of the Internet This definition can be improved Rather than a new computing technology, it is a change of paradigm An innovative model of providing IT services, in comparison to the classic system of private networks 4

5 Motivations Cloud computing definition The definition can be made from the point of view of customers or providers Customer s view Cloud computing is a set of IT solutions accesible from a laptop on the Internet, regardless of its location Its usage is generally charged following a flat rate model It can be easily scaled on demand It works in a context of confidence both from the technical and the legal point of view The only infrastructure needed is a terminal enabled to be connected to the Internet Data are not stored on the device, but on the cloud 5

6 Motivations Cloud computing definition The definition can be made from the point of view of customers or providers Provider s view A set of HW and SW resources provided as a service by means of the Internet The model followed is similar to that of water and electrical supply The customer is charged periodically (mostly on a monthly basis) Can be also charged basing on resources consumption The maintenance cannot add an extra cost It must be authomatically scalable on demand Services must be reusable (standardization) Services must be multiuser 6

7 Motivations Cloud computing definition In addition to this: The implementation of a service can use one or more machines in a transparent manner (virtualization), and the quality of service, as well as data and communications security must be guaranteed by a Service Level Agreement (SLA) 7

8 Motivations Cloud computing strengths A flexible and unlimited infrastructure The bill depends on each customer s needs The service can be expended on demand Immediately Without needing big investements on hardware and maintenance Apps, services and data can be accesed by a wide range of devices (smartphones, laptops ) Reduction of costs 8

9 Motivations Cloud computing strengths A better Quality of Service The investment on technology made by cloud service providers will always be bigger than the one made by a company in their own 24/7 service availability Cloud computing services average downtime is 7,5 hours a year (0,1%) D.Bonderud: 99.9% cloud computing uptime? That 0.1% costs more than you would think. Midsize insider

10 Motivations Cloud computing drawbacks Security regarding data storage Security regarding data transmission within the cloud Security for apps stored on the cloud Security regarding the integrity of data stored on the cloud Security related to third parties 10

11 Motivations Cloud computing promising but problematic Cloud computing is a flourishing business, promising to become a breakthrough in the computation era Everybody seems to agree on its benefits and advantages Despite its indubitable appealing, the desired growth of the business of cloud computing is seriously threatened 11

12 Motivations The problem of security Cloud computing still shows serious weaknesses regarding security These weaknesses make prospective customers to refrain from using cloud services Providers are reluctant to take full responsibility of the security of their services once the services are uploaded and offered through a cloud In consequence, both providers and customers have raised their concerns about security, which has become a major issue Anyway, both customers and providers are really willing to trust each other and build relationships based on confidence 12

13 Motivations Other problems Security is not the only problem affecting cloud computing Privacy Governance Compliance 13

14 Table of contents Motivations Goals to be achieved What is CUMULUS? Application scenario: Smart Lightning Recap 14

15 Goals to be achieved We want to build trustworthy cloud services We want to encourage both providers and suppliers to rely on cloud services We want to boost the growth of the cloud computing business Highlighting and even improving its strengths Looking for solutions to its weaknesses Especially those related to security issues 15

16 Goals to be achieved How can we do it? Issuing certificates is the most traditional way to ensure security properties for IT services It has a long story as a mechanism for verifiying properties and increasing trust in software services However, when it comes to certifying software running on top of the cloud stack, or services offered at different layers of the cloud stack, a serious lack in certification tools is evident 16

17 Goals to be achieved How can we do it? Therefore, a certification process for advanced cloud services is needed It s here when the CUMULUS project comes into scene CUMULUS aims to give a solution to the lack of tools to certificate security on cloud services. CUMULUS helps to build reliable services that reassure both providers and customers and encourage them to place their trust in cloud computing CUMULUS is eventually a tool which will contribute to the expected growth and development of the cloud computing business 17

18 Table of contents Motivations Goals to be achieved What is CUMULUS? The project The purpose The methodology Application scenario: Smart Lightning Recap 18

19 What is CUMULUS? The project CUMULUS stands for Certification infrastructure for MUlti-Layer cloud Services It is an EU funded project 3 years October 2012 September 2015 Eight partners from European science and industry Investigate how in future cloud services can be made more secure and trustworthy for end users 19

20 What is CUMULUS? Partners 20

21 What is CUMULUS? Purpose 21

22 What is CUMULUS? The framework The certification process is a function that takes as input the assertions about a security property and target of certification and produces as output a machinereadable certificate containing the evidence that proves the requested properties, by means of verification and validation techniques 22

23 What is CUMULUS? The framework The certification process produces a set of metadata in the form of machine-readable certificates An XML file These certificates can be used to compare and rank services Identify the best one addressing client preferences Since they are machine readable, a certificate does not need to be read by a person. A machine will interpret it 23

24 What is CUMULUS? The framework A certificate is an XML file including the elements needed for a given class of certification SaaS, Paas, IaaS model Verification type Test, Monitoring, TC Proofs, hybrid, incremental Evidence Others It is an instance of a certification model A certification model is a particular version of a certification meta-model 24

25 What is CUMULUS? The framework The certification process in CUMULUS is about collecting different types of evidence ensuring the fulfillment of a security property Testing The property is checked by making periodical verifications Monitoring The property is continuously checked Trusted computing proofs For Hardware elements of cloud infrastructures 25

26 What is CUMULUS? The framework Let s see some examples Testing Database encryption: by means of querys we can see if the information on a database is stored in plain text or not Monitoring Software running Apache server is running on a virtual machine Trusted computing proofs Data Integrity The data stored in a certain memory area is encrypted The encryption is made by a Trusted Platform Module (TPM) provided by Infineon 26

27 What is CUMULUS? The framework An hybrid certification process combines at least two types of evidence Example: testing + Trusted Computing Proofs Availability of a SaaS layer service Testing to check the availabilty of the service TC Proofs to check that the configuration of the cloud infrastructure has not changed Example: monitoring + Trusted Computing Proofs A given service is always operated within the European Union TC Proofs to certify that the virtual machine is deployed in a hardware located in the EU Monitoring to prove that the service is always executed on the mentioned virtual machine 27

28 What is CUMULUS? The framework A multilayer certification process is the combination of the certification of inter-dependent services at different layers of the cloud stack Example: Saas + IaaS Using monitoring evidences to certify that a mail service (SaaS) is running on a virtual machine having certain features (IaaS) regarding, for instance: Hard disk space RAM memory Processing capability 28

29 What is CUMULUS? The framework An incremental certification process has the ability to cover changes that may affect certified properties of cloud services without having to recertify properties from scratch Example: certify that a mail service is running on a virtual machine having certain properties The mail service is updated The certificate has to be updated as well But it is only necessary to certificate the mail service, so the whole certification process does not have to be done An incremental certificate is issued 29

30 What is CUMULUS? The framework IaaS PaaS SaaS Test-based (TB) X X X BASIC models Monitoring-based (MB) X X X TPM-Based (TPMB) X X X TB,MB X X X HYBRID models TB,TPMB X X X MB,TPMB X X X TB,MB,TPMB X X X IaaS/PaaS X X MULTI LAYER models PaaS/SaaS X X IaaS/SaaS X X IaaS/PaaS/SaaS X X X INCREMENTAL models TB,MB X X X 30

31 What is CUMULUS? The framework Which are our targets of certification? 31

32 What is CUMULUS? The framework Typical engineering processes for design and development of services and applications relied on functional aspects and requirements of the system to be modelled Security was neglected, added as an afterthought or minimized due to cost or efficiency conditions in the development 32

33 What is CUMULUS? The framework This has changed and it is no longer possible to achieve the required level of security by adding security measures late in the development process Security engineering needs to be part of the development in all stages of the process That s why a cloud service needs a CUMULUS-aware engineering process in order to be issued CUMULUS certificates It is not possible to do it directly It is necessary to use CUMULUS specific engineering tools 33

34 What is CUMULUS? The framework The CUMULUS engineering process is reflected in a set of engineering tools developed throughout the project There are four kind of actors benefiting from the engineering process Application and service engineers Certification authorities Cloud providers Service consumers 34

35 What is CUMULUS? The framework What does the engineering process provide? For application and service engineers Expressing security requirements for systems running on the cloud Understanding security concerns relevant to their systems Mapping security requirements to certificates Tracing security requirements down to security mechanisms in the code For certification authorities Communicating their procedures to engineers Issuing certifications for cloud components 35

36 What is CUMULUS? The framework What does the engineering process provide? For cloud providers Increasing users trust both in their specific clouds and in the cloud model itself Expressing the security properties provided by available services of their cloud infrastructures / platforms Understanding security concerns relevant for their clouds For service consumers Communicating their preferences to cloud providers Trusting cloud providers platforms Proving that their systems conform to policies/rules/law 36

37 What is CUMULUS? The methodology WP Name 1 Project Management 2 Certification Models and Processes 3 Core Certification Mechanisms 4 CUMULUS-aware system engineering 5 Infrastructure design and integration 6 Industrial scenarios and validation 7 Dissemination and exploitation 37

38 What is CUMULUS? The methodology 38

39 Table of contents Motivations Goals to be achieved What is CUMULUS? Application scenario: Smart Lightning Recap 39

40 Application Scenario: Smart Lightning Wellness Telecom has developed a new product designed to manage public lightning. WeLight is the open architecture, adaptable, product developed by Wellness Telecom to control and monitor any public lightning panel The system also does not need its own server or its own communications infrastructure. All the information is available through an Internet-based software service It provides Telemanagement platform Alerts Reports 40

41 Application Scenario: Smart Lightning WeLight cloud infrastructure 41

42 Application Scenario: Smart Lightning WeLight cloud infrastructure 42

43 Application Scenario: Smart Lightning Some of the security properties we would like to certify Certificate that the different components of the architecture are trusworthy Avoid the use of VPN We could ensure that the communications are using SSL We could also ensure that HTTP requests are redirected to the HTTP port Access control Avoid unauthorized remote disconnect likely to create system wide blackout Authentication of users Avoid feeding the system with false data 43

44 Table of contents Motivations Goals to be achieved What is CUMULUS? Application scenario: Smart Lightning Recap 44

45 Recap 45

46 46

47 47