Secure Cloud Computing with FlexCloud

Transcription

1 Department of Computer Science Institute of Systems Architecture Chair of Computer Networks Secure Cloud Computing with FlexCloud Dr.-Ing. Anja Strunk DAAD Summer School CTDS 2012 Sousse, Tunisia

2 Outline Cloud Computing Security Problems π-box: Building your personal secure cloud Secure Cloud Storage Prototype & Evaluation Conclusion & Future Work # 2

3 Security Problems U.S. covernment is allowed to access European clouds. (June, 2011) Dropbox accepts arbitrary passwords for 4 hours (July, 2011) Thunderbold destroys Amazon EC2. (August 2011) Confidentiality Integrity Availability # 3

4 Outline Cloud Computing Security Problems π-box: Building your personal secure cloud Secure Cloud Storage Prototype & Evaluation Conclusion & Future Work # 4

5 π-cloud Approach Subsume all end devices within a Personal Secure Cloud (π-cloud) controlled by the π-box. π-cloud π-box # 5

6 π-box Architecture Service execution with respect to security and other nonfunctional requirements. π-box π-service Controller π-cockpit π-data Controller User Interface / GUI Data storage & distribution with respect to security and other nonfunctional requirements. Infrastructure management π-resource Manager Peer-to-Peer Network public resources (not necessarily trustworthy) private resources (trustworthy) # 6

7 Outline Cloud Computing Security Problems π-box: Building your personal secure cloud Secure Cloud Storage Prototype & Evaluation Conclusion & Future Work # 7

8 π-data Controller # 8 Shared Folder Cloud Storage Protocol Adapter Meta Data Data Controller: Storing File Dispersion Cryptography π-cloud = Company Intranet

9 File Dispersion: Principle Ensure availability despite of unreliable cloud storage providers k threshold, i.e. # of necessary shares to reconstruct n total # of shares a file is split into E.g. k=6, n=8 If k < n, we need redundant information. # 9

10 π-data Controller # 10 Shared Folder Cloud Storage Protocol Adapter Meta Data File Dispersion Cryptography π-cloud = Company Intranet Data Controller: Storing

11 Cryptography: Principle Ensure confidentiality and integrity by encryption and check sum AES-CBC AES-CBC AES-CBC AES-CBC + SHA256 + SHA256 + SHA256 + SHA256 # 11

12 π-data Controller # 12 Shared Folder Cloud Storage Protocol Adapter Meta Data File Dispersion Cryptography π-cloud = Company Intranet Data Controller: Storing

13 π-data Controller # 13 Shared Folder Cloud Storage Protocol Adapter Meta Data File Dispersion Cryptography π-cloud = Company Intranet Data Controller: Storing

14 Data Controller: Reconstruction Meta-Data contains all information about dispersion, encryption keys, storage nodes π-cloud = Firmen Intranet Meta Data Shared Folder File Dispersion Cryptography Cloud Storage Protocol Adapter π-data Controller # 14

15 Meta Data Cloud Storage Protocol Adapter π-data Controller # 15 Shared Folder File Dispersion Cryptography π-cloud = Firmen Intranet Data Controller: Reconstruction

16 Outline Cloud Computing Security Problems π-box: Building your personal secure cloud Secure Cloud Storage Prototype & Evaluation Conclusion & Future Work # 16

17 Prototype π-cloud = Firmen Intranet Data Base (MySQL) Dispersion (JEasure, C) Cryptography (AES, Java) z (API) (FTP) Shared Folder (SMB) Protocol Adapter (FUSE) π-data Controller (Proxy Server) # 17

18 Performance: Information Dispersal File size: 24 MB Machine: Single Core Machine 2 GB memory Throughput [Mbit/s] Dispersion parameter: k = 6 Towards User Centric Data Governance and Control in the Cloud # 18

19 Performance: Cryptography File size: 24 MB Machine: Single Core Machine 2 GB memory Key Size Crypto bit 10 Crypto bit 12 Crypto bit 14 # of iterations Towards User Centric Data Governance and Control in the Cloud # 19

20 Performance Evaluation: Overall Test 3 Test 2 Test 1 32 Mbit/s -Box 20 Mbit/s 10 Mbit/s Single Core Machine 2 GB memory Upload Download Test 1 Test 2 Test 3 Test 1 Test 2 Test Time (seconds) Time (seconds) Network Share Dispersion Cryptography Upload/Download Upload finished from user perspective File size: 24 MB; Dispersion parameters: n=8, k=6; Cryptography parameters: Towards AES (256 User bit, Centric 14 iterations), Data Governance SHA256; and Control in the Cloud Machine: Single Core, 2 GB # 20

21 Outline Cloud Computing Security Problems π-box: Building your personal secure cloud Secure Cloud Storage Evaluation Conclusion & Future Work # 21

22 Conclusion The -Cloud is a solution to externalize IT resources without loosing data control Price of Security: Delay due to extra processing Additional storage space due redundancy. Efficiency: # 22

23 Tomorrow's forecast: still cloudy but sunny spots Contact: # 23