Change search
ReferencesLink to record
Permanent link

Direct link
Security Architecture for Cloud Computing Platform
KTH, School of Information and Communication Technology (ICT).
2012 (English)Independent thesis Advanced level (degree of Master (Two Years)), 20 credits / 30 HE creditsStudent thesis
Abstract [en]

Cloud computing is an innovation of existing technology which provides long-dreamed vision of computing as utility. The emergence of this novel technology in IT business has decoyed most of organizations in both private and public sector. Although cloud introduces the innovative and cost effective concept of on demand service, pay as you go, and resource allocation, security is often the area of concern in terms of its adoption. The existing security-based solutions for cloud-based platform are either based on single tamper-proof hardware or homomorphic encryption. Hardware-based solution lacks scalability, while homomorphic encryptions are only a theory. Moreover, traditional defense in-depth security mechanism cannot be directly implemented in cloud-based platform due to the varying nature of its service and deployment model. However, the same concept of multi-layered security mechanism can be proposed to secure the cloud-based platform.

This Master Thesis research is focused on deriving the generic and secure architecture for cloud computing platform regardless of its services and deployment model. The research focus on delivering seamless access control, authorization, identity and SSO services to end-user. All of the above mentioned services are offered by the components of our central security system. The central security system is the purposed architecture for cloud computing platform, which is based on service oriented architecture where all the security services are provided in terms of web services to end-user. Finally, OpenStack being an open source cloud computing platform is selected as a targeted platform in order to deploy and evaluate security services offered by our central security system.

Place, publisher, year, edition, pages
2012. , 56 p.
Trita-ICT-EX, 2012:291
National Category
Engineering and Technology
URN: urn:nbn:se:kth:diva-109439OAI: diva2:582095
Educational program
Master of Science - Information and Communication Systems Security
Available from: 2013-04-03 Created: 2013-01-03 Last updated: 2013-04-03Bibliographically approved

Open Access in DiVA

fulltext(1437 kB)4688 downloads
File information
File name FULLTEXT01.pdfFile size 1437 kBChecksum SHA-512
Type fulltextMimetype application/pdf

By organisation
School of Information and Communication Technology (ICT)
Engineering and Technology

Search outside of DiVA

GoogleGoogle Scholar
Total: 4688 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 5315 hits
ReferencesLink to record
Permanent link

Direct link