Authors:
Valentina Casola
1
;
Massimiliano Rak
2
;
Silvio La Porta
3
and
Andrew Byrne
3
Affiliations:
1
Università "Federico II" di Napoli, Italy
;
2
Seconda Università di Napoli, Italy
;
3
EMC Ireland COE Innovation, Ireland
Keyword(s):
Cloud, ngDC, Cloud Security, Security SLA.
Related
Ontology
Subjects/Areas/Topics:
Cloud Application Scalability and Availability
;
Cloud Computing
;
Cloud Computing Architecture
;
Cloud Computing Enabling Technology
;
Fundamentals
;
Monitoring of Services, Quality of Service, Service Level Agreements
;
Platforms and Applications
;
Security, Privacy, and Compliance Management
;
Services Science
;
Services Security and Reliability
Abstract:
Next generation Data Centers (ngDC) are the cloud-based architectures devoted to offering infrastructure
services in flexible ways: managing in an integrated way compute, network and storage services. This solution
is very attractive from an organisation’s perspective but one of the main challenges to adoption is the perception
of loss of security and control over resources that are dynamically acquired in the cloud and that reside on
remote providers. For a full adoption, datacenter customers need more guarantees about the security levels
provided, creating the need for tools to dynamically negotiate and monitor the security requirements. The
SPECS project proposes a platform that offers security features with an as-a-service approach, furthermore it
uses Security Service Level Agreements (Security SLA) as a means for establishing a clear statement between
customers and providers to define a mutual agreement. This paper presents an industrial experience from
EMC that integrates the
SPECS Platform and their innovative solutions for ngDC. In particular, the paper will
illustrate how it is possible to negotiate, enforce and monitor a Security SLA in a cloud infrastructure offering.
(More)