Skip to Main content Skip to Navigation

Software-defined Security for Distributed Clouds

Maxime Compastié 1 
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : In this thesis, we propose an approach for software-defined security in distributed clouds. More specifically, we show to what extent this programmability can contribute to the protection of distributed cloud services, through the generation of secured unikernel images. These ones are instantiated in the form of lightweight virtual machines, whose attack surface is limited and whose security is driven by a security orchestrator. The contributions of this thesis are threefold. First, we present a logical architecture supporting the programmability of security mechanims in a multi-cloud and multi-tenant context. It permits to align and parameterize these mechanisms for cloud services whose resources are spread over several providers and tenants. Second, we introduce a method for generating secured unikernel images in an on-the-fly manner. This one permits to lead to specific and constrained resources, that integrate security mechanisms as soon as the image generation phase. These ones may be built in a reactive or proactive manner, in order to address elasticity requirements. Third, we propose to extend the TOSCA orchestration language, so that is is possible to generate automatically secured resources, according to different security levels in phase with the orchestration. Finally, we detail a prototyping and extensive series of experiments that are used to evaluate the benefits and limits of the proposed approach
Complete list of metadata

Cited literature [182 references]  Display  Hide  Download
Contributor : Thèses UL Connect in order to contact the contributor
Submitted on : Tuesday, January 14, 2020 - 2:54:29 PM
Last modification on : Friday, February 4, 2022 - 3:34:30 AM
Long-term archiving on: : Wednesday, April 15, 2020 - 8:01:50 PM


Files produced by the author(s)


  • HAL Id : tel-02096145, version 1


Maxime Compastié. Software-defined Security for Distributed Clouds. Networking and Internet Architecture [cs.NI]. Université de Lorraine, 2018. English. ⟨NNT : 2018LORR0307⟩. ⟨tel-02096145⟩



Record views


Files downloads