Software-defined Security for Distributed Clouds

Maxime Compastié 1
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : In this thesis, we propose an approach for software-defined security in distributed clouds. More specifically, we show to what extent this programmability can contribute to the protection of distributed cloud services, through the generation of secured unikernel images. These ones are instantiated in the form of lightweight virtual machines, whose attack surface is limited and whose security is driven by a security orchestrator. The contributions of this thesis are threefold. First, we present a logical architecture supporting the programmability of security mechanims in a multi-cloud and multi-tenant context. It permits to align and parameterize these mechanisms for cloud services whose resources are spread over several providers and tenants. Second, we introduce a method for generating secured unikernel images in an on-the-fly manner. This one permits to lead to specific and constrained resources, that integrate security mechanisms as soon as the image generation phase. These ones may be built in a reactive or proactive manner, in order to address elasticity requirements. Third, we propose to extend the TOSCA orchestration language, so that is is possible to generate automatically secured resources, according to different security levels in phase with the orchestration. Finally, we detail a prototyping and extensive series of experiments that are used to evaluate the benefits and limits of the proposed approach
Document type :
Theses
File URL :
http://docnum.univ-lorraine.fr/ulprive/DDOC_T_2018_0307_COMPASTIE.pdf
Complete list of metadatas

https://hal.univ-lorraine.fr/tel-02096145
Contributor : Thèses Ul <>
Submitted on : Thursday, April 11, 2019 - 10:18:08 AM
Last modification on : Tuesday, June 25, 2019 - 12:26:22 PM

Identifiers

  • HAL Id : tel-02096145, version 1

Citation

Maxime Compastié. Software-defined Security for Distributed Clouds. Networking and Internet Architecture [cs.NI]. Université de Lorraine, 2018. English. ⟨NNT : 2018LORR0307⟩. ⟨tel-02096145⟩

Share

Metrics

Record views

52