<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of tel-04516252</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-04T12:25:13+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Automating Security Enhancement for Cloud Services</title>
            <title xml:lang="fr">Renforcement automatisé de la sécurité des services Cloud</title>
            <author role="aut">
              <persName>
                <forename type="first">Mohamed</forename>
                <surname>Oulaaffart</surname>
              </persName>
              <email type="md5">25566bbcaafb7c568a245e20a944921a</email>
              <email type="domain">loria.fr</email>
              <idno type="idhal" notation="string">mohamed-oulaaffart</idno>
              <idno type="idhal" notation="numeric">1244296</idno>
              <idno type="halauthorid" notation="string">2355006-1244296</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-5021-5075</idno>
              <affiliation ref="#struct-529415"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Thèses</forename>
                <surname>UL</surname>
              </persName>
              <email type="md5">802a29f1e309ab28a703dab5e0384d41</email>
              <email type="domain">univ-lorraine.fr</email>
            </editor>
            <funder>Région Grand Est (50%)</funder>
            <funder>ANR (50%)</funder>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-03-22 09:40:44</date>
              <date type="whenModified">2025-11-04 11:57:27</date>
              <date type="whenReleased">2025-01-31 17:57:39</date>
              <date type="whenProduced">2023-12-05</date>
              <date type="whenEndEmbargoed">2025-07-31</date>
              <ref type="file" target="https://hal.univ-lorraine.fr/tel-04516252v1/document">
                <date notBefore="2025-07-31"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.univ-lorraine.fr/tel-04516252v1/file/DDOC_T_2023_0232_OULAAFFART.pdf" id="file-4516252-4274169">
                <date notBefore="2025-07-31"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="436959">
                <persName>
                  <forename>Thèses</forename>
                  <surname>UL</surname>
                </persName>
                <email type="md5">802a29f1e309ab28a703dab5e0384d41</email>
                <email type="domain">univ-lorraine.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">tel-04516252</idno>
            <idno type="halUri">https://hal.univ-lorraine.fr/tel-04516252</idno>
            <idno type="halBibtex">oulaaffart:tel-04516252</idno>
            <idno type="halRefHtml">Computer Science [cs]. Université de Lorraine, 2023. English. &lt;a target="_blank" href="https://www.theses.fr/2023LORR0232"&gt;&amp;#x27E8;NNT : 2023LORR0232&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">Computer Science [cs]. Université de Lorraine, 2023. English. &amp;#x27E8;NNT : 2023LORR0232&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-4516252-4274169"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="LORIA2">Publications du LORIA</idno>
            <idno type="stamp" n="INRIA-NANCY-GRAND-EST">INRIA Nancy - Grand Est</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="CENTRALESUPELEC">Ecole CentraleSupélec</idno>
            <idno type="stamp" n="UNIV-LORRAINE">Université de Lorraine</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="LORIA">Laboratoire Lorrain de Recherche en Informatique et ses Applications</idno>
            <idno type="stamp" n="LORIA-NSS" corresp="LORIA">Department of Networks, Systems and Services</idno>
            <idno type="stamp" n="THESES-UL">Thèses de doctorat soutenues à l'Université de Lorraine</idno>
            <idno type="stamp" n="AM2I-UL">Pôle scientifique Automatique, Mathématiques, Informatique et leurs Intéractions de l'Université de Lorraine</idno>
          </seriesStmt>
          <notesStmt/>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Automating Security Enhancement for Cloud Services</title>
                <title xml:lang="fr">Renforcement automatisé de la sécurité des services Cloud</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Mohamed</forename>
                    <surname>Oulaaffart</surname>
                  </persName>
                  <email type="md5">25566bbcaafb7c568a245e20a944921a</email>
                  <email type="domain">loria.fr</email>
                  <idno type="idhal" notation="string">mohamed-oulaaffart</idno>
                  <idno type="idhal" notation="numeric">1244296</idno>
                  <idno type="halauthorid" notation="string">2355006-1244296</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-5021-5075</idno>
                  <affiliation ref="#struct-529415"/>
                </author>
              </analytic>
              <monogr>
                <idno type="nnt">2023LORR0232</idno>
                <imprint>
                  <date type="dateDefended">2023-12-05</date>
                </imprint>
                <authority type="institution">Université de Lorraine</authority>
                <authority type="school">École doctorale IAEM Lorraine - Informatique, Automatique, Électronique - Électrotechnique, Mathématiques de Lorraine</authority>
                <authority type="supervisor">Olivier Festor</authority>
                <authority type="supervisor">Rémi Badonnel</authority>
                <authority type="jury">François Charoy [Président]</authority>
                <authority type="jury">Nora Cuppens [Rapporteur]</authority>
                <authority type="jury">Marco Anisetti [Rapporteur]</authority>
                <authority type="jury">Véronique Legrand</authority>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Security Automation</term>
                <term xml:lang="en">Cloud Migration</term>
                <term xml:lang="en">Cloud Computing</term>
                <term xml:lang="en">Cloud Security</term>
                <term xml:lang="fr">Automatisation</term>
                <term xml:lang="fr">Migration dans le Cloud</term>
                <term xml:lang="fr">Sécurité du Cloud</term>
                <term xml:lang="fr">Cloud Computing</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="THESE">Theses</classCode>
              <classCode scheme="halOldTypology" n="THESE">Theses</classCode>
              <classCode scheme="halTreeTypology" n="THESE">Theses</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The advances in virtualization techniques and the maturity of orchestration languages have contributed to the design and deployment of cloud composite services. These cloud services may be subject to changes over time, due to the migration of their resources. This may introduce new vulnerabilities, that compromise the whole services. In that context, this thesis proposes to enhance and automate the security of cloud composite services, according to three main axes. The first axis consists in an automated SMT-based security framework for supporting migrations in cloud composite services, such as those orchestrated with the TOSCA (Topology and Orchestration Specification for Cloud Applications) language. It relies on verification techniques for automatically assessing the configuration changes that affect the components of cloud services during their migrations and determining adequate countermeasures. The second axis investigates the design of an inter-cloud trusted third party, called C3S-TTP (Composite Cloud Configuration Security-Trusted Third Party). This one is capable to perform a precise and exhaustive vulnerability assessment, without requiring the cloud provider and the cloud tenant to share critical configuration information between each other. The third axis is centered on the investigation of a moving target defense strategy which combines artificial intelligence algorithms together with verification techniques. The purpose is to deceive reconnaissance activities performed by attackers through a large exploration of states, while minimizing the occurrence of new vulnerabilities that may impact on the attack surface of cloud composite services.</p>
            </abstract>
            <abstract xml:lang="fr">
              <p>Les avancées des techniques de virtualisation et la maturité des langages d'orchestration ont contribué à la conception et au déploiement de services cloud composites. Ces services cloud peuvent être sujets à des changements dans le temps, en raison de la migration de leurs ressources. Cela peut introduire de nouvelles vulnérabilités, qui compromettent un service cloud dans son ensemble. Dans ce contexte, cette thèse propose d'améliorer et d'automatiser la sécurité des services cloud composites selon trois axes principaux. Le premier axe consiste en un framework de sécurité automatique basé sur SMT pour prendre en charge les migrations dans les services cloud composites, comme ceux orchestrés avec le langage TOSCA (Topology and Orchestration Specification for Cloud Applications). Il s'appuie sur des techniques de vérification pour évaluer automatiquement les changements de configuration qui affectent les composants des services cloud pendant leurs migrations, déterminer les vulnérabilités potentielles et sélectionner des contre-mesures adéquates. Le deuxième axe étudie la conception d'un tiers de confiance inter-cloud, appelé C3S-TTP (Composite Cloud Configuration Security-Trusted Third Party). Celui-ci est capable de réaliser une évaluation précise et exhaustive des vulnérabilités, tout en limitant les informations partagées entre le fournisseur cloud et le client cloud. Le troisième axe est centré sur l'investigation d'une stratégie défensive par cible mouvante qui combine des algorithmes d'intelligence artificielle avec des techniques de vérification. Le but est de compromettre les activités de reconnaissance effectuées par les attaquants à travers une large exploration des états, tout en minimisant l'apparition de nouvelles vulnérabilités qui peuvent avoir un impact important sur la surface d'attaques des services cloud concernés.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-529415" status="VALID">
          <idno type="RNSR">201822769A</idno>
          <idno type="ROR">https://ror.org/00vk6my81</idno>
          <orgName>Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems</orgName>
          <orgName type="acronym">RESIST</orgName>
          <date type="start">2018-01-01</date>
          <date type="end">2025-12-31</date>
          <desc>
            <address>
              <addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inria.fr/equipes/resist</ref>
          </desc>
          <listRelation>
            <relation active="#struct-129671" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-423085" type="direct"/>
            <relation active="#struct-206040" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-129671" status="VALID">
          <idno type="RNSR">198618246Y</idno>
          <idno type="ROR">https://ror.org/03fcjvn64</idno>
          <orgName>Centre Inria de l'Université de Lorraine</orgName>
          <desc>
            <address>
              <addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/nancy</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-423085" status="VALID">
          <orgName>Department of Networks, Systems and Services</orgName>
          <orgName type="acronym">LORIA - NSS</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr/en/research/departments/networks-systems-and-services/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-206040" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-206040" status="VALID">
          <idno type="IdRef">067077927</idno>
          <idno type="ISNI">0000000121795429</idno>
          <idno type="RNSR">198912571S</idno>
          <idno type="IdUnivLorraine">[UL]RSI--</idno>
          <idno type="ROR">https://ror.org/02vnf0c38</idno>
          <orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName>
          <orgName type="acronym">LORIA</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation active="#struct-411575" type="direct"/>
            <relation active="#struct-413289" type="direct"/>
            <relation name="UMR7503" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-413289" status="VALID">
          <idno type="IdRef">157040569</idno>
          <idno type="IdUnivLorraine">[UL]100--</idno>
          <idno type="ROR">https://ror.org/04vfs2w97</idno>
          <orgName>Université de Lorraine</orgName>
          <orgName type="acronym">UL</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lorraine.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>