Handling compromised components in an IaaS cloud installation
Aryan TaheriMonfared, Martin Gilje Jaatun · Journal of Cloud Computing Advances Systems and Applications · 2012
This article presents an approach to handle compromised components in the OpenStack Infrastructure-as-a-Service cloud environment. We present two specific use cases; a compromised service process and the introduction of a bogus component, and we describe several approaches for containment, eradication and recovery after an incident. Our experiments show that traditional incident handling procedures are applicable for cloud computing, but need some modification to function optimally.