Service Trustiness and Resource Legitimacy in Cloud Computing
Jong Pil Yoon, Zhixiong Chen · 2010
Cloud computing is emerging as a virtual model in support of “everything-as-a-service” (XaaS). Service providers in a cloud provide XasS of resources. There are numerous providers involved in a cloud such as feeders, owners, delegators and creators who are less likely the same agent. Consequently, without identifying the credential of their providers, cloud resources cannot be securely managed by traditional security models and services may be trustless. In this paper, we propose a new security technique to measure the trustiness of the cloud resources. Using the metadata of resources, the technique binds authorization policies to compute the trace ability between the resources and the provider's credential. The contribution of this paper includes a mechanism of the privilege chains that can be used to verify the legitimacy of cloud resources and to measure the trustiness of cloud services.