TrustCloud: A Framework for Accountability and Trust in Cloud Computing

Ko, Ryan K L ; Jagadpramana, Peter ; Mowbray, Miranda ; Pearson, Siani ; Kirchberg, Markus ; Liang, Qianhui ; Lee, Bu Sung

HP Development Company

关键词: trust in cloud computing;    logging;    auditability;    accountability;    data provenance;    continuous auditing and monitoring;    governance;   

RP-ID  :  HPL-2011-38

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

The key barrier to widespread uptake of cloud computing is the lack of trust in clouds by potential customers. While preventive controls for security and privacy measures are actively being researched, there is still little focus on detective controls related to cloud accountability and auditability. The complexity resulting from the sheer amount of virtualization and data distribution carried out in current clouds has also revealed an urgent need for research in cloud accountability, as has the shift in focus of customer concerns from server health and utilization to the integrity and safety of end-users' data. This paper discusses key challenges in achieving a trusted cloud through the use of detective controls, and presents the TrustCloud framework, which addresses accountability in cloud computing via technical and policy-based approaches.