Sökning: onr:"swepub:oai:gup.ub.gu.se/304989" >
Pre-Deployment Secu...
Pre-Deployment Security Assessment for Cloud Services through Semantic Reasoning
-
- Cauli, Claudia (författare)
- Gothenburg University,Göteborgs universitet,Institutionen för data- och informationsteknik, datorteknik (GU),Department of Computer Science and Engineering, Computer Engineering (GU)
-
Li, Meng (författare)
-
- Piterman, Nir, 1971 (författare)
- Gothenburg University,Göteborgs universitet,Institutionen för data- och informationsteknik, datorteknik (GU),Department of Computer Science and Engineering, Computer Engineering (GU)
-
visa fler...
-
Tkachuk, Oksana (författare)
-
visa färre...
-
(creator_code:org_t)
- 2021
- 2021
- Engelska.
-
Ingår i: 33rd International Conference on Computer-Aided Verification.
- Relaterad länk:
-
https://gup.ub.gu.se... (primary) (free)
-
visa fler...
-
https://gup.ub.gu.se...
-
visa färre...
Abstract
Ämnesord
Stäng
- Over the past ten years, the adoption of cloud services has grown rapidly, leading to the introduction of automated deployment tools to address the scale and complexity of the infrastructure companies and users deploy. Without the aid of automation, ensuring the security of an ever-increasing number of deployments becomes more and more challenging. To the best of our knowledge, no formal automated technique currently exists to verify cloud deployments during the design phase. In this case study, we show that Description Logic modeling and inference capabilities can be used to improve the safety of cloud configurations. We focus on the Amazon Web Services proprietary declarative language, CloudFormation, and develop a tool to encode template files into logic. We query the resulting models with properties related to security posture and report on our findings. By extending the models with dataflow-specific knowledge we use more comprehensive semantic reasoning to further support security reviews. When applying the developed toolchain to publicly available deployment files we find numerous violations of widely-recognized security best practices, which suggests that streamlining the methodologies developed for this case study would be beneficial.
Ämnesord
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
Publikations- och innehållstyp
- ref (ämneskategori)
- kon (ämneskategori)