首页 > 最新文献

2014 IEEE 6th International Conference on Cloud Computing Technology and Science最新文献

英文 中文
Models@run.time for Creating In-Cloud Dynamic Cyber-Physical Ecosystems Models@run.time用于创建云内动态网络物理生态系统
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.158
Amirhosein Taherkordi, F. Eliassen
The applications of Cyber-Physical Systems (CPSs) in large scale, mobile and distributed systems, such as transportation and healthcare systems, foster the development of novel cross-CPS applications. Services, in such applications, enable the emergence of multiple end-to-end cyber-physical scenarios, formed dynamically based on their demands, e.g., Disaster recovery systems. This calls for new distributed service composition models that integrate different CPS services from multiple application domains for a given purpose -- CPS ecosystems. The in-Cloud availability of CPSs can significantly improve the development process of such ecosystems thanks to the global and rapid accessibility of CPS services in the Cloud. However, a major challenge in this context is the highly dynamic nature of CPS services, making service composition a challenging issue. In this paper, we propose to exploit the concept of models at runtime in order to create a dynamic middleware framework that allows efficient composition of CPS services in dynamic and on-demand CPS ecosystems. This is achieved by obtaining the runtime models of CPS services and synthesizing software mediators that translate the communications between individual CPS services residing in the Cloud. The in-Cloud availability of CPS services will facilitate the design of such a middleware framework, and processing and maintaining the runtime models.
网络物理系统(cps)在大规模、移动和分布式系统中的应用,如交通和医疗系统,促进了新型跨cps应用的发展。在这些应用中,服务能够根据其需求动态形成多个端到端网络物理场景,例如灾难恢复系统。这就需要新的分布式服务组合模型,这些模型可以集成来自多个应用领域的不同CPS服务,以实现特定的目的——CPS生态系统。由于CPS服务在云中具有全球性和快速的可访问性,因此CPS的云内可用性可以显著改善此类生态系统的开发过程。然而,在这种情况下的一个主要挑战是CPS服务的高度动态性,这使得服务组合成为一个具有挑战性的问题。在本文中,我们建议在运行时利用模型的概念来创建一个动态中间件框架,该框架允许在动态和按需的CPS生态系统中有效地组合CPS服务。这是通过获取CPS服务的运行时模型和合成软件中介来实现的,这些中介用于转换驻留在云中各个CPS服务之间的通信。CPS服务的云内可用性将促进这种中间件框架的设计,以及对运行时模型的处理和维护。
{"title":"Models@run.time for Creating In-Cloud Dynamic Cyber-Physical Ecosystems","authors":"Amirhosein Taherkordi, F. Eliassen","doi":"10.1109/CloudCom.2014.158","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.158","url":null,"abstract":"The applications of Cyber-Physical Systems (CPSs) in large scale, mobile and distributed systems, such as transportation and healthcare systems, foster the development of novel cross-CPS applications. Services, in such applications, enable the emergence of multiple end-to-end cyber-physical scenarios, formed dynamically based on their demands, e.g., Disaster recovery systems. This calls for new distributed service composition models that integrate different CPS services from multiple application domains for a given purpose -- CPS ecosystems. The in-Cloud availability of CPSs can significantly improve the development process of such ecosystems thanks to the global and rapid accessibility of CPS services in the Cloud. However, a major challenge in this context is the highly dynamic nature of CPS services, making service composition a challenging issue. In this paper, we propose to exploit the concept of models at runtime in order to create a dynamic middleware framework that allows efficient composition of CPS services in dynamic and on-demand CPS ecosystems. This is achieved by obtaining the runtime models of CPS services and synthesizing software mediators that translate the communications between individual CPS services residing in the Cloud. The in-Cloud availability of CPS services will facilitate the design of such a middleware framework, and processing and maintaining the runtime models.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"92 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115223653","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Selection of the Proper Revenue and Pricing Model for SaaS SaaS收入与定价模式的选择
Pub Date : 2014-12-15 DOI: 10.1109/CLOUDCOM.2014.27
Arto Ojala
Recent research on software revenue and pricing models has revealed important ways in which firms can benefit from software renting. However, it is still unclear how SaaS providers select a proper revenue and pricing model to make their services attractive for customers. Based on 32 interviews with software professionals from four case firms, this study reveals how different factors impacted on the selection of a revenue and pricing model. It can be concluded that customers' needs were the main driving force to the selection of the most appropriate pricing and revenue model in the market.
最近对软件收入和定价模型的研究揭示了企业从软件租赁中获益的重要途径。然而,SaaS提供商如何选择一个合适的收入和定价模式,以使他们的服务对客户有吸引力,目前还不清楚。基于对来自四个案例公司的32位软件专业人员的访谈,本研究揭示了不同因素如何影响收入和定价模型的选择。可以得出结论,客户的需求是在市场上选择最合适的定价和收益模式的主要驱动力。
{"title":"Selection of the Proper Revenue and Pricing Model for SaaS","authors":"Arto Ojala","doi":"10.1109/CLOUDCOM.2014.27","DOIUrl":"https://doi.org/10.1109/CLOUDCOM.2014.27","url":null,"abstract":"Recent research on software revenue and pricing models has revealed important ways in which firms can benefit from software renting. However, it is still unclear how SaaS providers select a proper revenue and pricing model to make their services attractive for customers. Based on 32 interviews with software professionals from four case firms, this study reveals how different factors impacted on the selection of a revenue and pricing model. It can be concluded that customers' needs were the main driving force to the selection of the most appropriate pricing and revenue model in the market.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"110 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115717129","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
A Cloud-Based Architecture for Home Network System 基于云的家庭网络系统架构
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.125
Satoshi Takatori, S. Matsumoto, S. Saiki, S. Tokunaga, Junho Lee, Masahide Nakamura
Managing a home server within individual house is a major obstacle to practical use of home network system (HNS). Delegating the home server to a cloud is a promising approach. However, the conventional multitenant SaaS-based solution has the following risks among different households: security/privacy violation, failure propagation and insufficient resource demand. In this paper, we propose a novel cloud-based architecture for the home network system that achieves security isolation, fault isolation and resource isolation. Specifically, we first create a virtual home server for every household using IaaS. On top of every virtual home server, we then create additional virtual machines, each of which contains a single service or application. Finally, using dynamic scaling, we allocate resources needed for individual virtual home servers. Based on the idea, we construct the proposed architecture by three layers: HNS Lite, House Cloud and Service Provider.
家庭服务器的管理是家庭网络系统(HNS)实际应用的主要障碍。将主服务器委托给云是一种很有前途的方法。然而,传统的基于saas的多租户解决方案在不同家庭之间存在以下风险:安全/隐私侵犯、故障传播和资源需求不足。本文提出了一种基于云的家庭网络系统架构,实现了安全隔离、故障隔离和资源隔离。具体来说,我们首先为使用IaaS的每个家庭创建一个虚拟家庭服务器。在每个虚拟主服务器之上,我们创建额外的虚拟机,每个虚拟机包含一个服务或应用程序。最后,使用动态扩展,我们为单个虚拟家庭服务器分配所需的资源。基于这一思路,我们将提出的架构分为HNS Lite、House Cloud和Service Provider三层。
{"title":"A Cloud-Based Architecture for Home Network System","authors":"Satoshi Takatori, S. Matsumoto, S. Saiki, S. Tokunaga, Junho Lee, Masahide Nakamura","doi":"10.1109/CloudCom.2014.125","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.125","url":null,"abstract":"Managing a home server within individual house is a major obstacle to practical use of home network system (HNS). Delegating the home server to a cloud is a promising approach. However, the conventional multitenant SaaS-based solution has the following risks among different households: security/privacy violation, failure propagation and insufficient resource demand. In this paper, we propose a novel cloud-based architecture for the home network system that achieves security isolation, fault isolation and resource isolation. Specifically, we first create a virtual home server for every household using IaaS. On top of every virtual home server, we then create additional virtual machines, each of which contains a single service or application. Finally, using dynamic scaling, we allocate resources needed for individual virtual home servers. Based on the idea, we construct the proposed architecture by three layers: HNS Lite, House Cloud and Service Provider.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"90 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115765741","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Applying QoS in Software Defined Networks by Using WS-agreement 利用ws -协议在软件定义网络中实现QoS
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.26
Marc Körner, Alexander Stanik, O. Kao
Software Defined Networking decouples network services from the underlying physical hardware, thus agile and secure networks can be build, moved, replaced, and programmatically provided on demand. However, the full range of Software Defined Networking capabilities is not utilized in today's cloud middle wares, especially dynamic Quality of Service enforcement for cloud networks. In this paper we combine the WS-Agreement standard with the Open Flow standard, which allows to define Quality of Service requirements for a set of virtual machines, to negotiate the service level objectives based on the current network utilization, to create a Service Level Agreements for this dedicated cloud network, and to establish a Quality of Service overlay in an Open Flow network based on the Service Level Agreement. Moreover, we present a real world implementation consisting of the WSAG4J framework as SLA frontend and an Open Flow controller as backend. Furthermore, the software integration of both components is described and the regarding network resource allocation is demonstrated and evaluated.
软件定义的网络将网络服务与底层物理硬件解耦,因此可以按需构建、移动、替换和以编程方式提供敏捷和安全的网络。然而,软件定义网络的全部功能并没有在今天的云中间件中得到利用,尤其是云网络的动态服务质量实施。在本文中,我们将WS-Agreement标准与开放流标准相结合,允许定义一组虚拟机的服务质量需求,根据当前网络利用率协商服务水平目标,为专用云网络创建服务水平协议,并在基于服务水平协议的开放流网络中建立服务质量覆盖层。此外,我们还提供了一个真实世界的实现,该实现由WSAG4J框架作为SLA前端和Open Flow控制器作为后端组成。此外,描述了两个组件的软件集成,并对有关的网络资源分配进行了演示和评估。
{"title":"Applying QoS in Software Defined Networks by Using WS-agreement","authors":"Marc Körner, Alexander Stanik, O. Kao","doi":"10.1109/CloudCom.2014.26","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.26","url":null,"abstract":"Software Defined Networking decouples network services from the underlying physical hardware, thus agile and secure networks can be build, moved, replaced, and programmatically provided on demand. However, the full range of Software Defined Networking capabilities is not utilized in today's cloud middle wares, especially dynamic Quality of Service enforcement for cloud networks. In this paper we combine the WS-Agreement standard with the Open Flow standard, which allows to define Quality of Service requirements for a set of virtual machines, to negotiate the service level objectives based on the current network utilization, to create a Service Level Agreements for this dedicated cloud network, and to establish a Quality of Service overlay in an Open Flow network based on the Service Level Agreement. Moreover, we present a real world implementation consisting of the WSAG4J framework as SLA frontend and an Open Flow controller as backend. Furthermore, the software integration of both components is described and the regarding network resource allocation is demonstrated and evaluated.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116860607","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Open Stack Secure Enterprise File Sync and Share Turnkey Solution 开放堆栈安全企业文件同步和共享交钥匙解决方案
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.17
Yen-Hung Kuo, Tzu-Wei Yeh, Guang-Yan Zheng, Jyun-Kai Wu, Chao-Chin Yang, Jia-Ming Lin
The Enterprise File Sync and Share (EFSS) is one of the most important services to provide enterprises' employees with cloud file sync, share, and collaboration services. To take enterprises' concerns into account, such as security, privacy, compliance, and regulation, the existing EFSS solutions are either using private (on-premise) or hybrid cloud service model to provide their services. They usually emphasize that files stored in the solutions are encrypted on transfer and at rest and events occurred in the service are logged as the audit trail. However, support of data encryption and audit trail are not capable of protecting enterprise sensitive data from not well addressed security issues of the EFSS service. The security issues, including employee privacy protection, management of share links and synchronized cloud files, and the secure enterprise directory integration, are pointed out in this article. To address these issues, this work proposes and develops a scalable Secure EFSS service which can be deployed on the on-premise Open Stack cloud infrastructure to securely provide employees with EFSS service. Designs of an integrated security approach are introduced in this article, including data and metadata isolations, Distinct Share Link utility, encryption key management for personal and shared files, sandbox-based cloud file synchronization, and out-of-band authentication method.
EFSS (Enterprise File Sync and Share)是为企业员工提供云文件同步、共享和协作服务的重要服务之一。为了考虑到企业的关注点,例如安全性、隐私性、遵从性和法规,现有的EFSS解决方案要么使用私有(内部部署),要么使用混合云服务模型来提供服务。他们通常强调,存储在解决方案中的文件在传输时和静止时都是加密的,服务中发生的事件作为审计跟踪记录下来。然而,对数据加密和审计跟踪的支持并不能保护企业敏感数据不受未妥善解决的EFSS服务安全问题的影响。本文指出了安全问题,包括员工隐私保护、共享链接和同步云文件的管理以及安全的企业目录集成。为了解决这些问题,本工作提出并开发了一个可扩展的安全EFSS服务,该服务可以部署在内部部署的开放堆栈云基础设施上,以安全地为员工提供EFSS服务。本文介绍了集成安全方法的设计,包括数据和元数据隔离、Distinct Share Link实用程序、个人和共享文件的加密密钥管理、基于沙箱的云文件同步以及带外身份验证方法。
{"title":"Open Stack Secure Enterprise File Sync and Share Turnkey Solution","authors":"Yen-Hung Kuo, Tzu-Wei Yeh, Guang-Yan Zheng, Jyun-Kai Wu, Chao-Chin Yang, Jia-Ming Lin","doi":"10.1109/CloudCom.2014.17","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.17","url":null,"abstract":"The Enterprise File Sync and Share (EFSS) is one of the most important services to provide enterprises' employees with cloud file sync, share, and collaboration services. To take enterprises' concerns into account, such as security, privacy, compliance, and regulation, the existing EFSS solutions are either using private (on-premise) or hybrid cloud service model to provide their services. They usually emphasize that files stored in the solutions are encrypted on transfer and at rest and events occurred in the service are logged as the audit trail. However, support of data encryption and audit trail are not capable of protecting enterprise sensitive data from not well addressed security issues of the EFSS service. The security issues, including employee privacy protection, management of share links and synchronized cloud files, and the secure enterprise directory integration, are pointed out in this article. To address these issues, this work proposes and develops a scalable Secure EFSS service which can be deployed on the on-premise Open Stack cloud infrastructure to securely provide employees with EFSS service. Designs of an integrated security approach are introduced in this article, including data and metadata isolations, Distinct Share Link utility, encryption key management for personal and shared files, sandbox-based cloud file synchronization, and out-of-band authentication method.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"96 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127086869","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Broker as a Service (BaaS) Pricing and Resource Estimation Model 代理即服务(BaaS)定价和资源估计模型
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.57
Mohammad Aazam, E. Huh
Rapidly increasing digital media has triggered the importance of cloud computing. Cloud computing provides ease of management and ubiquitous access facility to the growing digital content. The ratio with which digital content has been increasing, it now requires multiple clouds to interoperate for the purpose of scalability, efficient service provisioning, and better management. This scenario is known as inter-cloud computing or cloud federation. One of the key entities in inter-cloud computing is cloud broker. Cloud broker is a match-maker between the service provider and the customer. Broker plays its role to reserve resources and perform pricing and billing. Service providers experience customers having different traits and characteristics. Some tend to utilize all of the resources, while others may quit in between, due to various reasons. Based on the characteristics of customers, their resources are predicted and pricing is performed. We have proposed a model which addresses this issue by determining resources and prices, on the basis of historical record of each customer. We have implemented our model using Java / Net Beans 8.0 and tested on Cloud Sim 3.0.3 toolkit. The results presented here justify and endorse our model.
快速增长的数字媒体引发了云计算的重要性。云计算为不断增长的数字内容提供了易于管理和无处不在的访问设施。数字内容的比例一直在增加,现在需要多个云进行互操作,以实现可伸缩性、高效的服务供应和更好的管理。这种场景称为云间计算或云联合。云代理是云间计算的关键实体之一。云代理是服务提供商和客户之间的媒人。代理的作用是保留资源,执行定价和计费。服务提供商体验到的客户具有不同的特征和特点。有些人倾向于利用所有的资源,而另一些人可能会因为各种原因在两者之间退出。根据客户的特点,对客户的资源进行预测并进行定价。我们提出了一个模型,通过根据每个客户的历史记录确定资源和价格来解决这个问题。我们使用Java / Net Beans 8.0实现了我们的模型,并在Cloud Sim 3.0.3工具包上进行了测试。这里提出的结果证明并支持我们的模型。
{"title":"Broker as a Service (BaaS) Pricing and Resource Estimation Model","authors":"Mohammad Aazam, E. Huh","doi":"10.1109/CloudCom.2014.57","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.57","url":null,"abstract":"Rapidly increasing digital media has triggered the importance of cloud computing. Cloud computing provides ease of management and ubiquitous access facility to the growing digital content. The ratio with which digital content has been increasing, it now requires multiple clouds to interoperate for the purpose of scalability, efficient service provisioning, and better management. This scenario is known as inter-cloud computing or cloud federation. One of the key entities in inter-cloud computing is cloud broker. Cloud broker is a match-maker between the service provider and the customer. Broker plays its role to reserve resources and perform pricing and billing. Service providers experience customers having different traits and characteristics. Some tend to utilize all of the resources, while others may quit in between, due to various reasons. Based on the characteristics of customers, their resources are predicted and pricing is performed. We have proposed a model which addresses this issue by determining resources and prices, on the basis of historical record of each customer. We have implemented our model using Java / Net Beans 8.0 and tested on Cloud Sim 3.0.3 toolkit. The results presented here justify and endorse our model.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115063205","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 25
A Mantrap-Inspired, User-Centric Data Leakage Prevention (DLP) Approach mantrap启发,以用户为中心的数据泄漏预防(DLP)方法
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.23
R. Ko, Yu Shyang Tan, Ting Gao
The ease of sharing information through the Internet and Cloud Computing inadvertently introduces a growing problem of data leakages. At the same time, many end-users are unaware that their data was leaked or stolen since most data is leaked by operations running in the background. This paper introduces a novel user-centric, mantrap-inspired data leakage prevention (DLP) approach that can discover, present any sending of data -- both authorized and unauthorized -- to end-users and subsequently provide them the ability to stop the sending process. We implemented our own kernel module to work together with our user-space program in getting user's approval for every sending process -- giving the user full control over all outbound data sending process in their devices. With this, the end-user can always decide which data sending process should be allowed or blocked. This overcomes the limitations of current, often inflexible and inaccurate DLP solutions depending on pre-set rules and content detection. We showcase a proof-of-concept for our new way of detecting data leakages in an end user's device. This paves the way for further research covering more complex data stealing techniques, such as the use of covert channels.
通过互联网和云计算共享信息的便利性无意中引入了日益严重的数据泄露问题。同时,许多终端用户并不知道他们的数据被泄露或被盗,因为大多数数据都是在后台运行的操作泄露的。本文介绍了一种新颖的以用户为中心、受mantrap启发的数据泄漏预防(DLP)方法,该方法可以发现、呈现任何数据发送(包括授权和未经授权)给最终用户,并随后为他们提供停止发送过程的能力。我们实现了自己的内核模块,与我们的用户空间程序一起为每个发送过程获得用户的批准——让用户完全控制其设备中的所有出站数据发送过程。这样,终端用户就可以决定允许或阻止哪个数据发送进程。这克服了当前依赖于预设规则和内容检测的不灵活和不准确的DLP解决方案的局限性。我们展示了在终端用户设备中检测数据泄漏的新方法的概念验证。这为进一步研究更复杂的数据窃取技术铺平了道路,例如使用隐蔽通道。
{"title":"A Mantrap-Inspired, User-Centric Data Leakage Prevention (DLP) Approach","authors":"R. Ko, Yu Shyang Tan, Ting Gao","doi":"10.1109/CloudCom.2014.23","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.23","url":null,"abstract":"The ease of sharing information through the Internet and Cloud Computing inadvertently introduces a growing problem of data leakages. At the same time, many end-users are unaware that their data was leaked or stolen since most data is leaked by operations running in the background. This paper introduces a novel user-centric, mantrap-inspired data leakage prevention (DLP) approach that can discover, present any sending of data -- both authorized and unauthorized -- to end-users and subsequently provide them the ability to stop the sending process. We implemented our own kernel module to work together with our user-space program in getting user's approval for every sending process -- giving the user full control over all outbound data sending process in their devices. With this, the end-user can always decide which data sending process should be allowed or blocked. This overcomes the limitations of current, often inflexible and inaccurate DLP solutions depending on pre-set rules and content detection. We showcase a proof-of-concept for our new way of detecting data leakages in an end user's device. This paves the way for further research covering more complex data stealing techniques, such as the use of covert channels.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"82 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116139471","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
SaaS Dynamic Evolution Based on Model-Driven Software Product Lines 基于模型驱动软件产品线的SaaS动态演化
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.131
Fatma Mohamed, Mohammad Abu-Matar, R. Mizouni, M. Al-Qutayri, Z. Mahmoud
Cloud computing is an emerging paradigm that provides scalable computing and storage capabilities where resources are accessed on a pay-as-you-go basis. Software as a Service (SaaS) applications are hosted in the cloud and made available as services for tenants' organizations over a network. To achieve reusability in cloud computing, software and hardware resources are shared among multiple tenants. Conventional multitenant SaaS applications provide the same set of services for all tenants thus resulting in one-size-fits-all applications. However, as tenants may have different requirements, customizable SaaS solutions are needed. To accommodate evolving tenants' requirements, the SaaS instance should evolve systematically. In this paper, we present a multitenant single instance SaaS evolution platform based on Software Product Lines (SPLs). The platform specifies a set of evolution rules, based on feature modeling, that govern evolution decisions. We also present the early implementation phases of the proposed approach based on SPLs and Model Driven Architecture (MDA) concepts.
云计算是一种新兴的范例,它提供了可扩展的计算和存储功能,其中资源是在即用即付的基础上访问的。软件即服务(SaaS)应用程序托管在云中,并通过网络作为服务提供给租户组织。为了实现云计算中的可重用性,软件和硬件资源在多个租户之间共享。传统的多租户SaaS应用程序为所有租户提供相同的服务集,从而形成了“一刀切”的应用程序。但是,由于租户可能有不同的需求,因此需要可定制的SaaS解决方案。为了适应不断变化的租户需求,SaaS实例应该系统地发展。在本文中,我们提出了一个基于软件产品线(SPLs)的多租户单实例SaaS演进平台。该平台指定了一组基于特征建模的进化规则,用于管理进化决策。我们还介绍了基于SPLs和模型驱动体系结构(MDA)概念的建议方法的早期实现阶段。
{"title":"SaaS Dynamic Evolution Based on Model-Driven Software Product Lines","authors":"Fatma Mohamed, Mohammad Abu-Matar, R. Mizouni, M. Al-Qutayri, Z. Mahmoud","doi":"10.1109/CloudCom.2014.131","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.131","url":null,"abstract":"Cloud computing is an emerging paradigm that provides scalable computing and storage capabilities where resources are accessed on a pay-as-you-go basis. Software as a Service (SaaS) applications are hosted in the cloud and made available as services for tenants' organizations over a network. To achieve reusability in cloud computing, software and hardware resources are shared among multiple tenants. Conventional multitenant SaaS applications provide the same set of services for all tenants thus resulting in one-size-fits-all applications. However, as tenants may have different requirements, customizable SaaS solutions are needed. To accommodate evolving tenants' requirements, the SaaS instance should evolve systematically. In this paper, we present a multitenant single instance SaaS evolution platform based on Software Product Lines (SPLs). The platform specifies a set of evolution rules, based on feature modeling, that govern evolution decisions. We also present the early implementation phases of the proposed approach based on SPLs and Model Driven Architecture (MDA) concepts.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"70 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122550031","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 12
A Model-Based Autonomous Engine for Application Runtime Environment Configuration and Deployment in PaaS Cloud PaaS云中基于模型的应用运行时环境配置与部署自治引擎
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.80
X. Lan, Yanping Liu, Xing Chen, Yicheng Huang, Bing Lin, Wenzhong Guo
Cloud Computing is evolving as a key computing paradigm for sharing resources. One type of Cloud, which provides platform resources including all the elements of application runtime environment, is regarded as PaaS Cloud. The management of PaaS Cloud is a complex task, up to the point, where manual operation is hard to be cost effective. As the application runtime environment is supported by a set of dynamically composed, distributed elements. What is more, in order to achieve a management target, multiple operations have to be applied over the distributed and heterogeneous elements of PaaS Cloud. To improve the management of PaaS Cloud, this paper proposes to support the configuration and deployment of application runtime environment in PaaS Cloud with an autonomous engine. The automation is enabled by the definition of a domain-specific information model, which captures all the related information with the same abstractions, describing the application runtime environment, PaaS Cloud infrastructure and management targets. On top of that, a technique based on Satisfiability is described, which automatically analyses the state of the managed objects and plans required operations for maintaining it. The result from a case study is provided to validate the feasibility of this approach.
云计算正在发展成为共享资源的关键计算范式。其中一种云提供平台资源,包括应用程序运行时环境的所有元素,被认为是PaaS云。PaaS云的管理是一项复杂的任务,到目前为止,手工操作很难达到成本效益。由于应用程序运行时环境由一组动态组合的分布式元素支持。更重要的是,为了实现管理目标,必须在PaaS云的分布式和异构元素上应用多个操作。为了提高PaaS云的管理水平,本文提出用自主引擎支持PaaS云中应用运行时环境的配置和部署。自动化是通过定义特定于领域的信息模型来实现的,该模型使用相同的抽象捕获所有相关信息,描述应用程序运行时环境、PaaS云基础设施和管理目标。在此基础上,描述了一种基于Satisfiability的技术,该技术自动分析被管理对象的状态并计划维护它所需的操作。最后给出了一个案例研究的结果,验证了该方法的可行性。
{"title":"A Model-Based Autonomous Engine for Application Runtime Environment Configuration and Deployment in PaaS Cloud","authors":"X. Lan, Yanping Liu, Xing Chen, Yicheng Huang, Bing Lin, Wenzhong Guo","doi":"10.1109/CloudCom.2014.80","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.80","url":null,"abstract":"Cloud Computing is evolving as a key computing paradigm for sharing resources. One type of Cloud, which provides platform resources including all the elements of application runtime environment, is regarded as PaaS Cloud. The management of PaaS Cloud is a complex task, up to the point, where manual operation is hard to be cost effective. As the application runtime environment is supported by a set of dynamically composed, distributed elements. What is more, in order to achieve a management target, multiple operations have to be applied over the distributed and heterogeneous elements of PaaS Cloud. To improve the management of PaaS Cloud, this paper proposes to support the configuration and deployment of application runtime environment in PaaS Cloud with an autonomous engine. The automation is enabled by the definition of a domain-specific information model, which captures all the related information with the same abstractions, describing the application runtime environment, PaaS Cloud infrastructure and management targets. On top of that, a technique based on Satisfiability is described, which automatically analyses the state of the managed objects and plans required operations for maintaining it. The result from a case study is provided to validate the feasibility of this approach.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128769642","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Energy Efficiency Dilemma: P2P-cloud vs. Datacenter 能源效率困境:p2p云与数据中心
Pub Date : 2014-12-15 DOI: 10.1109/CloudCom.2014.137
Leila Sharifi, N. Rameshan, Felix Freitag, L. Veiga
Energy consumption is increasing in the IT sector and a remarkable part of this energy is consumed in data centers. Numerous techniques have been proposed to solve the energy efficiency issue in cloud systems. Recently, there are some efforts to decentralize the cloud via distributing data centers in diverse geographical positions. In this paper, we elaborate on the energy consumption of different cloud architectures, from a mega-datacenter to a P2P-cloud that provides extreme decentralization in terms of datacenter size. P2P-cloud is defined as a set of commodity host machines, connected to each other to serve a community. Our evaluation results reveal the fact that the more decentralized the system is, the less energy may be consumed in the system. Studying the energy efficiency of P2P-cloud infrastructure shows that the additional system design complexity involved is warranted with improved energy-efficiency and better locality for some services. Our analysis indicates that such P2P-cloud outperforms the classic datacenter model as long as it meets the locality conditions, which are commonplace in communities. Moreover, we illustrate how much energy can be saved for MapReduce applications with a diverse range of specifications by switching to P2P-cloud.
IT部门的能源消耗正在增加,其中很大一部分是在数据中心消耗的。已经提出了许多技术来解决云系统中的能源效率问题。最近,通过将数据中心分布在不同的地理位置来分散云计算的一些努力。在本文中,我们详细阐述了不同云架构的能耗,从大型数据中心到在数据中心规模方面提供极端去中心化的p2p云。p2p云被定义为一组商品主机,它们相互连接以服务于一个社区。我们的评估结果揭示了一个事实,即系统越分散,系统消耗的能量越少。对p2p云基础设施能源效率的研究表明,提高能源效率和某些服务更好的局部性保证了额外的系统设计复杂性。我们的分析表明,只要满足社区中常见的局部性条件,这种p2p云就优于经典的数据中心模型。此外,我们还说明了通过切换到p2p云,可以为具有各种规格的MapReduce应用程序节省多少能源。
{"title":"Energy Efficiency Dilemma: P2P-cloud vs. Datacenter","authors":"Leila Sharifi, N. Rameshan, Felix Freitag, L. Veiga","doi":"10.1109/CloudCom.2014.137","DOIUrl":"https://doi.org/10.1109/CloudCom.2014.137","url":null,"abstract":"Energy consumption is increasing in the IT sector and a remarkable part of this energy is consumed in data centers. Numerous techniques have been proposed to solve the energy efficiency issue in cloud systems. Recently, there are some efforts to decentralize the cloud via distributing data centers in diverse geographical positions. In this paper, we elaborate on the energy consumption of different cloud architectures, from a mega-datacenter to a P2P-cloud that provides extreme decentralization in terms of datacenter size. P2P-cloud is defined as a set of commodity host machines, connected to each other to serve a community. Our evaluation results reveal the fact that the more decentralized the system is, the less energy may be consumed in the system. Studying the energy efficiency of P2P-cloud infrastructure shows that the additional system design complexity involved is warranted with improved energy-efficiency and better locality for some services. Our analysis indicates that such P2P-cloud outperforms the classic datacenter model as long as it meets the locality conditions, which are commonplace in communities. Moreover, we illustrate how much energy can be saved for MapReduce applications with a diverse range of specifications by switching to P2P-cloud.","PeriodicalId":249306,"journal":{"name":"2014 IEEE 6th International Conference on Cloud Computing Technology and Science","volume":"1998 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-12-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128253099","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 22
期刊
2014 IEEE 6th International Conference on Cloud Computing Technology and Science
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1