Opportunities in using a secure element to increase confidence in cloud security monitoring

Teemu Kanstrén; Sami Lehtonen; Hilkka Kukkohovi

doi:10.1109/CLOUD.2015.159

Opportunities in using a secure element to increase confidence in cloud security monitoring

Teemu Kanstrén, Sami Lehtonen, Hilkka Kukkohovi

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

2 Citations (Scopus)

Abstract

In this paper we discuss applications of a secure element (SE) such as trusted platform module (TPM) for increasing confidence in cloud security monitoring from the cloud customer viewpoint. Monitoring security of cloud-based systems is similar in many ways to traditional in-house networks, but with the difference that the actual hardware is hosted by an external party and not under our control. This provides some unique challenges and opportunities for security monitoring. We discuss these challenges, identify related opportunities for SE use, and use these to present solutions to the identified challenges. This is based on three different use cases identified together with our industry partners. These are the monitoring of elements of the host infrastructure, monitoring our virtualized guest instances running on this infrastructure, and collecting and archiving log data for later external auditing of the cloud customer services. For each of these, we describe the problem area and different ways we have applied a TPM to increase trust and visibility.

Original language	English
Title of host publication	Cloud Computing (CLOUD), 2015 IEEE 8th International Conference on
Publisher	IEEE Institute of Electrical and Electronic Engineers
Pages	1093 - 1098
ISBN (Electronic)	978-1-4673-7286-2, 978-1-4673-7287-9
DOIs	https://doi.org/10.1109/CLOUD.2015.159
Publication status	Published - 20 Aug 2015
MoE publication type	A4 Article in a conference publication
Event	IEEE 8th International Conference on Cloud Computing - New York, United States Duration: 27 Jun 2015 → 2 Jul 2015 Conference number: 8

Conference

Conference	IEEE 8th International Conference on Cloud Computing
Abbreviated title	CLOUD
Country/Territory	United States
City	New York
Period	27/06/15 → 2/07/15

Keywords

cloud computing
cryptography
monitoring
probes
virtual machining

Access to Document

10.1109/CLOUD.2015.159

Cite this

@inproceedings{f9e1f3978e884b5dacb48f65376b7725,

title = "Opportunities in using a secure element to increase confidence in cloud security monitoring",

abstract = "In this paper we discuss applications of a secure element (SE) such as trusted platform module (TPM) for increasing confidence in cloud security monitoring from the cloud customer viewpoint. Monitoring security of cloud-based systems is similar in many ways to traditional in-house networks, but with the difference that the actual hardware is hosted by an external party and not under our control. This provides some unique challenges and opportunities for security monitoring. We discuss these challenges, identify related opportunities for SE use, and use these to present solutions to the identified challenges. This is based on three different use cases identified together with our industry partners. These are the monitoring of elements of the host infrastructure, monitoring our virtualized guest instances running on this infrastructure, and collecting and archiving log data for later external auditing of the cloud customer services. For each of these, we describe the problem area and different ways we have applied a TPM to increase trust and visibility.",

keywords = "cloud computing, cryptography, monitoring, probes, virtual machining",

author = "Teemu Kanstr{\'e}n and Sami Lehtonen and Hilkka Kukkohovi",

year = "2015",

month = aug,

day = "20",

doi = "10.1109/CLOUD.2015.159",

language = "English",

pages = "1093 -- 1098",

booktitle = "Cloud Computing (CLOUD), 2015 IEEE 8th International Conference on",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

note = "IEEE 8th International Conference on Cloud Computing, CLOUD ; Conference date: 27-06-2015 Through 02-07-2015",

}

Kanstrén, T, Lehtonen, S & Kukkohovi, H 2015, Opportunities in using a secure element to increase confidence in cloud security monitoring. in Cloud Computing (CLOUD), 2015 IEEE 8th International Conference on. IEEE Institute of Electrical and Electronic Engineers, pp. 1093 - 1098, IEEE 8th International Conference on Cloud Computing, New York, New York, United States, 27/06/15. https://doi.org/10.1109/CLOUD.2015.159

Opportunities in using a secure element to increase confidence in cloud security monitoring. / Kanstrén, Teemu; Lehtonen, Sami; Kukkohovi, Hilkka.
Cloud Computing (CLOUD), 2015 IEEE 8th International Conference on. IEEE Institute of Electrical and Electronic Engineers, 2015. p. 1093 - 1098.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Opportunities in using a secure element to increase confidence in cloud security monitoring

AU - Kanstrén, Teemu

AU - Lehtonen, Sami

AU - Kukkohovi, Hilkka

N1 - Conference code: 8

PY - 2015/8/20

Y1 - 2015/8/20

N2 - In this paper we discuss applications of a secure element (SE) such as trusted platform module (TPM) for increasing confidence in cloud security monitoring from the cloud customer viewpoint. Monitoring security of cloud-based systems is similar in many ways to traditional in-house networks, but with the difference that the actual hardware is hosted by an external party and not under our control. This provides some unique challenges and opportunities for security monitoring. We discuss these challenges, identify related opportunities for SE use, and use these to present solutions to the identified challenges. This is based on three different use cases identified together with our industry partners. These are the monitoring of elements of the host infrastructure, monitoring our virtualized guest instances running on this infrastructure, and collecting and archiving log data for later external auditing of the cloud customer services. For each of these, we describe the problem area and different ways we have applied a TPM to increase trust and visibility.

AB - In this paper we discuss applications of a secure element (SE) such as trusted platform module (TPM) for increasing confidence in cloud security monitoring from the cloud customer viewpoint. Monitoring security of cloud-based systems is similar in many ways to traditional in-house networks, but with the difference that the actual hardware is hosted by an external party and not under our control. This provides some unique challenges and opportunities for security monitoring. We discuss these challenges, identify related opportunities for SE use, and use these to present solutions to the identified challenges. This is based on three different use cases identified together with our industry partners. These are the monitoring of elements of the host infrastructure, monitoring our virtualized guest instances running on this infrastructure, and collecting and archiving log data for later external auditing of the cloud customer services. For each of these, we describe the problem area and different ways we have applied a TPM to increase trust and visibility.

KW - cloud computing

KW - cryptography

KW - monitoring

KW - probes

KW - virtual machining

U2 - 10.1109/CLOUD.2015.159

DO - 10.1109/CLOUD.2015.159

M3 - Conference article in proceedings

SP - 1093

EP - 1098

BT - Cloud Computing (CLOUD), 2015 IEEE 8th International Conference on

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - IEEE 8th International Conference on Cloud Computing

Y2 - 27 June 2015 through 2 July 2015

ER -

Opportunities in using a secure element to increase confidence in cloud security monitoring

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this