Abstract:Most of the current cloud computing platforms offer Infrastructure as a Service (IaaS) model, which aims to provision basic virtualized computing resources as on-demand and dynamic services. Nevertheless, a single cloud does not have limitless resources to offer to its users, hence the notion of an Inter-Cloud environment where a cloud can use the infrastructure resources of other clouds. However, there is no common framework in existence that allows the service owners to seamlessly provision even some basic services across multiple cloud service providers, albeit not due to any inherent incompatibility or proprietary nature of the foundation technologies on which these cloud platforms is built. In this paper we present a novel solution which aims to cover a gap in a subsection of this problem domain. Our solution offers a security architecture that enables service owners to provision a dynamic and service-oriented secure virtual private network on top of multiple cloud IaaS providers. It does this by leveraging the scalability, robustness and flexibility of peer-to-peer overlay techniques to eliminate the manual configuration, key management and peer churn problems encountered in setting up the secure communication channels dynamically, between different components of a typical service that is deployed on multiple clouds. We present the implementation details of our solution as well as experimental results carried out on two commercial clouds. We have designed a secure communication framework for inter-cloud computing model.We use three security schemes in a novel way to minimize the performance overhead.We implemented our design and measured the overhead caused by the security features on two commercial clouds.Our results show the cost of the throughput overhead as a 5% decrease in throughput.Our results show the cost of the latency overhead as a 10% increase in latency.

SICS: Secure In-Cloud Service Function Chaining

Csfc: Building Credible Service Function Chain on the Cloud

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

Generic and agile service function chain verification on cloud

Vsfc: Generic and Agile Verification of Service Function Chains in the Cloud

Towards Optimal Outsourcing Of Service Function Chain Across Multiple Clouds

Privacy-preserving Network Functionality Outsourcing.

A Privacy-Preserving Outsourcing Computing Scheme based on Secure Trusted Environment

Privacy-Preserving Cloud-Based Firewall for IaaS-based Enterprise

Service Chaining for Hybrid Network Function

Building In-the-Cloud Network Functions: Security and Privacy Challenges

A scalable and dynamic application-level secure communication framework for inter-cloud services

A New Approach for Delivering Customized Security Everywhere: Security Service Chain

Application-aware and Dynamic Security Function Chaining for Mobile Networks

Service Function Chain Orchestration Across Multiple Clouds

Cloud Security Gateway Based on Real-Time Processing

Research on Deployment of Service Function Chains under Hybrid Network Functions

On Achieving Trustworthy Service Function Chaining.

A Firewall Of Two Clouds: Preserving Outsourced Firewall Policy Confidentiality With Heterogeneity

Network Function Outsourcing System Based on Prefix-Preserving Encryption