Abstract:The cloud model allows many enterprises able to outsource computing resources at an affordable price without having to commit the expense upfront. Although the cloud providers are responsible for the security of the cloud, there are still many security concerns due to inherently complex model the cloud providers operate on (e.g.,multi-tenancy). In addition, the enterprises whose services have migrated into the cloud have a preference for their own cybersecurity situation awareness capability on top of the security mechanisms provided by the cloud providers. In this way, the enterprises can monitor the performance of the security offerings of the cloud and have a choice to decide and select potential response strategies more appropriate to the enterprise in the presence of the attack where the defense provided by the cloud doesn't work for them. However, some response strategies, such as Moving Target Defense (MTD) techniques shown to be effective to secure cloud, cannot be deployed by the enterprise themselves. In this paper, we propose a framework that enables better collaboration between enterprises and cloud providers. Our proposed framework, which offers more in-depth security analysis based on the set of most advanced security metrics, allows the security experts of the enterprise to obtain better situational awareness in the cloud. With better and more effective situation awareness of cloud security, our framework can support better decision-making and further allows to deploy more appropriate threat responses to protect the outsourced resources. We also propose a secure protocol which can facilitate more secure communication between the enterprises and cloud provider. Using our proposed secure protocol, which is based on authentication and key exchange mechanism, the enterprises can send a secure request to the cloud provider to perform a selected defensive strategy.

CloudSEC: A Cloud Architecture for Composing Collaborative Security Services

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Intrinsic Security and Self-Adaptive Cooperative Protection Enabling Cloud Native Network Slicing

A Cloud Cooperative Attack System for networking anti-stealth combat

Collaborative Intrusion Detection As a Service in Cloud Computing Environment

A Cloud Computing Based Architecture for Cyber Security Situation Awareness

Achieving Secure and Efficient Data Collaboration in Cloud Computing

SECO: Secure and Scalable Data Collaboration Services in Cloud Computing

Collaborative Security Assessment of Cloud-Edge-device Distributed Systems Based on Order Parameters

Cloud-network-end Collaborative Security for Wireless Networks: Architecture, Mechanisms, and Applications

Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing

An Intelligent Edge-Cloud Collaborative Framework for Communication Security in Distributed Cyber-Physical Systems

Cloud Computing for Malicious Encrypted Traffic Analysis and Collaboration

A Cloud-Edge Based Data Security Architecture for Sharing and Analysing Cyber Threat Information.

NetSecu: A Collaborative Network Security Platform for In-network Security

Trust-Based Secure Multi-Cloud Collaboration Framework in Cloud-Fog-Assisted IoT

Cyber Situation Awareness Monitoring and Proactive Response for Enterprises on the Cloud

CloudSec: A Novel Approach to Verifying Security Conformance at the Bottom of the Cloud

A Collaborative Network Security Management System in Metropolitan Area Network

Distributed Secure Service Composition with Declassification in Mobile Clouds

Secure Service Composition with Information Flow Control in Service Clouds