Safer in the Clouds (Extended Abstract)

TL;DR

This paper proposes a declarative lambda-calculus-based framework for modeling cloud computing systems with embedded security policies to enhance server-side security management.

Contribution

It introduces a novel declarative programming model that explicitly enforces application-level security policies in cloud server environments.

Findings

Framework effectively models cloud systems with security policies

Enables proactive security policy enforcement on servers

Provides a formal basis for secure cloud system design

Abstract

We outline the design of a framework for modelling cloud computing systems.The approach is based on a declarative programming model which takes the form of a lambda-calculus enriched with suitable mechanisms to express and enforce application-level security policies governing usages of resources available in the clouds. We will focus on the server side of cloud systems, by adopting a pro-active approach, where explicit security policies regulate server's behaviour.