Main Challenges and Requirements

Main Challenges and Requirements

1. The first challenge, the Virtual Control Center (VCC) should be trusted to operate as expected. Managing self-managed services using the VCC expose the following issues:

   • 1.The VCC must provide self-managed services without compromising security and data consistency. 2.The VCC must ensure that the Virtual Machine Manager (VMM) is secure, trusted, and reliable
     • 3.The VMM have to ensure that the VCC has the element of trustworthiness. 4.Both the VMM and VCC have to ensure that the data is stored securely and only accessed when their execution status is treated.
       • 5.VMM and VCC need assurance about each other’s identity.

2. The second challenge, which is about providing trustworthiness in self-managed services, requires the following:

   • 1.Understand the relative position of the resources 2.Considering the challenge of the policy distribution, coordination and management across the Cloud entities 3.The distance and the communication medium between data centres
     • 4.Self-managed services must consider federated Clouds and they must also be designed to enforce Cloud provider-related policies especially in using other Cloud resources. 5.Key management is a fundamental issue when discussing Cloud Security especially issue concerning the employees as the potential ‘insiders’.

3. This section discusses the requirements that could address the problems identified under the challenges section. A trustworthy management of self-managed services requires the following:

   • 1.The VCC and VMM should attest to each other’s execution environment. 2.The VCC and VMM need to have management agents that are trusted to behave as expected.
     • 3.The VCC and VMM should provide protected storage capabilities.
     • 4.The VCC and VMM should be able to exchange identification certificates with each other in a secure and authentic way. 5.The VCC needs to be resilient and scalable to provide distributed and coordinated services.
       • 6.The VCC should provide hardware trustworthiness mechanisms to prevent infrastructure single point of failure.

4. Providing self-managed services requires the following

   • 1.A mechanism to attest to VMM’s trustworthiness to ensure that they would enforce user properties. 2.A mechanism to communicate user properties across Cloud-related components and ensuring that the properties are not tampered.
     • 3.Providing secure information sharing across Cloud components.
       • 4.Mitigating the insider threats
         • 5.Standarization. Most technologies used in the Cloud are not new. 6.Interoperability. This is an essential requirement to avoid vendor lock problems