Browse by author
Lookup NU author(s): Dr Dev JhaORCiD
This work is licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0).
With the unprecedented demand for cloud computing, ensuring trust in the underlying environment is challenging. Applications executing in the cloud are prone to attacks of different types including malware, network and data manipulation. These attacks may remain undetected for a significant length of time thus causing a lack of trust. Untrusted cloud services can also lead to business losses in many cases and therefore need urgent attention. In this paper, we present Trusted Public Cloud (TPC), a generic framework ensuring the Zero-trust security of client machine. It tracks the system state, alerting the user of unexpected changes in the machine’s state, thus increasing the run-time detection of security vulnerabilities. We validated TPC on Microsoft Azure with Local, Software Trusted Platform Module (SWTPM) and Software Guard Extension (SGX)-enabled SWTPM security providers. We also evaluated the scalability of TPC on Amazon Web Services (AWS) with a varying number of client machines executing in a concurrent environment. The execution results show the effectiveness of TPC as it takes a maximum of 35.6 seconds to recognise the system state when there are 128 client machines attached.
Author(s): Jha DN, Lenton G, Asker J, Blundell D, Higgins M, Wallom D
Publication type: Article
Publication status: Published
Journal: IEEE Transactions on Cloud Computing
Year: 2024
Pages: epub ahead of print
Online publication date: 20/11/2024
Acceptance date: 10/10/2024
Date deposited: 29/10/2024
ISSN (electronic): 2168-7161
Publisher: IEEE
URL: https://doi.org/10.1109/TCC.2024.3503358
DOI: 10.1109/TCC.2024.3503358
ePrints DOI: 10.57711/efv3-f511
Altmetrics provided by Altmetric