InfoQ Homepage Cloud Security Content on InfoQ

Articles

RSS Feed

Newer Older

Software Engineering Meets Services and Cloud Computing

In this IEEE article, authors Stephen Yau and Ho An talk about application development using service-oriented architecture and cloud computing technologies. They also discuss application development challenges like security in a multi-tenant environment, quality-of-service monitoring, and mobile computing.

Stephen S. Yau Ho G. An
on Jan 04, 2012
Regulatory Compliant Cloud Computing: Rethinking web application architectures for the cloud

Not all data is sensitive and hence an equal and balanced investment in securing all data categories is not justified. This article presents an architecture that leverages cloud-computing, cloud-storage and enterprise key-management Infrastructure(EKMI) to lower costs while complying to data-security regulations.

Arshad Noor
on Dec 16, 2011
Introduction to Cloud Security Architecture from a Cloud Consumer's Perspective

Security concerns are the number one barrier to cloud services adoption. How do we evaluate a vendor's solution? What is an optimal security architecture? What are consumer versus provider responsibilities? What are industry standard patterns in this regard? This article answers some of these questions based on first hand experience dealing with large scale cloud adoption.

Subra Kumaraswamy
on Dec 07, 2011
Architecting a Cloud-Scale Identity Fabric

In this IEEE article, author Eric Olden discusses an identity fabric that links multiple applications to a single identity to manage the volume of user identities that network administrators must secure and to enable a full-scale cloud adoption.

Eric Olden
on Jun 29, 2011
Cloud Computing Roundtable

In this IEEE panel discussion article, guest editors Ivan Arce and Anup Ghosh facilitated the discussion on cloud computing security risks. The panelists are Eric Grosse (Google Security), John Howie (Microsoft), James Ransome (Cisco), Jim Reavis (Cloud Security Alliance) and Stephen Schmidt (Amazon Web Services).

Anup Ghosh Ivan Arce
on Apr 11, 2011
Wonderland Of SOA Governance

Michael Poulin elaborates on the differences between of governance and management and tries to explore the 'wonderland' of governance in a service-oriented environment. He defines SOA Governance, explores the relationship between governance and enterprise architecture, and discusses accountability and ownership of governance efforts, and how practitioners can instrument SOA governance.

Michael Poulin
on Nov 11, 2009
Enhanced Detection of Malware

This article, from Intel, discusses significant new threats to host agents, outlines a generic architecture for malware detection, based on enhanced cloud computing, describes how Intel platform technologies can be used to enhance computing solutions, and ends with a threat analysis of the approaches presented. Malware that masks its presence from traditional security agents is the article focus.

and Yuriy Bulygin Carlos Rozas Divya Kolar Sunder Hormuzd Khosravi
on Sep 30, 2009
Encrypting the Internet

The authors, from Intel, offer a three pronged approach to providing secure transmission of high volume HTML traffic: new CPU instructions to accelerate cryptographic operations; a novel implementation of the RSA algorithm to accelerate public key encryption; and using SMT to balance web server and cryptographic operations. Their approach, they claim, leads to significant cost savings.

Satyajit Grover Xiaozhu Kang Michael Kounavis andFrank Berry
on Sep 22, 2009
The Dark Cloud: Understanding and Defending against Botnets and Stealthy Malware

Botnets are the latest scourge to hit the Internet and this article defines a botnet (a collection of distributed computers or systems that has been taken over by rogue software), examines the botnet life cycle, and presents several promising anti-botnet defense strategies including canary detectors, white lists, and malware traces.

Carl Livadas Eve Schooler Jaideep Chandrashekar Steve Orrin
on Aug 04, 2009
Virtual Panel on Cloud Computing

In this virtual panel, InfoQ wants to find out from leading cloud experts what are the benefits brought by cloud computing as well as the constraints in using them, what is better to use, a public or a private cloud, is the cloud interoperability needed, what is the difference between providing infrastructure or a platform, and how can a client enforce regulatory compliance.

Abel Avram
on May 19, 2009
The Economics of Service Orientation

This article explores the structural economic changes brought up by service orientation. Most IT organizations today are under enormous financial pressure trying to keep rising costs and flat budgets in synch. The restructuring brought about by the concept of services and reuse at the service level promises long lasting relief from the cost treadmill.

Parviz Peiravi Mark Chang Enrique Castro-Leon Jackson He
on May 16, 2009
Architecture & Design

Introduction to Virtual Service Oriented Grids

This article discusses the combination of three ideas, virtualization, service-orientation, and grid computing into a single concept and computing platform concept, "virtual service-oriented grids." In addition to history and definitions, the article addresses an approach, with an example, to analyzing and implementing this technology.

Mark Chang Jackson He Parviz Peiravi Enrique Castro-Leon
on May 06, 2009