Title: Security risk analysis of IaaS based on the abstract state machine model

Authors: Xiang Shuang; Zhao Bo; Xiao Yu; An Yang

Addresses: School of Computer Science, Wuhan University, Wuhan, 430072, China; Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan University, Wuhan, 430072, China ' School of Computer Science, Wuhan University, Wuhan, 430072, China; Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan University, Wuhan, 430072, China ' School of Computer Science, Wuhan University, Wuhan, 430072, China; Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan University, Wuhan, 430072, China ' School of Computer Science, Wuhan University, Wuhan, 430072, China; Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan University, Wuhan, 430072, China

Abstract: In order to handle the problem of a lack of formal modelling for the IaaS and its validation, this paper focuses on the interactions between internal components triggered by user behaviour, modelling the IaaS service as the interactions between the users and the entities within inter-cloud platform, as well as the entities within cloud platform. We take the abstract state machine (ASM) as operation semantics for formalising communication model when using IaaS platform services, which can show the changes of dynamic performance about the platform status. Meanwhile, we simplify the model without sacrificing the service correctness from user's perspective. Finally, we give the security attributes of cloud services and find some threats prone to service failure by using model checking tools UPPAAL to analyse the performance of current IaaS platform. This paper also provides a theory fundamental for the security enforcement of IaaS service and contributes to the prevailing of cloud computing.

Keywords: infrastructure-as-a-service; IaaS; cloud services modelling; risk analysis; abstract state machines; ASM; UPPAAL; risk assessment; cloud computing; semantics; cloud security.

DOI: 10.1504/IJHPCN.2016.080416

International Journal of High Performance Computing and Networking, 2016 Vol.9 No.5/6, pp.431 - 442

Available online: 22 Nov 2016 *

Full-text access for editors Access for subscribers Purchase this article Comment on this article