PROJECT TITLE :

A semi-automatic and trustworthy scheme for continuous cloud service certification - 2017

ABSTRACT:

Ancient assurance solutions for software-based systems depend upon static verification techniques and assume continuous availability of trusted third parties. With the advent of cloud computing, these solutions become ineffective since services/applications are flexible, dynamic, and change at run time, at high rates. Although several assurance approaches have been defined, cloud requires a step-modification moving current assurance techniques to completely embrace the cloud peculiarities. During this paper, we provide a rigorous and adaptive assurance technique based mostly on certification, towards the definition of a transparent and trusted cloud ecosystem. It aims to increase the confidence of cloud customers that each piece of the cloud (from its infrastructure to hosted applications) behaves obviously and in line with their requirements. We 1st gift a check-based certification theme proving non-functional properties of cloud-based services. The theme is driven by non-useful requirements outlined by the certification authority and by a model of the service below certification. We tend to then define an automatic approach to verification of consistency between requirements and models, that is at the basis of the chain of trust supported by the certification theme. We also present a nonstop certificate life cycle management method together with each certificate issuing and its adaptation to handle contextual changes. Finally, we tend to describe our certification framework and an experimental analysis of its performance, quality, applicability, and sensible usability during a real industrial state of affairs, which considers Engineering Ingegneria Informatica S.p.A. ENGpay online payment system.