Cluster Computing

, Volume 17, Issue 3, pp 691–702 | Cite as

A secure smart-work service model based OpenStack for Cloud computing

  • Jin-Mook Kim
  • Hwa-Young Jeong
  • Ilkwon Cho
  • Sun Moo Kang
  • Jong Hyuk Park
Article

Abstract

Cloud computing technology is a general concept and idea such as existing distributed computing, parallel computing, Pervasive computing and Ubiquitous computing. We have been studying OpenStack which was an Open cloud project under the KOREN (Korea Advanced Research Network) environments. In this paper, we propose a secure smart-work service model-based OpenStack. There are mainly two kinds of security breaches that can occur under the proposed environment. Nova is vulnerable to DoS attack in OpenStack. SQL Injection can be attacked in the process during which the user requests authorization, which results in data being saved in Swift. Looking more deeply into these two types of attack, we can divide DoS attack into Jolt2, Tear-drop, and SYN-Flooding attack. We simulated attacks in an experimental environment and summarized the results. With the objective of being able to provide Smart-Work service in the KOREN environment, we proposed solutions to various kinds of attacks against the security system and carried out modeling work with the data from the experiment conducted in the Cloud service environment we examined above.

Keywords

OpenStack Cloud computing Cloud service Smart-work model Security threats Evaluation Modeling 

References

  1. 1.
    Mell, P., Grance, T.: NIST Cloud Computing Definitions. http://csrc.nist.gov/gorups/SNS/cloudcomputing (2009)
  2. 2.
    Grandison, T., Maximillen, M., Thorpe, S., Alba, A.: Towards a formal definition of a computing cloud. In: Proceeding of IEEE Services, 2010 6th World Congress on Services, 5–10 July 2010 Hawthorne, NY, USA, pp. 191–192 (2010) CrossRefGoogle Scholar
  3. 3.
    Thorpe, S.: Virtual machine history model framework for a data cloud digital investigation. J. Converg. 3(4), 9–14 (2012) Google Scholar
  4. 4.
    Baek, S.-J., Park, S.-M., Yang, S.-H., Song, E.-H., Jeong, Y.-S.: Efficient server virtualization using grid service infrastructure. J. Inf. Process. Syst. 6(4), 553–562 (2010) Google Scholar
  5. 5.
    Song, E.-H., Kim, H.-W., Jeong, Y.-S.: Visual monitoring system of multi-hosts behavior for trustworthiness with mobile cloud. J. Inf. Process. Syst. 8(2), 347–358 (2012) Google Scholar
  6. 6.
    Gellman, R.: Privacy in the Clouds: Risks to Privacy and Confidentiality from Cloud Computing. http://www.worldprivacyforum.org/pdf/WPF_Cloud_Privacy_Report.pdf (2009)
  7. 7.
    Balduzzi, M., Zaddach, J., Balzarotti, D., Kirda, E., Loureiro, S.: A security analysis of amazon’s elastic compute cloud service. In: Proceedings of the 27th Annual ACM Symposium on Applied Computing, New York, USA, pp. 1427–1434 (2012). doi:10.1145/2245276.2232005 CrossRefGoogle Scholar
  8. 8.
    Bindra, G.S.: Cloud security: analysis and risk management of VM images. In: 2012 International Conference on Information and Automation (ICIA), New Delhi, India, 6–8 June 2012, pp. 646–651 (2012) CrossRefGoogle Scholar
  9. 9.
    Rosado, D.G., Gomez, R., Mellado, D., Fernandez-Medina, E.: Security analysis in the migration to cloud environments. Future Internet 4(2), 469–487 (2012). doi:10.3390/fi4020469 CrossRefGoogle Scholar
  10. 10.
    Beloglazov, A., Piraghaj, S.F., Alrokayan, M., Buyya, R.: Deploying OpenStack on CentOS using the KVM hypervisor and GlusterFS distributed file system. Technical Report CLOUD-TR-2012-3 (2012) http://www.cloudbus.org/reports/OpenStack-CentOS-KVM-glusterfs-guide-Aug2012.pdf
  11. 11.
    Beernaert, L., Matos, M., Vilaca, R., Oliveira, R.: Automatic elasticity in OpenStack. In: Proceeding of the Workshop on Secure and Dependable Middleware for Cloud Monitoring and Management (2012). doi:10.1145/2405186.2405188 Google Scholar
  12. 12.
    Sefraoui, O., Aissaoui, M., Eleuldj, M.: OpenStack: toward an open-source solution for cloud computing. Int. J. Comput. Appl. 55(3), 38–42 (2012) Google Scholar
  13. 13.
    Jackson, K.: OpenStack Cloud Computing Cookbook. Packt Publishing, Birmingham (2012). ISBN 9781849517324 Google Scholar
  14. 14.
    OpenStack LLC: Openstack: The Open Source Cloud Operating System. http://www.openstack.org/software/ (2012)
  15. 15.
    OpenStack LLC: OpenStack Compute Administration Manual. http://docs.openstack.org/trunk/openstack-compute/admin/content/index.html (2012)
  16. 16.
    OpenStack LLC: OpenStack Install and Deploy Manual. http://docs.openstack.org/diablo/openstack-compute/admin/os-compute-adminguide-diablo.pdf (2012)

Copyright information

© Springer Science+Business Media New York 2013

Authors and Affiliations

  • Jin-Mook Kim
    • 1
  • Hwa-Young Jeong
    • 2
  • Ilkwon Cho
    • 3
  • Sun Moo Kang
    • 3
  • Jong Hyuk Park
    • 4
  1. 1.Division of Information Technology EducationSunmoon UniversityAsanKorea
  2. 2.Humanitas College of Kyunghee UniversitySeoulKorea
  3. 3.National Information Society AgencySeoulKorea
  4. 4.Department of Computer Science and EngineeringSeoul National University of Science and TechnologySeoulKorea

Personalised recommendations