As cloud computing technology turning to mature, cloud services have become a trust-based service. Users’ distrust of the security and performance of cloud services will hinder the rapid deployment and development of cloud services. So cloud service providers (CSPs) urgently need a way to prove that the infrastructure and the behavior of cloud services they provided can be trusted. The challenge here is how to construct a novel framework that can effective verify the security conformance of cloud services, which focuses on fine-grained descriptions of cloud service behavior and security service level aggreements (SLAs). In this paper, we propose a novel approach to verify cloud service security conformance, which reduces the description gap between the CSP and users through modeling cloud service behavior and security SLA, these models enable a systematic integration of security constraints and service behavior into cloud while using UPPAAL to check the performance and security conformance. The proposed approach is validated through case study and experiments with real cloud service based on Open-Stack, which illustrates CloudSec approach effectiveness and can be applied on realistic cloud scenario.

中文翻译：

---

基于行为感知的基于SLA的框架，可确保云服务的安全一致性

随着云计算技术的成熟，云服务已成为基于信任的服务。用户对云服务的安全性和性能的不信任将阻碍云服务的快速部署和发展。因此，云服务提供商（CSP）迫切需要一种方法来证明其提供的云服务的基础架构和行为可以被信任。这里的挑战是如何构建一个可以有效验证云服务安全一致性的新颖框架，该框架着重于对云服务行为和安全服务级别协议（SLA）的细粒度描述。在本文中，我们提出了一种新颖的方法来验证云服务安全一致性，该方法通过对云服务行为和安全SLA进行建模来缩小CSP与用户之间的描述差距，这些模型可以将安全约束和服务行为系统集成到云中，同时使用UPPAAL检查性能和安全一致性。通过案例研究和基于Open-Stack的真实云服务进行实验验证了该方法的有效性，该方法说明了CloudSec方法的有效性，可以应用于现实的云场景。