Authors:
Asma Guesmi
1
;
Patrice Clemente
2
;
Frederic Loulergue
1
and
Pascal Berthomé
2
Affiliations:
1
LIFO EA 4022 and Université d'Orléans, France
;
2
LIFO EA 4022 and INSA Centre-Val de Loire, France
Keyword(s):
Broker, Cloud computing, Security, Requirements.
Related
Ontology
Subjects/Areas/Topics:
Data and Application Security and Privacy
;
Formal Methods for Security
;
Information and Systems Security
;
Security and Privacy in IT Outsourcing
;
Security and Privacy in the Cloud
;
Security in Information Systems
;
Security Requirements
;
Security Verification and Validation
Abstract:
It is difficult for customers to select the adequate cloud providers which fit their needs, as the number of cloud
offerings increases rapidly. Many works thus focus on the design of cloud brokers. Unfortunately, most of
them do not consider precise security requirements of customers. In this paper, we propose a methodology
defined to place services in a multi-provider cloud environment, based on functional and non-functional requirements,
including security requirements. To eliminate inner conflicts within customers requirements, and
to match the cloud providers offers with these customers requirements, we use a formal analysis tool: Alloy.
The broker uses a matching algorithm to place the required services in the adequate cloud providers, in a way
that fulfills all customer requirements. We finally present a prototype implementation of the proposed broker.