Igor Ivkic, Dominik Thiede, N. Race, M. Broadbent, Antonios Gouglidis
{"title":"A Security Evaluation Framework for Software-Defined Network Architectures in Data Center Environments","authors":"Igor Ivkic, Dominik Thiede, N. Race, M. Broadbent, Antonios Gouglidis","doi":"10.48550/arXiv.2304.05776","DOIUrl":"https://doi.org/10.48550/arXiv.2304.05776","url":null,"abstract":"The importance of cloud computing has grown over the last years, which resulted in a significant increase of Data Center (DC) network requirements. Virtualisation is one of the key drivers of that transformation and enables a massive deployment of computing resources, which exhausts server capacity limits. Furthermore, the increased network endpoints need to be handled dynamically and centrally to facilitate cloud computing functionalities. Traditional DCs barely satisfy those demands because of their inherent limitations based on the network topology. Software-Defined Networks (SDN) promise to meet the increasing network requirements for cloud applications by decoupling control functionalities from data forwarding. Although SDN solutions add more flexibility to DC networks, they also pose new vulnerabilities with a high impact due to the centralised architecture. In this paper we propose an evaluation framework for assessing the security level of SDN architectures in four different stages. Furthermore, we show in an experimental study, how the framework can be used for mapping SDN threats with associated vulnerabilities and necessary mitigations in conjunction with risk and impact classification. The proposed framework helps administrators to evaluate the network security level, to apply countermeasures for identified SDN threats, and to meet the networks security requirements.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"53 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-04-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122109057","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Sebastiano Panichella, Mohammad Imranur Rahman, D. Taibi
{"title":"Structural Coupling for Microservices","authors":"Sebastiano Panichella, Mohammad Imranur Rahman, D. Taibi","doi":"10.5220/0010481902800287","DOIUrl":"https://doi.org/10.5220/0010481902800287","url":null,"abstract":"Cloud-native Applications are 'distributed, elastic and horizontal-scalable systems composed of (micro)services which isolate states in a minimum of stateful components'. Hence, an important property is to ensure a low coupling and a high cohesion among the (micro)services composing the cloud-native application. Loosely coupled and highly cohesive services allow development teams to work in parallel, reducing the communication overhead between teams. However, despite both practitioners and researchers agree on the importance of this general property, there are no validated metrics to effectively measure or test the actual coupling level between services. In this work, we propose ways to compute and visualize the coupling between microservices, by extending and adapting the concepts behind the computation of the traditional structural coupling. We validate these measures with a case study involving 17 open-source projects and we provide an automatic approach to measure them. The results of this study highlight how these metrics provide to practitioners a quantitative and visual view of services compositions, which can be useful to conceive advanced systems to monitor the evolution of the service.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-03-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128790376","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"SimFaaS: A Performance Simulator for Serverless Computing Platforms","authors":"Nima Mahmoudi, Hamzeh Khazaei","doi":"10.5220/0010376500230033","DOIUrl":"https://doi.org/10.5220/0010376500230033","url":null,"abstract":"Developing accurate and extendable performance models for serverless platforms, aka Function-as-a-Service (FaaS) platforms, is a very challenging task. Also, implementation and experimentation on real serverless platforms is both costly and time-consuming. However, at the moment, there is no comprehensive simulation tool or framework to be used instead of the real platform. As a result, in this paper, we fill this gap by proposing a simulation platform, called SimFaaS, which assists serverless application developers to develop optimized Function-as-a-Service applications in terms of cost and performance. On the other hand, SimFaaS can be leveraged by FaaS providers to tailor their platforms to be workload-aware so that they can increase profit and quality of service at the same time. Also, serverless platform providers can evaluate new designs, implementations, and deployments on SimFaaS in a timely and cost-efficient manner. SimFaaS is open-source, well-documented, and publicly available, making it easily usable and extendable to incorporate more use case scenarios in the future. Besides, it provides performance engineers with a set of tools that can calculate several characteristics of serverless platform internal states, which is otherwise hard (mostly impossible) to extract from real platforms. We show how SimFaaS facilitates the prediction of essential performance metrics such as average response time, probability of cold start, and the average number of instances reflecting the infrastructure cost incurred by the serverless computing provider. We evaluate the accuracy and applicability of SimFaaS by comparing the prediction results with real-world traces from Amazon AWS Lambda.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"2012 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-02-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129659344","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Runlet: A Cross-platform IoT Tool for Interactive Job Execution Over Heterogeneous Devices with Reliable Message Delivery","authors":"V. L. Cândido, Flávio de Oliveira Silva","doi":"10.14393/UFU.DI.2020.716","DOIUrl":"https://doi.org/10.14393/UFU.DI.2020.716","url":null,"abstract":"IoT uses different hardware and software components in a mixed environment, and for the management of the devices, interoperability and reliability are key issues. Interactive job execution is another important concept for the management in different scenarios. The literature lacks a tool with such characteristics. This work fills the gap in the state-of-the-art by introducing a tool that achieves interactive job execution over a network of heterogeneous devices with reliable message delivery. The tool leverages the power of the protocol Advanced Message Queuing Protocol (AMQP) and the message broker RabbitMQ. AMQP is an open standard Machine-to-Machine (M2M) publish/subscribe messaging protocol optimized for high-latency and unreliable networks that enables client applications to communicate with conforming messaging middleware brokers. RabbitMQ is an open-source message broker that supports various message protocols. The architecture of Runlet is discussed in detail, including the reasoning behind architectural decisions. The evaluation is conducted through an experimental approach that assesses interactivity and reliability on a testbed of devices composed of single-board ARM computers and laptop devices. The experimental results show that the application offers interactivity under different scenarios and provides reliable message delivery after node and","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-08-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132006822","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"QoS-aware Autonomic Adaptation of Microservices Placement on Edge Devices","authors":"Bruno Stévant, Jean-Louis Pazat, Alberto Blanc","doi":"10.5220/0009319902370244","DOIUrl":"https://doi.org/10.5220/0009319902370244","url":null,"abstract":"Given the widespread availability of cheap computing and storage devices, as well as the increasing popularity of high speed network connections (e.g., Fiber To The Home (FTTH)), it is feasible for groups of users to share their own resources to build a service hosting platform. In such use-case, the response-time of the service is critical for the quality of experience. We describe a solution to optimize the response-time in the case of an application based on microservices. This solution leverages the flexibility of microservices to dynamically adapt the placement of the application workloads on edge devices. We validate this solution on a production edge infrastructure and discuss possible strategies for the decision rules.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114178158","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
F. Leymann, Johanna Barzen, Michael Falkenthal, Daniel Vietz, Benjamin Weder, Karoline Wild
{"title":"Quantum in the Cloud: Application Potentials and Research Opportunities","authors":"F. Leymann, Johanna Barzen, Michael Falkenthal, Daniel Vietz, Benjamin Weder, Karoline Wild","doi":"10.5220/0009819800090024","DOIUrl":"https://doi.org/10.5220/0009819800090024","url":null,"abstract":"Quantum computers are becoming real, and they have the inherent potential to significantly impact many application domains. We sketch the basics about programming quantum computers, showing that quantum programs are typically hybrid consisting of a mixture of classical parts and quantum parts. With the advent of quantum computers in the cloud, the cloud is a fine environment for performing quantum programs. The tool chain available for creating and running such programs is sketched. As an exemplary problem we discuss efforts to implement quantum programs that are hardware independent. A use case from machine learning is outlined. Finally, a collaborative platform for solving problems with quantum computers that is currently under construction is presented.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115058598","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Juncal Alonso, Leire Orue-Echevarria Arrieta, M. Escalante, Gorka Benguria
{"title":"DECIDE: DevOps for Trusted, Portable and Interoperable Multi-Cloud Applications towards the Digital Single Market","authors":"Juncal Alonso, Leire Orue-Echevarria Arrieta, M. Escalante, Gorka Benguria","doi":"10.5220/0006292403690376","DOIUrl":"https://doi.org/10.5220/0006292403690376","url":null,"abstract":"The transformation from a product to service economy means that companies need to become software service providers as well as consumers. Cloud enables greater business agility by making IT infrastructure more flexible. The current trends of deploying applications following a hybrid cloud, multi-cloud or cross-cloud architecture, as well as the design, development and operation of multi-cloud native applications based on microservices present several challenges for their developers and operators. This paper presents a solution implemented in the context of the European project DECIDE which aims to support DevOps teams in the design, pre-deployment, contracting, deployment and operation of multi-cloud native applications with the provisioning of an integrated framework. The project is entering its late phase, in which the DevOps framework is currently being validated and evaluated in various use cases.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-11-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122681937","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
R. Jiménez-Peris, Francisco J. Ballesteros, Pavlos Kranas, Diego Burgos, P. Martínez
{"title":"NUMA-aware Deployments for LeanXcale Database Appliance","authors":"R. Jiménez-Peris, Francisco J. Ballesteros, Pavlos Kranas, Diego Burgos, P. Martínez","doi":"10.5220/0007905806660671","DOIUrl":"https://doi.org/10.5220/0007905806660671","url":null,"abstract":"In this paper we discuss NUMA awareness for the LeanXcale database appliance being developed in cooperation with Bull-Atos in the Bull Sequana in the context of the CloudDBAppliance European project. The Bull Sequana is a large computer than in its maximum version can reach 896 cores and 140 TB of main memory. Scaling up in such a large computer with a deep NUMA hierarchy is very challenging. In this paper we discuss how LeanXcale database can be deployed in NUMA architectures such as the one of the Bull Sequana and what aspects have been taking into account to maximize efficiency and to introduce the necessary flexibility in the deployment infrastructure.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-11-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130009989","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Decomposition and Metric-Based Evaluation Framework for Microservices","authors":"D. Taibi, Kari Systä","doi":"10.1007/978-3-030-49432-2_7","DOIUrl":"https://doi.org/10.1007/978-3-030-49432-2_7","url":null,"abstract":"","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"104 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-08-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132690169","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Igor Ivkic, Harald Pichler, Mario Zsilak, A. Mauthe, Markus Tauber
{"title":"A Framework for Measuring the Costs of Security at Runtime","authors":"Igor Ivkic, Harald Pichler, Mario Zsilak, A. Mauthe, Markus Tauber","doi":"10.5220/0007761604880494","DOIUrl":"https://doi.org/10.5220/0007761604880494","url":null,"abstract":"In Industry 4.0, Cyber-Physical Systems (CPS) are formed by components, which are interconnected with each other over the Internet of Things (IoT). The resulting capabilities of sensing and affecting the physical world offer a vast range of opportunities, yet, at the same time pose new security challenges. To address these challenges there are various IoT Frameworks, which offer solutions for managing and controlling IoT-components and their interactions. In this regard, providing security for an interaction usually requires performing additional security-related tasks (e.g. authorisation, encryption, etc.) to prevent possible security risks. Research currently focuses more on designing and developing these frameworks and does not satisfactorily provide methodologies for evaluating the resulting costs of providing security. In this paper we propose an initial approach for measuring the resulting costs of providing security for interacting IoT-components by using a Security Cost Modelling Framework. Furthermore, we describe the necessary building blocks of the framework and provide an experimental design showing how it could be used to measure security costs at runtime.","PeriodicalId":446929,"journal":{"name":"International Conference on Cloud Computing and Services Science","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134007101","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}