We propose a security certification framework for the cloud, which implements a test-based certification scheme. Our certification framework consists of a distributed architecture based on agents and probes, which collects evidence at the basis of certification activities. The framework uses an approach similar to xUnit testing framework, while it is model-based, generic, and suitable for distributed systems. The demo will show a real certification process that involves activities at all layers of the cloud stack, specifically targeting generic cloud applications and security services deployed on top of OpenStack.
Presenter
Filippo Gaudenzi, PhD student, Università degli Studi di Milano
Filippo Gaudenzi is a Phd Student at Università degli Studi di Milano. He worked as Assistant Researcher at Università degli Studi di Milano in the FP7 project CU MULUS. He also worked as R&D Engineering at INRIA at Bretagne Atlantique in Rennes in the FP7 Contrail project.
His main research interests are in the areas of cloud, security, certification, monitoring and testing tools.