SUPERCLOUD aims to support user-centric deployments across multi-clouds, enabling the composition of innovative trustworthy services, to uplift Europe’s innovation capacity and thus improve its competitiveness. SUPERCLOUD will thus build a security management architecture and infrastructure to fulfil the vision of user-centric secure and dependable cloud of clouds.
Motivation:
Despite many benefits in terms of business, distributed cloud computing raises many security and dependability concerns. At stake are an increase in complexity and a lack of interoperability between heterogeneous, often proprietary infrastructure technologies. The SUPERCLOUD project proposes new security and dependability infrastructure management paradigms that are:
- user-centric, for self-service clouds-of-clouds where customers define their own protection requirements and avoid provider lock-ins and
- self-managed, for self-protecting clouds-of-clouds that reduce administration complexity through security automation.
Concept:
Our approach will be to de ne a new distributed architectural plane, the SUPERCLOUD, providing an end-to-end interface both between user-centric and provider-centric views of multiple clouds. Its role will be both to provide a distributed resource abstraction and exible but uni ed control for management
of security and resilience.
Objectives:
Self-Service Security: Implementation of a cloud architecture that gives users the flexibility to define their own protection requirements and instantiate policies accordingly.
Self-Managed Security: Development of an autonomic security management framework that operates seamlessly over compute, storage and network layers, and across provider domains to ensure compliance with security policies.
End-to-End Security: Proposition of trust models and security mechanisms that enable composition of services and trust statements across different administrative provider domains.
Resilience: Implementation of a resource management framework that composes provider-agnostic resources in a robust manner using primitives from diverse cloud providers.