Virtualization of End-To-End Application Security in the Cloud

摘要

Security engineering-in order to be effective-must be incorporated in all phases of application specification and development. Doing this suitably is more and more critical as organisations outsource their services to cloud providers. Elementary boundaries of data ownership and administrative responsibilities render distributed systems and cloud systems, extremely complex and vulnerable for security threats. The cloud providers are expected to sequester each of their clients from others, for better security. They are also expected to have methods to isolate modules and users within each client's application, ensuring no compromise of cloud security. Each cloud client provides one or more services, accessed by many users. The cloud provider is anticipated to make sure that its users' data remains private, even when managed by threads sharing a service's address space. Effective isolation is perceived to be the solution for implementing an efficient end-to-end application cloud security.