Adaptive, model-based cloud computing security management

The cloud computing model introduces novel features, resources elasticity and pay-as-you-go model, that motivate IT community to outsource their assets to cloud platforms. However, securing outsourced cloud-hosted assets is still an open issue. Cloud tenants complain from the loss-of-control, lack-of-trust, and lack-of-security-controls-adaptors problems. In this research, we introduce a novel cloud security management platform that successfully mitigates these problems. Our platform enables cloud tenants to define their security requirements, integrate their security controls, and monitor assets' security status at runtime. The platform delivers an online, automated security analysis and patching services to keep tenants' assets always secure.