Technical Report on Deploying a highly secured OpenStack Cloud Infrastructure using BradStack as a Case Study

Cloud computing has emerged as a popular paradigm and an attractive model for providing a reliable distributed computing model.it is increasing attracting huge attention both in academic research and industrial initiatives. Cloud deployments are paramount for institution and organizations of all scales. The availability of a flexible, free open source cloud platform designed with no propriety software and the ability of its integration with legacy systems and third-party applications are fundamental. Open stack is a free and opensource software released under the terms of Apache license with a fragmented and distributed architecture making it highly flexible. This project was initiated and aimed at designing a secured cloud infrastructure called BradStack, which is built on OpenStack in the Computing Laboratory at the University of Bradford. In this report, we present and discuss the steps required in deploying a secured BradStack Multi-node cloud infrastructure and conducting Penetration testing on OpenStack Services to validate the effectiveness of the security controls on the BradStack platform. This report serves as a practical guideline, focusing on security and practical infrastructure related issues. It also serves as a reference for institutions looking at the possibilities of implementing a secured cloud solution.Comment: 38 pages, 19 figures

Phenomenology Tools on Cloud Infrastructures using OpenStack

We present a new environment for computations in particle physics phenomenology employing recent developments in cloud computing. On this environment users can create and manage "virtual" machines on which the phenomenology codes/tools can be deployed easily in an automated way. We analyze the performance of this environment based on "virtual" machines versus the utilization of "real" physical hardware. In this way we provide a qualitative result for the influence of the host operating system on the performance of a representative set of applications for phenomenology calculations.Comment: 25 pages, 12 figures; information on memory usage included, as well as minor modifications. Version to appear in EPJ

Evaluation Design and Technical Assistance Opportunities: Early Findings From the Beacon Community Program Evaluation Teams

Examines study designs, evaluation approaches, outcome measures, data sources, challenges, and technical assistance needs among sites in a project under the American Recovery and Reinvestment Act to strengthen health information technology capabilities

Virtual public administration: improving public administration procedures through project management

The best way to contribute electronic and mobile Government is by creating a public administration network in virtual communities. This is essentially the definition of Virtual Public Administration (VPA). A virtual community (a good example of which would be the well acclaimed virtual reality world Second Life), could potentially provide the platform to offer improved public administration services. Arguably, the quality of these services to citizens and businesses in virtual communities are more competitive than in reality. Therefore, the social, economic and technological impact is more inquiring because we could potentially offer to the end users more motivation to join these communities. Furthermore the success of the VPA is based on the virtual project management application. Our paper examines, theoretically and empirically, how VPA could potentially contribute to better public administration services and how effective project management application could facilitate the proposed transition. The research strategy is based on a combination of qualitative and quantitative methodological approaches. In that respect pertinent data is been collected through both semi structured interviews and questionnaires, with executives and others, in the Greek and UK public administration sector. Preliminary theoretical results demonstrate the improvement achieved by integrating time in virtual and real worlds and by testing impact to the quality of service provided by public sector to citizens/businesses. To that end, our study provides both qualitative (statements of directors, observations) and quantitative (metrics) examples related to these improvements. Three UK based councils have agreed in principle to participate to the study. Furthermore, in Greece the General Inspector of Public Administration, the National University of Athens and others has also agreed to participate. Our paper concludes with the contribution of our work along with some interesting avenues for further research

Public Participation in Risk Regulation

After discussing the increasing recognition of different kinds of claims for public participation in Risk regulation, this paper discusses a spectrum of approaches and examines six points along its range

Trusted Computing and Secure Virtualization in Cloud Computing

Large-scale deployment and use of cloud computing in industry is accompanied and in the same time hampered by concerns regarding protection of data handled by cloud computing providers. One of the consequences of moving data processing and storage off company premises is that organizations have less control over their infrastructure. As a result, cloud service (CS) clients must trust that the CS provider is able to protect their data and infrastructure from both external and internal attacks. Currently however, such trust can only rely on organizational processes declared by the CS provider and can not be remotely verified and validated by an external party. Enabling the CS client to verify the integrity of the host where the virtual machine instance will run, as well as to ensure that the virtual machine image has not been tampered with, are some steps towards building trust in the CS provider. Having the tools to perform such verifications prior to the launch of the VM instance allows the CS clients to decide in runtime whether certain data should be stored- or calculations should be made on the VM instance offered by the CS provider. This thesis combines three components -- trusted computing, virtualization technology and cloud computing platforms -- to address issues of trust and security in public cloud computing environments. Of the three components, virtualization technology has had the longest evolution and is a cornerstone for the realization of cloud computing. Trusted computing is a recent industry initiative that aims to implement the root of trust in a hardware component, the trusted platform module. The initiative has been formalized in a set of specifications and is currently at version 1.2. Cloud computing platforms pool virtualized computing, storage and network resources in order to serve a large number of customers customers that use a multi-tenant multiplexing model to offer on-demand self-service over broad network. Open source cloud computing platforms are, similar to trusted computing, a fairly recent technology in active development. The issue of trust in public cloud environments is addressed by examining the state of the art within cloud computing security and subsequently addressing the issues of establishing trust in the launch of a generic virtual machine in a public cloud environment. As a result, the thesis proposes a trusted launch protocol that allows CS clients to verify and ensure the integrity of the VM instance at launch time, as well as the integrity of the host where the VM instance is launched. The protocol relies on the use of Trusted Platform Module (TPM) for key generation and data protection. The TPM also plays an essential part in the integrity attestation of the VM instance host. Along with a theoretical, platform-agnostic protocol, the thesis also describes a detailed implementation design of the protocol using the OpenStack cloud computing platform. In order the verify the implementability of the proposed protocol, a prototype implementation has built using a distributed deployment of OpenStack. While the protocol covers only the trusted launch procedure using generic virtual machine images, it presents a step aimed to contribute towards the creation of a secure and trusted public cloud computing environment