Cloud Computing for Graphical Modeling of Automatic Security Control and Compliance

Computer service delivery through cloud computing is also popular among enterprises seeking to host applications and exploit better functionality at less cost and with less infrastructure difficulties. But this widespread adoption has also contributed to a much higher incident of security threats and risks. CloudSafe is the newly proposed security assessment and enforcement tool to be used in cloud platforms. CloudSafe provides an interface and links several security tools so that it performs security assessment automatically as well as ensures the implementation of proper security controls. To verify feasibility and effectiveness of CloudSafe, we have integrated the CloudSafe in Amazon AWS environment and performed analytical security test. We thoroughly examined four distinct security countermeasures: In the order of their implementation, they include Vulnerability Patching, Virtual Patching, Network Hardening and Moving Target Defense. Out of these, Virtual Patching, Network Hardening as well as Moving Target Defense were identified to be feasible option for the project to be implemented. Specifications of actual countermeasures were used as paper-based mock-ups to show feasibility of each countermeasure among the feasible ones. The study establishes that CloudSafe posited provides accurate and efficient help to the security administrators is choosing the best counter measures in securing cloud-based structures by providing comprehensive security analysis.