| :: About Projects |
Certification infrastrUcture for MUlti-Layer cloUd Services
Start date:2012-10-01
End date:2015-09-30
Project Acronym:CUMULUS
Project status:Execution
Coordinator
| Organization name:FONDAZIONE UGO BORDONI | |
| Administrative contact | Address |
|
Name:Bartolomeo |
INTERNATIONAL PROJECTS OFFICE VIALE DEL POLICLINICO 147 00161 ROMA ITALIA Region:LAZIO Roma |
| Tel:+39-0654803516 | |
| Fax:+39-0654804411 | |
| E-mail:Contact | |
| URL: | Organization Type: |
Description
Objective:
Cloud technology offers a powerful approach to the provision of infrastructure, platform and software services without incurring the considerable costs of owning, operating and maintaining the computational infrastructures required for this purpose.
Despite its appeal from a cost perspective, cloud technology still raises concerns regarding the security, privacy, governance and compliance of the data and software services offered through it. Such concerns arise from the difficulty to guarantee security properties of the different types of services available through clouds. Service providers are reluctant to take full responsibility of the security of their services once the services are uploaded and offered through a cloud. Also, cloud suppliers have historically refrained from accepting liability for security leak.. This reluctance stems from the fact that the provision and security of a cloud service is sensitive to changes due to cloud operation, as well as to potential interference between the features and behaviour of all the inter-dependent services in all layers of the cloud stack. Still many cloud users, including institutional ones, would like to rely on cloud-based services they use to exhibit certified security properties.
CUMULUS will address these limitations by developing an integrated framework of models, processes and tools supporting the certification of security properties of infrastructure (IaaS), platform (PaaS) and software application layer (SaaS) services in cloud. CUMULUS framework will bring service users, service providers and cloud suppliers to work together with certification authorities in order to ensure security certificate validity in the ever-changing cloud environment.
CUMULUS will rely on multiple types of evidence regarding security, including service testing and monitoring data and trusted computing proofs, and based on models for hybrid, incremental and multi-layer security certification. Whenever possible, evidence gathering will build upon existing standards and practices (e.g., interaction protocols, representation schemes etc.) regarding the provision of information for the assessment of security in clouds.
To ensure large-scale industrial applicability, the CUMULUS framework will be evaluated in reference to cloud application scenarios in some key industrial domains, namely Smart Cities and eHealth services and applications,.
CUMULUS is aligned with the recommendations of a recent industrial consultation to the European Commission which identified cloud certification as an enabling technology for building trust for end users through the deployment of standards and certification schemes relevant to cloud solutions, and included it in the ten key recommendations and actions for a cloud strategy in Europe.
Achievements:
General information:
Project Details
Start date:2012-10-01
End date:2015-09-30
Duration:36 months
Project Reference:318580
Project cost:4345151 EURO
Project Funding:2936126 EURO
Programme Acronym:
FP7-ICT
Programme type:Seventh Framework Programme
Subprogramme Area:Trustworthy ICT
Contract type:Collaborative project (generic)
URL:
Subject index:Information and communication technology applications
Other participants
| Organization name:THE CITY UNIVERSITY | |
| Administrative contact | Address |
|
Name:Claudia |
RESEARCH OFFICE NORTHAMPTON SQUARE EC1V 0HB LONDON UNITED KINGDOM Region:SOUTH EAST (UK) GREATER LONDON |
| Tel:+44-2070403038 | |
| Fax: | |
| E-mail:Contact | |
| URL: | Organization Type: |
| Organization name:UNIVERSIDAD DE MALAGA | |
| Administrative contact | Address |
|
Name:Jose Antonio |
GERENCIA CALLE EL EJIDO 29013 MALAGA ESPAÑA Region:SUR ANDALUCIA Málaga |
| Tel:+34-952132974 | |
| Fax:+34-952131021 | |
| E-mail:Contact | |
| URL: | Organization Type: |
| Organization name:INFINEON TECHNOLOGIES AG | |
| Administrative contact | Address |
|
Name:Mingxia |
IFAG OP F RD Am Campeon 1-12 85579 NEUBIBERG DEUTSCHLAND Region:BAYERN OBERBAYERN München, Landkreis |
| Tel:+49-8923420713 | |
| Fax:+49-892349559869 | |
| E-mail:Contact | |
| URL: | Organization Type: |
| Organization name:CLOUD SECURITY ALLIANCE (EUROPE) LBG | |
| Administrative contact | Address |
|
Name:Daniele |
LOGIE GREEN ROAD LOGIE MILL BEAVERBANK OFFICE PARK EH7 4HH EDINBURGH UNITED KINGDOM Region:SCOTLAND BORDERS-CENTRAL-FIFE-LOTHIAN-TAYSIDE Lothian |
| Tel:+30-6974584360 | |
| Fax: | |
| E-mail:Contact | |
| URL: | Organization Type: |
| Organization name:WELLNESS TELECOM SL | |
| Administrative contact | Address |
|
Name:Teresa |
INNOVATION FACTORY CALLE CHARLES DARWING SN, PABELLON MONORRAIL 41092 SEVILLA ESPAÑA Region:SUR ANDALUCIA Sevilla |
| Tel:+34-954151706 | |
| Fax:+34-954462465 | |
| E-mail:Contact | |
| URL: | Organization Type: |
| Organization name:ATOS SPAIN SA | |
| Administrative contact | Address |
|
Name:Pedro |
ATOS RESEARCH AND INNOVATION Calle de Albarracin 28037 MADRID ESPAÑA Region:COMUNIDAD DE MADRID |
| Tel:+34-912148478 | |
| Fax: | |
| E-mail:Contact | |
| URL: | Organization Type: |
| Organization name:UNIVERSITA DEGLI STUDI DI MILANO | |
| Administrative contact | Address |
|
Name:Ernesto |
DIPARTIMENTO DI INFORMATICA Via Festa Del Perdono 20122 MILANO ITALIA Region:LOMBARDIA |
| Tel:+39-0373898064 | |
| Fax:+39-0373898010 | |
| E-mail:Contact | |
| URL: | Organization Type: |
Record control number:105141
