Framework for Assessing Cloud Trustworthiness (FACT)

Award Information
Agency:
Department of Defense
Branch
n/a
Amount:
$149,909.00
Award Year:
2012
Program:
SBIR
Phase:
Phase I
Contract:
FA8750-12-C-0040
Award Id:
n/a
Agency Tracking Number:
F112-031-1204
Solicitation Year:
2011
Solicitation Topic Code:
AF112-031
Solicitation Number:
2011.2
Small Business Information
625 Mount Auburn Street, Cambridge, MA, -
Hubzone Owned:
N
Minority Owned:
N
Woman Owned:
N
Duns:
115243701
Principal Investigator:
CurtWu
Chief Software Engineer
(617) 491-3474
cwu@cra.com
Business Contact:
MarkFelix
Contracts Manager
(617) 491-3474
mfelix@cra.com
Research Institute:
Stub




Abstract
ABSTRACT: Assured Cloud Computing is needed by US Cyber Command to implement the USAF vision of global vigilance, global reach, and global power. When an Air Force application runs in a third-party"gray"cloud, the trustworthiness of the application is of special concern because there is little to no control over the underlying infrastructure. The user must treat the cloud as a black box that cannot be instrumented or modified. To support the trustworthiness assessment of applications running in gray cloud infrastructures, we propose a framework for assessing cloud trustworthiness that treats the cloud as a black box and assesses trustworthiness at the application level rather than at the cloud component level where we have limited insight. Diagnostic tests to assess application trustworthiness are integrated with the application binary, so they are run on the cloud within a single process. The integration process optimizes test coverage while accounting for properties of the diagnostic tests, parameters of the mission supported by the application, and properties of the cloud infrastructure. If a test fails, the framework reruns the application in the cloud until it executes on correctly functioning infrastructure and passes all tests, or until time constraints are exceeded. BENEFIT: We expect the full-scope framework to have immediate and tangible benefit for a number of military applications that would benefit from deployment in a cloud infrastructure. In particular, the framework will support the trustworthy execution of applications in the cloud, both blue and gray. In addition, we will look at companies that provide commercial cloud computing services as potential licensees of this technology to enhance their competitive advantage for security-conscious consumers.

* information listed above is at the time of submission.

Agency Micro-sites


SBA logo

Department of Agriculture logo

Department of Commerce logo

Department of Defense logo

Department of Education logo

Department of Energy logo

Department of Health and Human Services logo

Department of Homeland Security logo

Department of Transportation logo

Enviromental Protection Agency logo

National Aeronautics and Space Administration logo

National Science Foundation logo
US Flag An Official Website of the United States Government