Manufacturing technology changes with the needs of consumers. The globalization of the world economy has helped to create the concept of cloud manufacturing (CM). The purpose of this paper is to provide both an overview and an update on the status of CM and define the key technologies that are being developed to make CM a dependable configuration in today's manufacturing industry. Topics covered include: cloud computing (CC), the role of small and medium enterprises (SMEs), pay-as-you-go, resource virtualization, interoperability, security, equipment control, and the future outlook of the development of CM.

Cloud Manufacturing: Current Trends and Future Implementations

Cloud security being the main hindrance in adoption of cloud computing has some most vulnerable security concerns as: virtualization, data and storage. Here, to provide virtualization security, the components of virtualization (such as hypervisors, virtual machines, and virtual machine images) must be secured using some improvised security mechanisms. Amongst all components, Virtual machine images (VM images) are considered to be the fundamental of whole cloud security. Hence must be secured from every possible attack. In this paper, a security protocol is proposed to mainly protect the VM images from two of the possible attacks. One is the channel attack like man-in-the-middle attack (MITM attack) and second is the attack by a malicious executing environment. It is using a concept of symmetric key's component distribution providing an integrity based confidentiality and self-protection. This protection is based on an encapsulated mobile agent. Here one key component is generated and distributed in a secure manner and the other key component is derived by host platform itself using its own available resource configuration information. In order to verify the validity of this approach in overcoming different kind of security attacks, BAN logic based formal representation is presented.

An approach for virtual machine image security

Cloud Computing is evolving as a key computing platform for sharing resources that include infrastructures, software, applications, and business. However, Cloud Computing is still a matter of great concern for a cloud user to trust security and reliability of cloud services. Cloud Computing is undergoing an incontestable success, which could be indeed compromised by concerns about the risks related to potential misuse of this model aimed at conducting illegal activities. There is major need of bringing security, transparency and reliability in cloud model for client satisfaction. One of the security issues is how to reduce the impact of any type of intrusion in this environment. To overcome these kinds of attacks, we propose a framework of cooperative Hybrid Intrusion Detection System (Hy-IDS) and Mobile Agents. Then, our Hybrid IDS consists of two types of IDS, which are dispatched over three layer of cloud computing. Therefore, in the first layer our framework allows to collect, analyze and detect malicious data using the first type of IDS and Mobile Agents. In case of attack, we collect at the level of the second layer all the malicious data detected in the first layer for the generation of new signatures, based on a Signature Generation Algorithm (SGA) and network intrusion detection system (NIDS). However, these new signatures are used to update the database of the IDS. The mobile agents play an important role in this collaboration. They are used in our framework for investigation of hosts, transfer data malicious and transfer update of a database of neighboring IDS in the cloud. Therefore, the neighboring IDS will use these new signatures to protect their area of control against the same type of attack. Applying this close-loop control, the collaborative network security management framework could identify and address new distributed attacks more quickly and effectively.

Toward a trusted framework for cloud computing

With the growing development of Web, Cloud and Internet applications in industry, one concern that potential users may have is the security of data, remote machines, and operators. Potential security risks in communication with remotely operated manufacturing equipment have been of recent interest which is dubbed cybersecurity in this book. The purpose of this chapter is to provide an overview of cybersecurity measures being considered to ensure the protection of data being sent to physical machines in a cybernetic system. Topics covered include: remote equipment control, security concerns in remote equipment control, existing proposed security measures for remote equipment control and the future outlook of remote equipment control and security in cybernetic systems. While common to other cybernetic systems, security issues in Cloud Manufacturing are focused in this chapter for brevity.

Challenges in Cybersecurity

Security Issues of Virtualization in Cloud Computing Environments

Cloud computing finally emerged on the stage of the information technology. Virtualization is the core of cloud computing. Virtualization minimizes capital, operational and maintenance costs. Also, it provides flexibility in the used platform. However, the expansion of cloud computing is impeded by the lack of the security issue. Physical resources are exposed to security threats and malware attacks. Therefore, the system is subject to data loss, denial of service, performance degradation, and even hardware damage. This paper proposes a new security architecture based on two frameworks described in the literature. Therefore, the paper explores both frameworks, analyzes them, criticizes them, and then highlights their advantages and disadvantages. Finally, the paper describes the proposed architecture.

Lena AlMutair

Papers

A new virtualization-based security architecture in a cloud computing environment