Advocate -- Trustworthy Evidence in Cloud Systems
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866914976476692480 |
|---|---|
| author | Werner, Sebastian Masoudi, Sepideh Castillo, Fernando Piper, Fabian Heiss, Jonathan |
| author_facet | Werner, Sebastian Masoudi, Sepideh Castillo, Fernando Piper, Fabian Heiss, Jonathan |
| contents | The rapid evolution of cloud-native applications, characterized by dynamic, interconnected services, presents significant challenges for maintaining trustworthy and auditable systems, especially in sensitive contexts, such as finance or healthcare. Traditional methods of verification and certification are often inadequate due to the fast-past and dynamic development practices common in cloud computing. This paper introduces Advocate, a novel agent-based system designed to generate verifiable evidence of cloud-native application operations. By integrating with existing infrastructure tools, such as Kubernetes and distributed tracing systems, Advocate captures, authenticates, and stores evidence trails in a tamper-resistant manner. This approach not only supports the auditing process but also allows for privacy-preserving evidence aggregation. Advocate's extensible architecture facilitates its deployment in diverse environments, enabling the verification and adherence to policies and enhance trust in cloud services. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2410_13477 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Advocate -- Trustworthy Evidence in Cloud Systems Werner, Sebastian Masoudi, Sepideh Castillo, Fernando Piper, Fabian Heiss, Jonathan Distributed, Parallel, and Cluster Computing Cryptography and Security C.2.4; D.2 The rapid evolution of cloud-native applications, characterized by dynamic, interconnected services, presents significant challenges for maintaining trustworthy and auditable systems, especially in sensitive contexts, such as finance or healthcare. Traditional methods of verification and certification are often inadequate due to the fast-past and dynamic development practices common in cloud computing. This paper introduces Advocate, a novel agent-based system designed to generate verifiable evidence of cloud-native application operations. By integrating with existing infrastructure tools, such as Kubernetes and distributed tracing systems, Advocate captures, authenticates, and stores evidence trails in a tamper-resistant manner. This approach not only supports the auditing process but also allows for privacy-preserving evidence aggregation. Advocate's extensible architecture facilitates its deployment in diverse environments, enabling the verification and adherence to policies and enhance trust in cloud services. |
| title | Advocate -- Trustworthy Evidence in Cloud Systems |
| topic | Distributed, Parallel, and Cluster Computing Cryptography and Security C.2.4; D.2 |
| url | https://arxiv.org/abs/2410.13477 |