Providing User Security Guarantees in Public Infrastructure Clouds

The infrastructure cloud (IaaS) service model offers improved resource flexibility and availability, where tenants - insulated from the minutiae of hardware maintenance - rent computing resources to deploy and operate complex systems. Large-scale services running on IaaS platforms demonstrate the viability of this model; nevertheless, many organizations operating on sensitive data avoid migrating operations to IaaS platforms due to security concerns. In this paper, we describe a framework for data and operation security in IaaS, consisting of protocols for a trusted launch of virtual machines and domain-based storage protection. We continue with an extensive theoretical analysis with proofs about protocol resistance against attacks in the defined threat model. The protocols allow trust to be established by remotely attesting host platform configuration prior to launching guest virtual machines and ensure confidentiality of data in remote storage, with encryption keys maintained outside of the IaaS domain. Presented experimental results demonstrate the validity and efficiency of the proposed protocols. The framework prototype was implemented on a test bed operating a public electronic health record system, showing that the proposed protocols can be integrated into existing cloud environments.

Detailed analysis of data from heat pumps installed via the Renewable Heat Premium Payment Scheme

The RHPP policy provided subsidies for private householders, Registered social landlords and communities to install renewable heat measures in residential properties. Eligible measures included air and ground-source heat pumps, biomass boilers and solar thermal. Around 18,000 heat pumps were installed via this scheme. DECC funded a detailed monitoring campaign, which covered 700 heat pumps (around 4% of the total). The aim of this monitoring campaign was to assess the efficiencies of the heat pumps and to estimate the carbon and bill savings and amount of renewable heat generated. Data was collected from 31/10/2013 to 31/03/2015. This report represents the analysis of this data and represents the most complete and reliable data in-situ residential heat pump performance in the UK to date.