Providing User Security Guarantees in Public Infrastructure Clouds

The infrastructure cloud (IaaS) service model offers improved resource flexibility and availability, where tenants - insulated from the minutiae of hardware maintenance - rent computing resources to deploy and operate complex systems. Large-scale services running on IaaS platforms demonstrate the viability of this model; nevertheless, many organizations operating on sensitive data avoid migrating operations to IaaS platforms due to security concerns. In this paper, we describe a framework for data and operation security in IaaS, consisting of protocols for a trusted launch of virtual machines and domain-based storage protection. We continue with an extensive theoretical analysis with proofs about protocol resistance against attacks in the defined threat model. The protocols allow trust to be established by remotely attesting host platform configuration prior to launching guest virtual machines and ensure confidentiality of data in remote storage, with encryption keys maintained outside of the IaaS domain. Presented experimental results demonstrate the validity and efficiency of the proposed protocols. The framework prototype was implemented on a test bed operating a public electronic health record system, showing that the proposed protocols can be integrated into existing cloud environments.

New Frontiers in Energy-Efficient Computing

Energy-efficient computing remains a critical challenge across the wide range of future data-processing engines — from ultra-low-power embedded systems to servers, mainframes, and supercomputers. In addition, the advent of cloud and mobile computing as well as the explosion of IoT technologies have created new research challenges in the already complex, multidimensional space of modern and future computer systems. These new research challenges led to the establishment of the IEEE Rebooting Computing Initiative, which specifically addresses novel low-power solutions and technologies as one of the main areas of concern.With this in mind, we thought it timely to survey the state of the art of energy-efficient computing.

Beacon

Artwork using Internet search engine technology to make people’s online desires, interests and orientations visible, presenting random search term enquiries in a variety of forms including a railway information sign, an art gallery installation and an online website. activity, curiosity and desire. The project sampled and analysed how ‘search terms’ were used by the public as live data. It then re-presented them on a website, in a gallery and latterly on a bespoke mechanical railway flap-sign, thus creating a snapshot of online enquiry at any give time. Beacon’s originality lies in the manner in which it has taken abstract digital data and found different expressions for it. Thus the work extends debates in media arts that focus on purely virtual and online expressions of data, by developing online information into new non-digital material forms and contexts such as railway signs. This research has been developed over a three year period. Initially with software only and then on receipt of AHRC small grant (£5000) with the lauded Italian manufacturer Solari of Udine, Italy and BFI Southbank. It represents the culmination of a body of research that asks whether live data can be used as material to make artworks. Beacon was specially developed for the Tate Britain programme 40 artists 40 days, produced in conjunction with the UK Olympic Games bid and intended to “create a unique countdown calendar that will focus attention on Britain’s exceptional creative talent”. The project is exhibited by the Tate website ‘Tate Online’ presently in perpetuity. The gallery version of this work is currently held in five private collections in the USA and is shown regularly in galleries around the world. The railway flap-sign is owned by BFI Southbank and will eventually be sited there permanently. All work is developed jointly and equally between Craighead and her collaborator, Jon Thomson, (Slade).