Completed projects: Cloud computing

Projects: Cloud Computing

2017 – 2020 - CLoudNEXT - Cloud computing experimentation environment.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: The project aims to provide an experimentation environment through a distributed cloud computing infrastructure, so that researchers in the Information and Communication Technology (ICT) field can develop and test new architectures, platforms, and cloud computing applications. In this environment, it will be possible to develop different cloud computing technologies and test them in a controlled environment, but with realistic scale. This same infrastructure can also be used by researchers from various fields of knowledge who need access to a large-scale computing environment to run e-science applications. Project certified by the National Education and Research Network on 04/05/2023.

2013 – 2016 - Security in Virtual Networks for Cloud Computing.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: The main objective of this research project is to develop a solution for the creation and management of "virtual security domains" applied in the context of cloud computing.

2013 – 2015 - Security Service Level Agreement in Cloud Computing.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: The main objective of this research project is to propose a framework and execution mechanism for a security service level agreement (SLA) in a cloud computing environment. Project certified by Ericsson Telecomunicações - Matriz on 04/05/2023.

2012 – 2014 - Advanced Cloud Services using Trade Wind.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: Design and test service solutions to allow processing and storing data at the edges of the network; closest to the end user.. Project certified by the company Ericsson Telecomunicações - Matriz on 05/04/2023.

2012 – 2013 - Credential Management Architecture for Cloud Computing.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: The project's goal is to identify the state of art solutions about credential management and authentication/authorization, pointing out the relevant solutions and requirements that are suitable for a cloud computing environment. Underlying aspects such as the secure, efficient and scalable management of credentials will be explored, considering its entire life-cycle (from initial generation and distribution, to secure storage/backup, usage, and ultimately, secure destruction).

2010 – 2012 - Cloud API supporting Distributed Data Flow Oriented Applications.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: This project aims to specify and develop an API (Application Programming Interface) in the form of cloud computing (or associated with an existing solution) that allows the specification of parameters for the use of a cloud computing solution in terms of behavior, resources, and performance. These parameters are related to high-level requirements for services/applications that use this type of solution and establish how these parameters will influence the mobility, replication, and balancing of the cloud computing solution. Project certified by Ericsson Telecomunicações - Headquarters on 04/05/2023.

2010 – 2010 - Security in Hybrid Cloud Computing.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: This project addresses the state of the art in cloud computing through research on the taxonomy used to classify this type of system, existing security approaches, and a testbed for security experiences in existing cloud computing solutions. The results of these activities should provide the identification of relevant cloud computing services as well as security aspects that can be explored in future research projects. In addition, taxonomies are being developed to classify both cloud computing solutions and the security aspects related to them. Project certified by Ericsson Telecommunications - Headquarters on 04/05/2023.

2015 – 2017 - Network Defense Standard in Cloud Computing Systems.

• Coordinator: Tereza Cristina Melo de Brito Carvalho
• Description: The commonly adopted approach to deploying network defense, which is highly centralized, does not effectively provide the elasticity and flexibility necessary for the security of applications and services running in highly virtualized environments, such as cloud computing. In particular, in the context of multimedia applications, it has been observed that not all operators deploy their solutions within a single private cloud, but consider multiple domains in their architecture, composed of a combination of public and private clouds. The services provided (including security) end up being executed in a hybrid environment, relying on small clouds (cloudlets) connected to the main data center of the content provider. In this context, this project seeks to specify an architecture that supports the orchestration of the execution of security mechanisms spread across the various domains that make up cloud computing such as the one mentioned, allowing collaboration between data centers and cloudlets. This structure must support a centralized security control system, which can control the security functionalities and configurations of different security tools (firewall, intrusion detection systems, etc.) running on cloudlets and data centers. Innovative network orchestration technologies, such as software-defined networks (SDN) and service function chaining (SFC), can be used for this purpose. Project certified by ERICSSON TELECOMUNICACOES S A. on 09/10/2022.

2013 – 2016 - Security in cloud computing environments.

• Coordinator: Marcos Antonio Simplicio Junior
• Description: Cloud computing solutions are increasingly present in public and private environments, allowing network access to a vast reservoir of computing resources (processing capacity, data, software, hardware, etc.) on demand and in a highly scalable and transparent way. Despite the great potential of the cloud to provide advanced services for developers and end users, a recurring problem with the technology concerns security issues. On the one hand, there is some distrust regarding the security of cloud infrastructure (e.g., the ability to separate virtual machines from different clients), a factor that is one of the main reasons for the non-adoption of the technology by entities that handle confidential and/or high-value data. On the other hand, the high availability of cloud resources is often exploited for illicit activities, such as using the power of parallelism in the cloud to crack passwords by brute force. In this context, this study proposes to investigate the construction of security mechanisms aimed at these two aspects: the protection of cloud information against malicious users and the design of solutions to prevent it from being used as an attack platform. (CNPq Productivity Grant Project 305350/2013-7).