Resource Optimization and Security for Cloud Services (Hardcover)

This book includes a study of trustworthiness, percentile response time, service availability, and authentication in the networks between users and cloud service providers, and at service stations or sites that may be owned by different service providers. The first part of the book contains an analysis of percentile response time, which is one of the most important SLA (service level agreements) metrics. Effective and accurate numerical solutions for the calculation of the percentile response time in single-class and multi-class queueing networks are obtained. Then, the numerical solution is incorporated in a resource allocation problem. Specifically, the authors present an approach for the resource optimization that minimizes the total cost of computer resources required while preserving a given percentile of the response time. In the second part, the approach is extended to consider trustworthiness, service availability, and the percentile of response time in Web services. These QoS metrics are clearly defined and their quantitative analysis provided. The authors then take into account these QoS metrics in a trust-based resource allocation problem in which a set of cloud computing resources is used by a service provider to host a typical Web services application for single-class customer services and multipleclass customer services respectively. Finally, in the third part of the book a thorough performance evaluation of two notable public key cryptography-based authentication techniques; Public-Key Cross Realm Authentication in Kerberos (PKCROSS) and Public Key Utilizing Tickets for Application Servers (PKTAPP, a.k.a. KX.509/KCA); is given, in terms of computational and communication times. The authors then demonstrate their performance difference using queuing networks. PKTAPP has been proposed to address the scalability issue of PKCROSS. However, their in-depth analysis of these two techniques shows that PKTAPP does not perform better than PKCROSS in a large-scale system. Thus, they propose a new public key cryptography-based group authentication technique. The performance analysis demonstrates that the new technique can scale better than PKCORSS and PKTAPP.

本書包含了對於使用者與雲服務提供商之間的網路，以及可能由不同服務提供商擁有的服務站點進行的可信度、百分位回應時間、服務可用性和身份驗證的研究。書的第一部分包含了對百分位回應時間的分析，這是最重要的服務水準協議（SLA）指標之一。我們獲得了單一類別和多類別排隊網路中計算百分位回應時間的有效和準確的數值解。然後，將數值解納入資源分配問題中。具體而言，我們提出了一種資源優化方法，該方法在保持給定回應時間百分位的同時，最小化所需的計算機資源總成本。在第二部分中，我們將這種方法擴展到考慮Web服務中的可信度、服務可用性和回應時間百分位。這些QoS指標被清楚地定義並提供了定量分析。然後，我們在基於信任的資源分配問題中考慮這些QoS指標，其中一個服務提供商使用一組雲計算資源來托管典型的Web服務應用程序，分別為單一類別客戶服務和多類別客戶服務。最後，在書的第三部分中，我們對兩種著名的基於公鑰密碼學的身份驗證技術進行了全面的性能評估；Kerberos中的公鑰跨領域身份驗證（PKCROSS）和應用服務器的公鑰票據（PKTAPP，又稱KX.509/KCA）。我們使用排隊網路展示了它們的性能差異。PKTAPP被提出來解決PKCROSS的可擴展性問題。然而，我們對這兩種技術的深入分析表明，在大規模系統中，PKTAPP的表現並不比PKCROSS更好。因此，我們提出了一種新的基於公鑰密碼學的群組身份驗證技術。性能分析表明，這種新技術比PKCORSS和PKTAPP更具可擴展性。