The Fifth International Workshop on Trusted Collaboration

Research Article

Domain-based virtualized resource management in cloud computing

Download392 downloads
  • @INPROCEEDINGS{10.4108/icst.trustcol.2010.3,
        author={Dongwan Shin and Hakan Akkan},
        title={Domain-based virtualized resource management in cloud computing},
        proceedings={The Fifth International Workshop on Trusted Collaboration},
        publisher={IEEE},
        proceedings_a={TRUSTCOL},
        year={2011},
        month={5},
        keywords={cloud computing IaaS role-based},
        doi={10.4108/icst.trustcol.2010.3}
    }
    
  • Dongwan Shin
    Hakan Akkan
    Year: 2011
    Domain-based virtualized resource management in cloud computing
    TRUSTCOL
    ICST
    DOI: 10.4108/icst.trustcol.2010.3
Dongwan Shin1,*, Hakan Akkan1,*
  • 1: Secure Computing Laboratory, Department of Computer Science and Engineering, New Mexico Tech, Socorro, NM 87801
*Contact email: doshin@nmt.edu, hakkan@nmt.edu

Abstract

Cloud computing has drawn much attention in recent years. One of its delivery models, called infrastructure as a service (IaaS), provides users with infrastructure services such as computation and data storage, heavily dependent upon virtualization techniques that offers benefits such as elasticity and cost efficiency. Most of current IaaS service providers have adopted a user-based service model, where users are directly mapped to virtualized resources that they want to use and they are charged based on usage. Hence, user and resource management are centralized and easily administered at the IaaS provider. However, this also results in the lack of support for scalable management of users and resources, organization-level security policy, let alone flexible pricing model. Considering the increasing popularity of cloud computing, there is a strong need for a more scalable and flexible IaaS model, along with a more fine grained access control mechanism. In this paper we propose a domain-based framework for provisioning and managing users and virtualized resources in IaaS to address this issue. Specifically, an additional layer called domain is introduced to the user-based service model, and the domain layer facilitates the de-centralization of user and virtualized resource management in IaaS. The cloud service provider is able to delegate its administrative works to domains, and domains manage their users and virtualized resources allocated from the cloud service provider. Our framework provides benefits such as scalable user/resource management, domain-based advanced policy support, and flexible pricing.