Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments

Published

April 20, 2022

Author(s)

Murugiah Souppaya, Michael Bartock, Karen Scarfone, Donna Dodson, Daniel Carroll, Gina Scinta, Hemma Prafullchandra, Harmeet Singh, Raghuram Yeluri, Tim Shea, Carlos Phoenix, Robert Masten, Paul Massis, Jason Malnar, Michael Dalton, Anthony Dukes, Brenda Swarts, Rajeev Ghandi, Laura Storey, Rocky Weber, Jeff Haskins

Abstract

A cloud workload is an abstraction of the actual instance of a functional application that is virtualized or containerized to include compute, storage, and network resources. Organizations need to be able to monitor, track, apply, and enforce their security and privacy policies on their cloud workloads, based on business requirements, in a consistent, repeatable, and automated way. The goal of this project is to develop a trusted cloud solution that will demonstrate how trusted compute pools leveraging hardware roots of trust can provide the necessary security capabilities. These capabilities not only provide assurance that cloud workloads are running on trusted hardware and in a trusted geolocation or logical boundary, but also improve the protections for the data in the workloads and in the data flows between workloads. The example solution leverages modern commercial off-the-shelf technology and cloud services to address lifting and shifting a typical multi-tier application between an organization-controlled private cloud and a hybrid/public cloud over the internet.

Citation

Special Publication (NIST SP) - 1800-19

Report Number

1800-19

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.1800-19

Local Download

Keywords

cloud technology, compliance, cybersecurity, privacy, trusted compute pools

Citation

Souppaya, M. , Bartock, M. , Scarfone, K. , Dodson, D. , Carroll, D. , Scinta, G. , Prafullchandra, H. , Singh, H. , Yeluri, R. , Shea, T. , Phoenix, C. , Masten, R. , Massis, P. , Malnar, J. , Dalton, M. , Dukes, A. , Swarts, B. , Ghandi, R. , Storey, L. , Weber, R. and Haskins, J. (2022), Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.1800-19, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=934348 (Accessed April 16, 2024)