Architecture for Secure Computation Infrastructure and Self-Management of VM Security

In this document we present the preliminary architecture of the SUPERCLOUD virtualization and security self-management for computation. We start by defining the design requirements of the architecture, and then review the state-of-the-art. We survey virtualization technologies and discuss designs for the virtualization infrastructure enabling the best trade-off between user control over infrastructure layers, strong security, and multi-provider interoperability. We also review isolation technologies, access control, and trust management to preserve end-to-end security between computing resources across clouds. We present a survey of security self-management, motivating the need to overcome administration complexity barriers through full security automation, seamlessly across layers and cloud provider domains. The document closes with the preliminary design of the SUPERCLOUD architecture for the virtualization and self-management infrastructure for computation, describing its different components and techniques enabling to fulfill the requirements of our design