Establishing and Maintaining Mission Application Trust in a Shared Cloud

ABSTRACT: Solid State Scientific Corporation (SSSC) is pleased to propose a secure development and production framework for insuring mission application trust and security in a shared cloud environment. The approach described is comprehensive and supports platform and network infrastructure, secure application development and testing, as well as production, system maintenance and activity logging and tracking. The framework is based on maintaining total application security and encrypting all aspects of open communication within the network and the application execution space. Properly constructed, a cloud based application can reduce costs and improve security by limiting the exposed network footprint and insuring network vulnerabilities are suitably patched. In a shared cloud, the challenge is to limit the vulnerabilities in application space. This proposal will describe the process of protecting and maintaining program security in application space. BENEFIT: The security of applications in a shared cloud is not just a challenge for the DoD. The cloud will provide economies of scale for a large number of commercial enterprises, provided they are able to insure the security of their programs.There is a significant opportunity to transition this framework to users of the commercial cloud and to improve application trust and security infrastructure of cloud providers.