Computer Communications and Networks

Series EditorAnthony SammesSwindon, United Kingdom

Titles in this series now included in the Thomson Reuters Book Citation IndexThe Computer Communications and Networks series is a range of textbooks,

monographs and handbooks. It sets out to provide students, researchers, and non-specialists alike with a sure grounding in current knowledge, together with comprehensible access to the latest developments in computer communications and networking.

Emphasis is placed on clear and explanatory styles that support a tutorial approach, so that even the most complex of topics is presented in a lucid and intelligible manner.

Springer is seeking to publish quality books in areas including, but not limited to:Computer Networks (general) - Data Communications - Distributed Computing -

Parallel and Systolic Computing - Network and Information Security - Network Architecture - Wireless Ad Hoc and Sensor Networks - Mobile Computing - Virtual Private Networks - Advanced Network Protocol Design and Analysis - Protocol Verification and Validation - Network Testing - Network Management - Reliability and Fault Tolerance - Performance Modelling - Quality of Service - Routing and Traffic Engineering - Web Computing - Network Programming - Grid Computing

More information about this series at http://www.springer.com/series/4198

Zaigham MahmoodEditor

Cloud Computing

Challenges, Limitations and R&D Solutions

2123

ISSN 1617-7975ISBN 978-3-319-10529-1 ISBN 978-3-319-10530-7 (eBook)DOI 10.1007/978-3-319-10530-7Springer Cham Heidelberg New York Dordrecht London

Library of Congress Control Number: 2014937396

© Springer International Publishing Switzerland 2014This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. Exempted from this legal reservation are brief excerpts in connection with reviews or scholarly analysis or material supplied specifically for the purpose of being entered and executed on a computer system, for exclusive use by the purchaser of the work. Duplication of this publication or parts thereof is permitted only under the provisions of the Copyright Law of the Publisher’s location, in its current version, and permission for use must always be obtained from Springer. Permissions for use may be obtained through RightsLink at the Copyright Clearance Center. Violations are liable to prosecution under the respective Copyright Law.The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use.While the advice and information in this book are believed to be true and accurate at the date of publication, neither the authors nor the editors nor the publisher can accept any legal responsibility for any errors or omissions that may be made. The publisher makes no warranty, express or implied, with respect to the material contained herein.

Printed on acid-free paper

Springer is part of Springer Science+Business Media (www.springer.com)

EditorZaigham MahmoodUniversity of DerbyUnited Kingdom

North West UniversityS Africa

Dedication

This tenth publication is dedicated to my parents Ghazi Ghulam Hussain Bahadur and Mukhtar Begum who spent the prime of their lives in fighting for the freedom and indepen-dence of their country. At a very young age, my father joined a paramilitary movement with the mission to engage in peaceful strug-gle to free the country from foreign occupa-tion. Although the struggle for independence started many decades before, his organiza-tion together with similar movements and political parties, decided to stage a much more decisive countrywide peaceful protest on 19 March 1940. The government, fear-ing the shutdown of the country, had already banned the gatherings but people were out in such huge numbers that the army patrol-ling the streets received orders to shoot to kill. Live bullets were fired; many thousands were killed or injured and many more taken as political prisoners. That day, my father was leading a group of 313 men—totally unarmed. Several dozen of them were mar-tyred or injured; many were captured and tried. There were 13 who were sentenced to political imprisonment for life—my father was one of the 13. His organization honored him with the titles of Ghazi (survivor in the

fight between right and wrong) and Baha-dur (valiant). Four days later, an all-party confederation passed a unanimous resolution demanding the formation of an independent state. Soon after, a declaration was signed to transfer power to the leading political party. Eventually, after another 7 years, the country achieved independence on 14 August 1947. On this day, all freedom fighters were released; my father also returned home ghazi and victorious. My mother, a young girl at the time, was no less courageous in her struggles: she fully supported her husband’s mission and raised a young girl indepen-dently, single handedly, while my father was away. Now that the mission was achieved, my father devoted his time to engage in the study of Oriental languages and theology, bringing up his family and serving the com-munity. Achieve excellence … make a dif-ference: my parents would constantly remind us. They most certainly were excellent in what they did and made a huge difference. They are my heroes and my inspiration in life.

Zaigham Mahmood19 March 2014

vii

Preface

Overview

Cloud Computing is an attractive paradigm that allows consumers to self-provision cloud based software systems, application services, development platforms and vir-tualized infrastructures. Large enterprises can migrate their applications and data to cloud environments to achieve the benefits of scalability, availability and reduction in capital expenditure; small organisations and start-up ventures can realize benefits by leasing ready-made development environments and computing infrastructure on a pay-as-you-go basis; and general public can enjoy the use of cloud based applica-tion such as email systems and storage space, which are often freely available.

The benefits that the cloud paradigm promises are numerous and already proven. However, like any other emerging technology, the limitations, issues and barriers are also many. There are issues of security due to virtualisation and multi-tenant nature of cloud environments; concerns with respect to the loss of governance and control; legal and jurisdiction implications of entrusting private and confidential data to cloud providers; and concerns due to evolving cloud related standards. The lack of knowledge on the part of the cloud consumers is also resulting in vendor lock-ins and inappropriate service level agreements.

Notwithstanding the above, cloud consumers are becoming more knowledgeable and beginning to dictate what they require. Cloud providers are also learning from experience and beginning to provide what consumers actually need. Robust new technologies are appearing and standards organisations, in the process of develop-ing the necessary controls, are keen to enforce the standards for the benefit of all. Other cloud related industries are also appearing to provide specialist services to support cloud providers as well as the cloud consumers. Alongside this, research-ers, practitioners and R&D departments within the organisations are coming up with strategies and solutions to resolve the existing issues and remove the barriers. New areas being investigated include: cloud security, interoperability, service level agreements, identity and access management, cloud governance, big data analytics and broker services. New frameworks and methodologies are also being developed for construction, deployment and delivery of cloud services to benefit all.

viii Preface

This book, Cloud Computing: Challenges, Limitations and R&D Solutions, aims to present discussions on issues and limitations relating to the cloud computing paradigm and suggest latest research methodologies, emerging developments and R&D solutions to benefit the computing community. In this volume, 39 research-ers and practitioners of international repute have presented latest research devel-opments, current trends, state of the art reports, case studies and suggestions for further development of the cloud computing paradigm.

Objectives

The aim of this text is to present the current research and R&D solutions to the limitations, barriers and issues that currently exist in the cloud computing paradigm. The key objectives include:

• Capturingthestate-of-the-artresearchandpracticerelatingtocloudcomputingissues

• Exploringlimitationsandbarrierswithrespecttocloudprovisionandclouden-vironments

• Analyzingtheimplicationsofthenewcloudparadigmsforthebenefitofcon-sumers

• DiscussingR&Dsolutionsandstrategieswithrespecttoconcernsrelatingtothecloud paradigm

• In general, advancing the understanding of the emerging newmethodologiesrelevant to the cloud paradigm

Organization

There are 14 chapters in Cloud Computing: Challenges, Limitations and R&D Solu-tions. These are organized in three parts, as follows:

• Part I:Limitations and Challenges of Cloud Environments. This section has a focus on issues and limitations of the cloud computing paradigm. There are three chapters in this section. The first chapter looks into the security issues of public clouds. The second contribution focuses on architectural choices for DBM Sys-tems for cloud environment and the third chapter discusses the challenges and issues with respect to QoS and SLAs.

• PartII:Current Developments and R&D Solutions. This second part comprises six chapters. The first contribution discusses a methodology for cloud security management, while the second chapter suggests a framework for secure data storage and identity management in the cloud. The third contribution presents a simulation tool for energy aware cloud environments and the chapter, that fol-lows, presents an efficient congestion control system for data center networks.

ixPreface

The fifth chapter is devoted to looking into energy aware VM consolidation in the IaaS provision. The last contribution in this section focuses on software de-fined networking for cloud related applications.

• Part III:Advances in Cloud Technologies and Future Trends: There are fivechapters in this part. The first chapter discusses future developments with re-spect to virtualization and cloud security and the second contribution discusses recent trends in QoS data warehouses in relation to the selection of cloud based services. The next chapter focuses on cloud federation approaches. The forth contribution discusses the security aspects of database-as-a-service provision and the final chapter looks into the future to see how the next generation utility computing infrastructures will be designed.

Target Audiences

The current volume is a reference text aimed to support a number of potential audi-ences,includingthefollowing:

• Enterprise architects, business analysts and software developers who are keen to adopt the newer approaches to developing and deploying cloud-based services, taking into account the current research.

• IT infrastructure managers and business leaders who need to have a clear under-standing and knowledge of the limitations and issues that currently exist in the emerging cloud computing paradigm.

• Students and lecturers of cloud computing who have an interest in further en-hancing the knowledge of the current developments and R&D solutions to the barriers, limitations and issues that currently exist.

• Researchers in this field who wish to have the up to date knowledge of the cur-rent practice, mechanisms and research developments relevant to the cloud para-digm to further develop the same.

Zaigham Mahmood University of Derby UK & North West University S Africa

xi

Acknowledgements

The editor acknowledges the help and support of the following colleagues during the review and editing phases of this text:

Rodrigo N. Calheiros, University of Melbourne, AustraliaProf. T. Chandrakumar, Thiagarajar College of Engineering, Tamil Nadu, IndiaGanesh Chandra Deka, Ministry of Labour & Employment, Delhi, IndiaFortis Florin, Research Institute e-Austria Timisoara, Timisoara, RomaniaKahinaHamadache,SingularLogicS.A.,ΝeaIonia,Attica,GreeceDr. Attila Kertesz, University of Szeged and MTA SZTAKI, HungaryPing Lin, Avaya Canada Corp, Belleville, Ontario, CanadaFlavio Lombardi, Roma Tre University of Rome, ItalyAbhishek Majumder, Tripura University, Tripura West, IndiaProf. Hamid Mcheick, Université du Québec à Chicoutimi, Québec, CanadaJoarder Mohammad Mustafa Kamal, Monash University, Victoria, AustraliaProf Saswati Mukerjee, Anna University, Chennai, IndiaKashif Munir, King Fahd University of Petroleum & Minerals, S ArabiaDr. S Parthasarthi, Thiagarajar College of Engineering, Madurai, IndiaDr. Pethuru Raj, IBM Cloud Center of Excellence, Bangalore, IndiaDr. Muthu Ramachandran, Leeds Metropolitan University, Leeds, UKYasir Saleem, Sunway University, Selangor, MalaysiaDr. Mahmood Shah, University of Central Lancashire, UKSukhpal Singh, Thapar University, Patiala, IndiaDr. Fareeha Zafar, GC University, Lahore, Pakistan

I would also like to thank the contributors to this book: 39 authors and co-au-thors, from academia as well as industry from around the world, who collectively submitted 14 chapters. Without their efforts in developing quality contributions, conforming to the guidelines and meeting often the strict deadlines, this text would not have been possible.

xii Acknowledgements

Grateful thanks are also due to the members of my family—Rehana, Zoya, Im-ran, Hanya and Ozair—for their continued support and encouragement. Best wishes also to Eyaad Imran.

17 July 2014 Zaigham MahmoodSchool of Computing and Mathematics,

University of Derby, UK& Business Management and Informatics Unit,

North West University, Potchefstroom, South Africa

xiii

Other Springer Books by Zaigham Mahmood

Continued Rise of the Cloud: Advances and Trends in Cloud Computing

This reference text presents the latest research and trends in cloud technologies, infrastructure, and architecture. Contributed by expert researchers and practitio-ners in the field, this book presents discussions on current advances and practical approaches including guidance and case studies on the provision of cloud-based services and frameworks. ISBN: 978-1-4471-6451-7.

Cloud Computing: Methods and Practical Approaches

The benefits associated with cloud computing are enormous; yet the dynamic, virtu-alized and multi-tenant nature of the cloud environment presents many challenges. To help tackle these, this volume provides illuminating viewpoints and case studies to present current research and best practices on approaches and technologies for the emerging cloud paradigm. ISBN: 978-1-4471-5106-7.

Software Engineering Frameworks for the Cloud Computing Paradigm

This is an authoritative reference that presents the latest research on software devel-opment approaches suitable for distributed computing environments. Contributed by researchers and practitioners of international repute, the book offers practical guidance on enterprise-wide software deployment in the cloud environment. Case studies are also presented. ISBN: 978-1-4471-5030-5.

Cloud Computing for Enterprise Architectures

This reference text, aimed at system architects and business managers, examines the cloud paradigm from the perspective of enterprise architectures. It introduces fun-damental concepts, discusses principles, and explores frameworks for the adoption of cloud computing. The book explores the inherent challenges and presents future directions for further research. ISBN: 978-1-4471-2235-7.

xv

Contents

Part I Limitations and Challenges of Cloud Environments

1 Attacks in Public Clouds: Can They Hinder the Rise of the Cloud? .... 3Saeed Shafieian, Mohammad Zulkernine and Anwar Haque

2 Distributed Database Management Systems: Architectural Design Choices for the Cloud .................................................................. 23Joarder Mohammad Mustafa Kamal and Manzur Murshed

3 Quality of Service and Service Level Agreements for Cloud Environments: Issues and Challenges .................................................... 51Inderveer Chana and Sukhpal Singh

Part II Current Developments and R&D Solution

4 A Methodology for Cloud Security Risks Management ....................... 75Mariam Kiran

5 SecDSIM: A Framework for Secure Data Storage and Identity Management in the Cloud ........................................................ 105Shaga Praveen and G. R. Gangadharan

6 CloudReports: An Extensible Simulation Tool for Energy-Aware Cloud Computing Environments .................................. 127Thiago Teixeira Sá, Rodrigo N. Calheiros and Danielo G. Gomes

7 Cloud Computing: Efficient Congestion Control in Data Center Networks ...................................................................................... 143Chi Harold Liu, Jian Shi and Jun Fan

xvi Contents

8 Energy-Aware Virtual Machine Consolidation in IaaS Cloud Computing ������������������������������������������������������������������������������������������������ 179Md Hasanul Ferdaus and Manzur Murshed

9 Software-Defined Networking (SDN) for Cloud Applications ������������� 209Lin Lin and Ping Lin

Part III Advances in Cloud Technologies and Future Trends ����������������� 235

10 Virtualization and Cloud Security: Benefits, Caveats, and Future Developments ������������������������������������������������������������������������������� 237Flavio Lombardi and Roberto Di Pietro

11 Quality-of-Service Data Warehouse for the Selection of Cloud Services: A Recent Trend�������������������������������������������������������������� 257Ahmad Karawash, Hamid Mcheick and Mohamed Dbouk

12 Characterizing Cloud Federation Approaches�������������������������������������� 277Attila Kertesz

13 Security Aspects of Database-as-a-Service (DBaaS) in Cloud Computing �������������������������������������������������������������������������������� 297Faria Mehak, Rahat Masood, Yumna Ghazi, Muhammad Awais Shibli and Sharifullah Khan

14 Beyond the Clouds: How Should Next Generation Utility Computing Infrastructures Be Designed? ��������������������������������������������� 325Marin Bertier, Frédéric Desprez, Gilles Fedak, Adrien Lebre, Anne-Cécile Orgerie, Jonathan Pastor, Flavien Quesnel, Jonathan Rouzaud-Cornabas and Cédric Tedeschi

Index ���������������������������������������������������������������������������������������������������������������� 347

xvii

About the Editor

Professor Zaigham Mahmood is a published author of 11 books, 5 of which are dedicated to Electronic Government and Human Factors; and the other 6 focus on the subject of Cloud Computing including: Cloud Computing: Concepts, Technolo-gy & Architecture; Cloud Computing: Methods and Practical Approaches; Software Engineering Frameworks for the Cloud Computing Paradigm; Cloud Computing for Enterprise Architectures; Continued Rise of the Cloud: Advances and Trends in Cloud Computing; and Cloud Computing: Challenges, Limitations and R&D Solutions. Additionally, he is developing two new books to appear in 2015. He has also published more than 100 articles and book chapters and organized numerous conference tracks and workshops.

Professor Mahmood is the Editor-in-Chief of Journal of E-Government Studies and Best Practices as well as the Series Editor-in-Chief of the IGI book series on E-Government and Digital Divide. He is a Senior Technology Consultant at Debe-sis Education UK and Associate Lecturer (Research) at the University of Derby UK. He further holds positions as Foreign Professor at NUST and IIU universities in Islamabad Pakistan and Professor Extraordinaire at the North West University Potchefstroom South Africa. Professor Mahmood is also a certified cloud comput-ing instructor and a regular speaker at international conferences devoted to Cloud Computing and E-Government. His specialized areas of research include distrib-uted computing, project management, and e-government.1,2

1 School of Computing and Mathematics, University of Derby, Derby, UK e-mail: z.mahmood@debesis.co.uk

2 Business Management and Informatics Unit, North West University, Potchefstroom, South Africa

xix

Contributors

Marin Bertier Inria, Campus universitaire de Beaulieu, Rennes, France

Rodrigo N. Calheiros Department of Computing and Information Systems, The University of Melbourne, Parkville, VIC, Australia

Inderveer Chana Computer Science and Engineering Department, Thapar University, Patiala, Punjab, India

Mohamed Dbouk Ecole Doctorale des Sciences et de Technologie, Lebanese University, Hadath-Beirut, Lebanon

Frédéric Desprez Inria, Campus universitaire de Beaulieu, Rennes, France

Roberto Di Pietro SPRINGeR Research Group, Maths and Physics Department, Roma Tre University, Rome, Italy

Jun Fan School of Software, Beijing Institute of Technology, Beijing, P.R. China

Gilles Fedak Inria, Campus universitaire de Beaulieu, Rennes, France

Md Hasanul Ferdaus Faculty of Information Technology, Monash University, Churchill, VIC, Australia

G.R. Gangadharan Institute for Development and Research in Banking Technology, Hyderabad, India

Yumna Ghazi School of Electrical Engineering and Computer Science, National University of Sciences and Technology, Islamabad, Pakistan

Danielo G. Gomes Group of Computer Networks, Software Engineering and Systems (GREat), Universidade Federal do Ceará, Fortaleza—CE, Brazil

Anwar Haque Bell Canada, Hamilton, ON, Canada

Joarder Mohammad Mustafa Kamal Gippsland School of Faculty of Information Technology, Monash University, Clayton, VIC, Australia

xx Contributors

Ahmad Karawash Department of Computer Science, University of Quebec at Chicoutimi (UQAC), Chicoutimi, Canada

Ecole Doctorale des Sciences et de Technologie, Lebanese University, Hadath-Beirut, Lebanon

Attila Kertesz MTA SZTAKI, Budapest, Hungary

Software Engineering Department, University of Szeged, Szeged, Hungary

Sharifullah Khan School of Electrical Engineering and Computer Science, National University of Sciences and Technology, Islamabad, Pakistan

Adrien Lebre Inria, Campus universitaire de Beaulieu, Rennes, France

Lin Lin Avaya Canada, Belleville, ON, Canada

Ping Lin Avaya Canada, Belleville, ON, Canada

Chi Harold Liu School of Software, Beijing Institute of Technology, Beijing, P.R. China

Flavio Lombardi SPRINGeR Research Group, Maths and Physics Department, Roma Tre University, Rome, Italy

Mariam Kiran Department of Computer Science, University of Sheffield, Bradford, Bradford, UK

Rahat Masood School of Electrical Engineering and Computer Science, National University of Sciences and Technology, Islamabad, Pakistan

Hamid Mcheick Department of Computer Science, University of Quebec at Chicoutimi (UQAC), Chicoutimi, Canada

Faria Mehak School of Electrical Engineering and Computer Science, National University of Sciences and Technology, Islamabad, Pakistan

Manzur Murshed Faculty of Science and Technology, Federation University, Churchill, VIC, AustraliaSchool of Information Technology, Faculty of Science, Federation University Australia, Churchill, VIC, Australia

Anne-Cécile Orgerie Inria, Campus universitaire de Beaulieu, Rennes, France

Jonathan Pastor Inria, Campus universitaire de Beaulieu, Rennes, France

Shaga Praveen Institute for Development and Research in Banking Technology, Hyderabad, India

Flavien Quesnel Inria, Campus universitaire de Beaulieu, Rennes, France

Jonathan Rouzaud-Cornabas Inria, Campus universitaire de Beaulieu, Rennes, France

xxiContributors

Saeed Shafieian School of Computing, Queen’s University, Kingston, ON, Canada

Jian Shi School of Software, Beijing Institute of Technology, Beijing, P.R. China

Muhammad Awais Shibli School of Electrical Engineering and Computer Science, National University of Sciences and Technology, Islamabad, Pakistan

Sukhpal Singh Computer Science and Engineering Department, Thapar University, Patiala, Punjab, India

Cédric Tedeschi Inria, Campus universitaire de Beaulieu, Rennes, France

Thiago Teixeira Sá Group of Computer Networks, Software Engineering and Systems (GREat), Universidade Federal do Ceará, Fortaleza—CE, Brazil

Mohammad Zulkernine School of Computing, Queen’s University, Kingston, ON, Canada