Deakin University
Browse

TOSSMA: a tenant-oriented SaaS security management architecture

Version 2 2024-06-04, 06:01
Version 1 2016-10-10, 09:45
conference contribution
posted on 2024-06-04, 06:01 authored by M Almorsy, J Grundy, AS Ibrahim
Multi-tenancy helps service providers to save costs, improve resource utilization, and reduce service customization and maintenance time by sharing of resources and services. On the other hand, supporting multi-tenancy adds more complexity to the shared application's required capabilities. Security is a key requirement that must be addressed when engineering new SaaS applications or when re-engineering existing applications to support multi-tenancy. Traditional security (re)engineering approaches do not fit with the multi-tenancy application model where tenants and their security requirements emerge after the system was first developed. Enabling, runtime, adaptable and tenant-oriented application security customization on single service instance is a key challenging security goal in multi-tenant application engineering. In this paper we introduce TOSSMA, a Tenant-Oriented SaaS Security Management Architecture. TOSSMA allows service providers to enable their tenants in defining, customizing and enforcing their security requirements without having to go back to application developers for maintenance or security customizations. TOSSMA supports security management for both new and existing systems. Service providers are not required to write security integration code to use a specific security platform or mechanism. In this paper, we describe details of our approach and architecture, our prototype implementation of TOSSMA, give a usage example of securing a multi-tenant SaaS, and discuss our evaluation experiments of TOSSMA.

History

Pagination

981-988

Location

Honolulu, Hawaii

Start date

2012-06-24

End date

2012-06-29

ISBN-13

9780769547558

Language

eng

Publication classification

E Conference publication, E1.1 Full written paper - refereed

Copyright notice

2012, IEEE

Title of proceedings

CLOUD 2012 : Proceedings of the 5th IEEE International Conference on Cloud Computing 2012

Event

Cloud Computing. IEEE International Conference (5th : 2012 : Honolulu, Hawaii)

Publisher

IEEE

Place of publication

Piscataway, N.J.

Usage metrics

    Research Publications

    Categories

    No categories selected

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC