[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-228335-en":3,"doc-seo-228335-105":30,"detail-sidebar-cat-0-en-105":92},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":20,"is_downloadable":20,"audit_status":20,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":14,"update_tm":28,"read_time":29},228335,962085564381,"Bintang","https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8",8,"Research & Report","Towards Trusted Cloud Computing","Cloud computing infrastructures help companies reduce costs by outsourcing on-demand computation, yet they leave customers without reliable ways to verify data confidentiality and computation integrity. A trusted cloud computing platform (TCCP) is proposed to give IaaS providers a closed-box execution environment for guest virtual machines. TCCP also supports remote attestation so users can confirm whether the IaaS backend is secure before launching VMs, extending attestation to the entire service.","Towards Trusted Cloud Computing  \nNuno Santos Krishna P. Gummadi Rodrigo Rodrigues  \nMPI-SWS  \nAbstract  \nCloud computing infrastructures enable companies to cut costs by outsourcing computations on-demand. However, clients of cloud computing services currently have no means of verifying the confidentiality and integrity of their data and computation.  \nTo address this problem we propose the design of a trusted cloud computing platform (TCCP) . TCCP enables Infrastructure as a Service (IaaS) providers such as Amazon EC2 to provide a closed box execution environment that guarantees confidential execution of guest virtual machines. Moreover, it allows users to attest to the IaaS provider and determine whether or not the service is secure before they launch their virtual machines.  \n1 Introduction  \nCompanies can greatly reduce IT costs by offloading data and computation to cloud computing services. Still, many companies are reluctant to do so, mostly due to outstanding security concerns. A recent study [2] surveyed more than 500 chief executives and IT managersin 17 countries, and found that despite the potential benefits, executives “trust existing internal systems over cloud-based systems due to fear about security threatsand loss of control of data and systems”. One of the most serious concerns is the possibility of confidentiality violations. Either maliciously or accidentally, cloud provider’s employees can tamper with or leak a company’s data. Such actions can severely damage the reputation or finances of a company.  \nIn order to prevent confidentiality violations, cloud services’ customers might resort to encryption. While encryption is effective in securing data before it is stored at the provider, it cannot be applied in services where data is to be computed, since the unencrypted data must reside in the memory of the host running the computation. In Infrastructure as a Service (IaaS) cloud services  \nsuch as Amazon’s EC2, the provider hosts virtual machines (VMs) on behalf of its customers, who can do arbitrary computations. In these systems, anyone with privileged access to the host can read or manipulate a customer’s data. Consequently, customers cannot protect their VMs on their own.  \nCloud service providers are making a substantial effort to secure their systems, in order to minimize the threat of insider attacks, and reinforce the confidence of customers. For example, they protect and restrict access to the hardware facilities, adopt stringent accountability and auditing procedures, and minimize the number of staff who have access to critical components of the infrastructure [8] . Nevertheless, insiders that administer the software systems at the provider backend ultimately still possess the technical means to access customers’VMs. Thus, there is a clear need for a technical solution that guarantees the confidentiality and integrity of computation, in a way that is verifiable by the customers of the service.  \nTraditional trusted computing platforms like Terra [4] take a compelling approach to this problem. For example, Terra is able to prevent the owner of a physical host from inspecting and interfering with a computation. Terra also provides a remote attestation capability that enables a remote party to determine upfront whether the host can securely run the computation. This mechanism reliably detects whether or not the host is running a platform implementation that the remote party trusts. These platforms can effectively secure a VM running ina single host. However, many providers run data centers comprising several hundreds of machines, and a customer’s VM can be dynamically scheduled to run on anyone of them. This complexity and the opaqueness of the provider backend creates vulnerabilities that traditional trusted platforms cannot address.  \nThis paper proposes a trusted cloud computing platform (TCCP) for ensuring the confidentiality and integrity of computations that are outsourced to IaaS ser-  \nU  \nFigure 1: Simp","cbCaicEf9uIuLLOL","https://ap.wps.com/l/cbCaicEf9uIuLLOL","pdf",513291,1,5,"English","en",105,"# Introduction\n## Infrastructure as a Service\n## Background","[{\"question\":\"What security problem does trusted cloud computing aim to solve?\",\"answer\":\"It targets confidentiality violations and integrity risks when cloud providers can potentially inspect, tamper with, or leak customer data during computation.\"},{\"question\":\"Why is encryption insufficient for outsourced computations in IaaS?\",\"answer\":\"While encryption protects data before storage, computation requires unencrypted data to be present in the host memory, exposing it to privileged access.\"},{\"question\":\"How does the proposed TCCP improve on traditional trusted computing platforms?\",\"answer\":\"TCCP provides a closed-box execution environment for VMs and extends remote attestation to the entire IaaS service backend, addressing the complexity of dynamic scheduling across many machines.\"}]","Towards Trusted Cloud Computing | PDF",1789024981,13,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":13,"keywords":34,"description":14,"schema_data":35,"social_meta":87,"head_meta":89,"extra_data":91,"updated_unix":28},"towards-trusted-cloud-computing","",{"@graph":36,"@context":86},[37,54,69],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":20},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/document/","Document",2,{"item":49,"name":12,"@type":43,"position":50},"https://docshare.wps.com/document/research-report/",3,{"item":52,"name":13,"@type":43,"position":53},"https://docshare.wps.com/document/towards-trusted-cloud-computing/228335/",4,{"url":52,"name":13,"@type":55,"author":56,"headline":13,"publisher":58,"fileFormat":61,"inLanguage":23,"description":14,"dateModified":62,"datePublished":63,"encodingFormat":61,"isAccessibleForFree":64,"interactionStatistic":65},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/pdf","2026-09-11","2026-09-10",true,{"@type":66,"interactionType":67,"userInteractionCount":20},"InteractionCounter",{"@type":68},"ViewAction",{"@type":70,"mainEntity":71},"FAQPage",[72,78,82],{"name":73,"@type":74,"acceptedAnswer":75},"What security problem does trusted cloud computing aim to solve?","Question",{"text":76,"@type":77},"It targets confidentiality violations and integrity risks when cloud providers can potentially inspect, tamper with, or leak customer data during computation.","Answer",{"name":79,"@type":74,"acceptedAnswer":80},"Why is encryption insufficient for outsourced computations in IaaS?",{"text":81,"@type":77},"While encryption protects data before storage, computation requires unencrypted data to be present in the host memory, exposing it to privileged access.",{"name":83,"@type":74,"acceptedAnswer":84},"How does the proposed TCCP improve on traditional trusted computing platforms?",{"text":85,"@type":77},"TCCP provides a closed-box execution environment for VMs and extends remote attestation to the entire IaaS service backend, addressing the complexity of dynamic scheduling across many machines.","https://schema.org",{"og:url":52,"og:type":88,"og:title":13,"og:site_name":59,"og:description":14},"article",{"robots":90,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":93},[94,98,102,106,110,115,120,123,128,131,135],{"id":20,"doc_module":4,"doc_module_name":46,"category_name":95,"show_sort_weight":96,"slug":97},"Story & Novel",90,"story-novel",{"id":47,"doc_module":4,"doc_module_name":46,"category_name":99,"show_sort_weight":100,"slug":101},"Literature",80,"literature",{"id":53,"doc_module":4,"doc_module_name":46,"category_name":103,"show_sort_weight":104,"slug":105},"Exam",70,"exam",{"id":21,"doc_module":4,"doc_module_name":46,"category_name":107,"show_sort_weight":108,"slug":109},"Comic",60,"comic",{"id":111,"doc_module":4,"doc_module_name":46,"category_name":112,"show_sort_weight":113,"slug":114},6,"Technology",50,"technology",{"id":116,"doc_module":4,"doc_module_name":46,"category_name":117,"show_sort_weight":118,"slug":119},7,"Healthcare",40,"healthcare",{"id":11,"doc_module":4,"doc_module_name":46,"category_name":12,"show_sort_weight":121,"slug":122},30,"research-report",{"id":124,"doc_module":4,"doc_module_name":46,"category_name":125,"show_sort_weight":126,"slug":127},9,"Religion & Spirituality",20,"religion-spirituality",{"id":126,"doc_module":4,"doc_module_name":46,"category_name":129,"show_sort_weight":126,"slug":130},"World Cup","world-cup",{"id":132,"doc_module":4,"doc_module_name":46,"category_name":133,"show_sort_weight":132,"slug":134},10,"Lifestyle","lifestyle",{"id":136,"doc_module":4,"doc_module_name":46,"category_name":137,"show_sort_weight":21,"slug":138},19,"General","general"]