Security-by-design in multi-cloud applications: An optimization approach

This paper presents a novel security-driven approach for the design, development and deployment of multi-cloud applications. It is based on a fully-automatable process that supports the developer from the elicitation of the application requirements up to the identification of the optimal deployment configuration, allowing to find the best compromise between overall cost and achieved level of security. The proposed optimization process takes explicitly into account two critical aspects that are often overlooked in similar approaches, namely the cloud on-demand leasing model for the allocation of resources and the impact that the deployment has on the security policies actually implemented by a complex application.