SecIngress:An API Gateway Framework to Secure Cloud Applications Based on N-Variant System

作     者：Dacheng Zhou Hongchang Chen Guozhen Cheng Weizhen He Lingshu Li Dacheng Zhou;Hongchang Chen;Guozhen Cheng;Weizhen He;Lingshu Li

作者机构：National Digital Switching System Engineering and Technological R&D CenterZhengzhouHenan 450002China 

出 版 物：《China Communications》 (中国通信（英文版）)

年 卷 期：2021年第18卷第8期

页      面：17-34页

核心收录：

学科分类：0839[工学-网络空间安全] 08[工学] 081201[工学-计算机系统结构] 0812[工学-计算机科学与技术（可授工学、理学学位）] 

基　　金：the Foundation of the National Natural Science Foundation of China(62072467) the Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003) the Foundation of the National Natural Science Foundation of China(62002383) 

主　　题：N-variant system API gateway cloud security analytic hierarchy process 

摘      要：Based on the diversified technology and the cross-validation mechanism,the N-variant system provides a secure service architecture for cloud providers to protect the cloud applications from attacks by executing multiple variants of a single software in parallel and then checking their behaviors’***,it is complex to upgrade current Software as a Service(SaaS)applications to adapt N-variant system *** arise from the inability of tenants to adjust the application architecture in the cloud environment,and the difficulty for cloud service providers to implement N-variant systems using existing API *** paper proposes SecIngress,an API gateway framework,to overcome the challenge that it is hard in the cloud environment to upgrade the applications based on N-variants *** design a two-stage timeout processing method to lessen the service latency and an Analytic Hierarchy Process Voting under the Metadata mechanism(AHPVM)to enhance voting *** implement a prototype in a testbed environment and analyze the security and performance metrics before and after deploying the prototype to show the effectiveness of *** results reveal that SecIngress enhances the reliability of cloud applications with acceptable performance degradation.