Community-Based Secure Information and Resource Sharing in AWS Public Cloud

Abstract

A public cloud provides enterprises and organizations with a secure and efficient environment to deploy their systems. While organizations and companies benefit from moving to cloud platform, it is likely that similar cyber attacks will happen to organizations which share the same cloud platform. One way to mitigate this risk is to share cyber security information among these organizations. Unfortunately, popular public cloud platform AWS is lacking an accepted access control model for cyber security information sharing. We propose an access control model for customers who use AWS platform as their infrastructure platform to securely share cyber attack information. Our model enables secure cyber information sharing and collaborations in public cloud environment on a community basis.