Remote and deep attestations to mitigate threats in Cloud Mash-Up services

Cloud computing is an emerging technology able to offer a plethora of new advanced services. Cloud operators can use and combine such services in order to build new Mash-up Cloud platform and applications. However, security issues have strongly limited the large-scale adoption of Cloud computing, especially in business environments and similar application scenarios, where sensitive date need to be protected. At the same time the Trusted Computing technology is bringing a new way of thinking about security of systems. This paper deals with the importance to leverage the Trusted Computing for encouraging the development of secure distributed Mash-up Cloud services. We show how the Remote and Deep Attestation protocols make secure both the physical hosts and the virtual machines in a Cloud infrastructure, providing a solid framework for the deployment of federated environments.